This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/F53FF9E668F411EFA1530C36C4F9AE02.roa
File:                     F53FF9E668F411EFA1530C36C4F9AE02.roa (raw, json)
Hash identifier:          8u8ukooKAbnYCoCoCcqh3LJNzpT+wb7zAAtytRCCJns=
Subject key identifier:   28:4F:FB:85:9F:37:68:87:75:C4:8E:AE:C3:E2:AF:9C:80:B0:0E:FE
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       03CC
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/F53FF9E668F411EFA1530C36C4F9AE02.roa
Signing time:             Tue 02 Dec 2025 23:58:54 +0000
ROA not before:           Tue 02 Dec 2025 23:58:54 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     135670
IP address blocks:        103.240.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Dec  2 23:58:54 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692f7d3e-f7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fc:c4:62:eb:e6:60:46:01:84:94:9e:37:16:
                    f9:38:0d:d7:72:b2:cc:c9:b2:49:92:82:42:d5:c4:
                    21:1d:84:30:b1:09:81:24:20:e5:2e:23:7c:c3:70:
                    8e:1d:86:ac:0c:0c:d5:b3:bb:5c:f3:e9:34:b6:71:
                    d2:a3:d2:5f:de:fb:1d:ac:79:e1:3f:d9:a5:b7:9c:
                    61:f9:d3:de:bc:94:7d:b2:8a:fa:1f:3e:f1:e3:31:
                    ac:0e:0e:75:3b:ee:ff:fe:d2:2a:06:70:40:e3:75:
                    7b:54:db:bc:c1:d7:b1:b7:ab:fb:ad:42:52:e1:40:
                    1c:48:39:35:ea:64:26:66:3f:b2:82:8c:de:f0:b8:
                    d0:5c:10:18:19:91:5a:f4:b2:22:bd:4f:e7:3c:e6:
                    88:51:04:ae:16:29:db:e3:21:3d:40:83:8f:28:8b:
                    13:a9:33:1e:52:ba:aa:ec:5f:7e:d0:04:27:fb:ba:
                    60:61:c6:3b:a6:5a:51:1a:98:26:5d:3e:58:ac:9d:
                    87:a1:3a:38:98:af:48:67:4e:00:19:46:66:f8:4b:
                    05:1c:53:03:78:1f:4a:cb:ba:98:81:72:60:12:c9:
                    ca:e8:93:4a:4f:1c:16:f1:a0:2f:03:58:73:28:7a:
                    62:c2:c2:7a:e2:b0:10:46:a2:cb:db:21:96:d7:7e:
                    09:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4F:FB:85:9F:37:68:87:75:C4:8E:AE:C3:E2:AF:9C:80:B0:0E:FE
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/F53FF9E668F411EFA1530C36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:73:48:36:be:59:af:72:c3:df:e1:91:65:72:f0:4a:26:9f:
         07:a0:b2:44:01:46:cb:b9:d0:4b:29:75:20:01:4c:db:84:d7:
         88:8a:74:7a:0b:ad:11:12:5d:3c:75:10:3b:5d:ce:a4:5a:ba:
         21:6e:8e:d9:42:41:04:2f:fd:a6:5b:7a:26:bb:15:bc:e4:0a:
         f4:93:aa:3d:64:56:98:59:c0:19:b6:15:a7:2d:2d:2c:47:0d:
         55:54:37:02:3a:df:ed:5e:38:d2:2a:a1:f8:58:7b:1c:92:94:
         1e:66:81:2c:8b:e0:40:49:39:6e:fd:83:78:12:c8:3c:57:aa:
         67:d3:7d:4f:8f:92:92:68:00:39:dd:0e:55:f8:d3:b3:b1:0d:
         5f:8e:7c:5b:bd:9b:ca:fd:5e:c1:3c:1b:ab:8c:74:23:5c:d9:
         e4:f8:6e:27:10:3e:2a:89:ae:0d:2a:e5:c3:93:4d:78:78:ae:
         7e:20:b1:34:e3:54:8f:29:89:3c:53:6e:ef:b2:82:c7:46:f0:
         ef:cf:36:c4:1b:66:34:c8:db:9c:f2:22:94:19:07:bd:d5:fe:
         8b:aa:b1:9b:20:03:a9:70:37:14:dd:9a:26:53:f6:56:53:fc:
         8c:2f:9a:ae:42:6c:9c:5b:6a:8c:a1:a2:0a:ae:d1:20:b6:24:
         a0:e0:29:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:07 2025 by rpki-client