This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/B3DED21C86C911F0BAF28043C4F9AE02.roa
File:                     B3DED21C86C911F0BAF28043C4F9AE02.roa (raw, json)
Hash identifier:          9/hSsX9hwKIrL5GIgW4HmDzYzfmGg7Yjp9XdBQRPSv8=
Subject key identifier:   89:92:06:44:5C:B7:F0:32:41:54:F6:B7:65:1F:10:1B:E7:48:30:B2
Certificate issuer:       /CN=A911F92A/serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD
Certificate serial:       33
Authority key identifier: B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/B3DED21C86C911F0BAF28043C4F9AE02.roa
Signing time:             Fri 05 Dec 2025 05:45:45 +0000
ROA not before:           Fri 05 Dec 2025 05:45:45 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     140051
IP address blocks:        103.199.82.0/23 maxlen: 24
                          203.80.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl
                          rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F92A, serialNumber=B82A9CF6F9CC803C6A6B70662D807EC51D82DBDD
        Validity
            Not Before: Dec  5 05:45:45 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69327189-291a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:95:af:69:56:56:ee:dd:44:bb:b6:8d:41:d8:
                    85:47:a3:72:81:40:80:fb:5c:86:04:70:8a:45:51:
                    00:5a:c9:91:a5:cf:ff:64:eb:a7:b5:74:76:b6:7e:
                    3f:1b:a9:80:bd:bf:73:1d:1f:f1:b6:7f:b4:a2:c9:
                    3d:69:2f:15:68:cb:90:9e:01:fc:39:51:46:d7:2e:
                    a6:a2:04:ee:ab:b4:d6:1d:ce:02:c9:1b:95:76:f3:
                    f0:5c:d2:23:3d:2d:be:52:dc:91:6d:c0:93:70:ae:
                    21:17:09:01:5d:1b:bd:ed:cc:ef:e1:08:17:27:a5:
                    2a:90:30:da:6b:b6:21:5d:bd:72:f7:91:d3:35:36:
                    b4:30:dd:b0:33:8b:11:08:5c:e8:25:a9:ea:72:fd:
                    93:9c:7f:e8:e3:a3:e3:f0:ad:70:0d:c5:c4:9f:b5:
                    27:fb:28:41:6f:25:48:d6:8c:3b:13:42:09:34:6f:
                    55:59:ec:66:3c:9a:99:6c:f5:5f:52:a2:40:12:38:
                    d8:7e:f4:b5:5a:97:81:c2:e7:fe:72:66:55:d8:50:
                    c5:a0:98:85:6e:ed:4b:10:af:a8:cc:8c:eb:4d:d0:
                    38:a7:1a:cd:27:59:0d:f3:ea:18:3e:b6:1e:01:7a:
                    bd:a7:fc:ec:0e:19:d8:bd:32:48:54:22:4f:fb:87:
                    9e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:92:06:44:5C:B7:F0:32:41:54:F6:B7:65:1F:10:1B:E7:48:30:B2
            X509v3 Authority Key Identifier:
                keyid:B8:2A:9C:F6:F9:CC:80:3C:6A:6B:70:66:2D:80:7E:C5:1D:82:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/uCqc9vnMgDxqa3BmLYB-xR2C290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCqc9vnMgDxqa3BmLYB-xR2C290.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F92A/2660378286C911F0872F9D2FC4F9AE02/B3DED21C86C911F0BAF28043C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.199.82.0/23
                  203.80.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:8c:dc:1d:2a:f5:dc:52:36:ba:2d:47:21:74:9d:d7:dd:06:
         1b:1a:1c:41:1b:65:bf:c9:68:23:33:95:8d:74:3a:52:d5:44:
         3b:af:9f:34:84:5d:34:db:6f:88:04:dd:7f:cc:e7:4d:9d:5c:
         de:b4:0b:58:7b:50:a8:bd:0b:59:74:f3:a3:98:6b:72:87:63:
         fc:d8:6d:3b:6b:7e:d9:3f:99:8c:f5:d9:7a:3f:41:bf:ad:0f:
         92:81:f2:b8:a9:ce:49:df:a5:bd:a6:73:e6:63:2e:97:98:ae:
         e1:ce:7e:32:51:68:3c:73:cd:a5:3f:e1:d8:a0:9b:d6:73:cd:
         4a:0b:71:b8:85:01:f9:38:43:ed:c1:97:6f:c6:88:da:a2:69:
         a7:86:ae:5a:e8:e4:bf:04:fd:53:67:a7:9f:ca:90:b8:db:de:
         47:61:bc:68:e4:4e:83:c5:75:30:87:7a:48:82:a4:bb:29:38:
         3c:d6:dc:7a:f3:58:c0:aa:84:22:88:4b:a1:a5:30:39:78:7a:
         bd:e7:24:4f:b0:58:db:74:f9:cb:b8:76:f6:86:b3:02:e3:4e:
         c6:36:69:3b:55:ca:0c:34:61:31:7b:75:17:ee:ef:98:67:17:
         16:71:ae:cc:99:7e:a4:6e:a2:95:44:05:df:c4:1d:b3:ef:02:
         9d:c2:02:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:15:12 2025 by rpki-client