This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/B3677C08D2AA11F0850BC856C4F9AE02.roa
File:                     B3677C08D2AA11F0850BC856C4F9AE02.roa (raw, json)
Hash identifier:          k/lLY0AMn3sVt+u3zakrgiqTYvFE4y1vIBdfhQf434s=
Subject key identifier:   B5:23:5B:DF:34:4E:A5:C8:A2:AB:A4:77:E8:F9:8F:E1:F4:77:5F:32
Certificate issuer:       /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Certificate serial:       01B0
Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/B3677C08D2AA11F0850BC856C4F9AE02.roa
Signing time:             Sat 06 Dec 2025 13:51:45 +0000
ROA not before:           Sat 06 Dec 2025 13:51:45 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     151786
IP address blocks:        103.72.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl
                          rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 01:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
        Validity
            Not Before: Dec  6 13:51:45 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=693434f0-41ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:a9:8a:9c:0f:4e:00:1b:9e:88:5a:07:f4:
                    ca:a6:f6:c3:08:d3:62:8b:1a:fc:68:f4:49:98:54:
                    7f:ef:cd:d6:30:4f:18:81:5a:d7:21:c2:c0:4f:2e:
                    39:f4:56:eb:f0:6a:7f:ab:c9:50:ca:b8:44:3a:32:
                    c1:e7:16:14:57:43:6e:27:58:81:7b:87:b4:b0:07:
                    fd:10:54:f0:8a:f4:ce:dd:7e:65:1b:0b:f7:61:6d:
                    a1:34:c0:ad:60:99:1c:f6:12:f9:e3:74:3a:fa:e3:
                    0e:7d:13:90:ea:4d:81:91:1a:c8:76:f8:79:60:43:
                    e7:82:07:d0:a5:fa:86:d5:71:17:d0:d0:26:2d:4f:
                    64:8a:c0:8e:0e:43:80:31:a3:6f:69:2a:2d:d0:d7:
                    88:41:6c:52:1d:60:4e:b7:32:86:e1:6d:c6:c2:ec:
                    4c:96:32:4f:80:f6:b5:84:63:45:25:93:18:26:c3:
                    96:6e:6b:17:f4:a0:31:31:30:3c:0a:8f:e0:fd:77:
                    1d:34:6f:fa:3b:83:ea:c1:36:b9:c1:a7:f4:b3:ce:
                    36:62:13:6d:10:76:ba:3d:08:a7:63:06:c6:9e:65:
                    58:83:00:c1:d3:2b:7e:12:c8:30:eb:fc:68:d8:9e:
                    2d:f7:22:a4:5c:56:82:e5:d9:8f:f4:7e:f2:cb:f1:
                    b4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:23:5B:DF:34:4E:A5:C8:A2:AB:A4:77:E8:F9:8F:E1:F4:77:5F:32
            X509v3 Authority Key Identifier:
                keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/B3677C08D2AA11F0850BC856C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:31:33:2f:44:67:a3:04:95:31:37:a6:c2:6b:c8:8d:07:3b:
         c2:4d:33:3b:8f:6b:90:2a:b8:73:9f:ea:c4:ed:b3:31:8d:c4:
         ff:90:77:cf:74:95:3c:47:c8:d2:7a:65:84:24:85:53:26:6e:
         a3:6e:4a:f8:8b:08:a6:07:68:e0:3f:ee:13:78:0f:1d:b3:e1:
         da:1b:0b:88:c2:1c:32:90:6f:a3:de:aa:a2:93:e7:35:77:b9:
         2c:8f:7d:c3:e7:1e:b3:bb:7c:27:9d:66:42:3d:7c:73:f8:31:
         5a:da:e2:58:8f:54:62:60:a4:b2:de:2f:73:2c:e8:8e:0d:d4:
         1d:47:67:dd:b1:b4:6b:7c:e3:1f:01:f0:a7:a1:9d:02:34:e7:
         40:bf:66:19:08:a2:a9:f1:bb:de:3f:2f:24:6b:c3:37:42:de:
         34:50:20:20:8b:2d:d9:57:e7:99:54:5f:62:0c:63:98:5c:aa:
         6e:0b:75:a2:9a:8d:6f:3a:53:92:8c:fa:73:ff:7c:2b:66:c8:
         55:0a:1e:ad:c3:e2:a8:47:ba:2e:10:81:72:18:04:c5:e4:23:
         3e:84:39:c3:9a:5f:d5:6f:c5:95:10:d5:6e:fe:80:54:1b:8c:
         49:a8:97:6b:66:2e:bf:80:69:c5:c6:2f:22:18:64:be:7e:40:
         c8:aa:13:4e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE
OTMzQTEyN0QwHhcNMjUxMjA2MTM1MTQ1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTM0MzRmMC00MWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAonypipwPTgAbnohaB/TKpvbDCNNiixr8aPRJmFR/783WME8YgVrXIcLATy45
9Fbr8Gp/q8lQyrhEOjLB5xYUV0NuJ1iBe4e0sAf9EFTwivTO3X5lGwv3YW2hNMCt
YJkc9hL543Q6+uMOfROQ6k2BkRrIdvh5YEPnggfQpfqG1XEX0NAmLU9kisCODkOA
MaNvaSot0NeIQWxSHWBOtzKG4W3GwuxMljJPgPa1hGNFJZMYJsOWbmsX9KAxMTA8
Co/g/XcdNG/6O4PqwTa5waf0s842YhNtEHa6PQinYwbGnmVYgwDB0yt+Esgw6/xo
2J4t9yKkXFaC5dmP9H7yy/G0+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLUjW980
TqXIoqukd+j5j+H0d18yMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy
RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF
bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUZGMjUvNjA2NEJBQjI1MkY0MTFFRTg5OEI5QjQzQzRGOUFFMDIvQjM2NzdDMDhE
MkFBMTFGMDg1MEJDODU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnSEEwDQYJKoZIhvcNAQELBQADggEBAA4xMy9EZ6MElTE3
psJryI0HO8JNMzuPa5AquHOf6sTtszGNxP+Qd890lTxHyNJ6ZYQkhVMmbqNuSviL
CKYHaOA/7hN4Dx2z4dobC4jCHDKQb6PeqqKT5zV3uSyPfcPnHrO7fCedZkI9fHP4
MVra4liPVGJgpLLeL3Ms6I4N1B1HZ92xtGt84x8B8KehnQI050C/ZhkIoqnxu94/
LyRrwzdC3jRQICCLLdlX55lUX2IMY5hcqm4LdaKajW86U5KM+nP/fCtmyFUKHq3D
4qhHui4QgXIYBMXkIz6EOcOaX9VvxZUQ1W7+gFQbjEmol2tmLr+AacXGLyIYZL5+
QMiqE04=
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:45:29 2025 by rpki-client