This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/EE89292C896211EA9036675BC4F9AE02.roa
File:                     EE89292C896211EA9036675BC4F9AE02.roa (raw, json)
Hash identifier:          3LNj+VNbAxClqlN1VcKlgNojhVB92+u2aoVOXpqR2bY=
Subject key identifier:   A1:81:11:78:3C:1F:31:12:5D:FB:C7:CC:30:8E:5A:CD:27:B1:E1:21
Certificate issuer:       /CN=A912481E/serialNumber=565A11F96D2D8E84C3861FE2E0FB31DD0BE406B2
Certificate serial:       09F8
Authority key identifier: 56:5A:11:F9:6D:2D:8E:84:C3:86:1F:E2:E0:FB:31:DD:0B:E4:06:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/EE89292C896211EA9036675BC4F9AE02.roa
Signing time:             Wed 12 Nov 2025 19:09:52 +0000
ROA not before:           Wed 12 Nov 2025 19:09:52 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     132165
IP address blocks:        103.131.8.0/24 maxlen: 24
                          103.131.9.0/24 maxlen: 24
                          103.131.10.0/24 maxlen: 24
                          103.131.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.crl
                          rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2552 (0x9f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912481E, serialNumber=565A11F96D2D8E84C3861FE2E0FB31DD0BE406B2
        Validity
            Not Before: Nov 12 19:09:52 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6914db80-49a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:d6:bb:5d:eb:6e:10:b2:dc:61:f0:a9:48:
                    0a:74:d2:79:d1:b3:66:b4:02:17:70:d5:cc:82:b6:
                    8e:ac:64:37:85:5d:d8:e8:f4:6f:7c:94:91:b4:fc:
                    e8:47:a7:10:d8:ed:90:ef:99:8d:a8:10:08:d0:d8:
                    2c:d5:90:ea:5b:21:aa:ac:94:65:85:ad:d7:d5:be:
                    7d:43:6e:fc:34:48:31:71:71:bd:1f:fd:b8:53:a1:
                    83:0d:27:06:4e:1d:53:72:c8:bd:fe:99:ad:5e:be:
                    a7:2c:7e:13:44:08:18:a1:38:a5:f8:55:f2:13:b2:
                    e5:5b:b4:95:e8:30:8e:aa:7a:fe:62:fc:14:d4:f8:
                    73:23:23:99:56:58:2d:ec:34:18:97:48:4c:a4:aa:
                    cb:55:21:d7:1d:58:08:a2:8e:5f:ca:c7:e9:b2:d6:
                    d0:71:24:2e:44:38:ca:89:e4:8c:8d:af:c3:78:fc:
                    9c:e5:5b:19:98:99:33:eb:99:fa:a1:ff:c0:c2:10:
                    4e:65:8e:31:c8:19:31:ae:db:46:2f:76:34:27:94:
                    9b:5c:61:50:19:b1:00:96:f1:bf:d7:32:a7:05:77:
                    89:71:ee:02:77:25:af:d9:c3:3d:2d:3c:a3:e0:d2:
                    ae:11:0b:41:51:93:e6:56:1d:72:9e:b8:5d:32:a1:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:81:11:78:3C:1F:31:12:5D:FB:C7:CC:30:8E:5A:CD:27:B1:E1:21
            X509v3 Authority Key Identifier:
                keyid:56:5A:11:F9:6D:2D:8E:84:C3:86:1F:E2:E0:FB:31:DD:0B:E4:06:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/EE89292C896211EA9036675BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:49:f3:79:aa:90:af:a7:95:a2:e6:b3:c2:a9:0c:5d:15:4a:
         de:75:81:88:c2:52:bd:96:ca:11:13:6d:18:5c:24:c0:29:46:
         b6:77:92:69:61:4c:e5:21:57:97:7f:9c:4e:c4:1c:69:9c:29:
         31:e5:35:ac:23:b9:df:64:40:ce:34:7e:f1:4a:df:46:9b:17:
         9c:1b:01:e8:b0:da:3a:be:37:ba:68:39:04:51:35:a3:19:1d:
         e0:c4:50:87:8a:77:c3:9b:ec:9a:95:08:07:fc:3a:d1:34:ec:
         d0:ca:9c:c1:ca:e2:7c:f1:66:15:7d:73:f2:73:d1:9e:d5:6e:
         03:fe:63:c7:d9:f5:6d:38:76:43:22:95:ac:e2:d7:c0:12:dd:
         4b:7b:ea:bd:4c:02:08:00:6e:e8:1d:1c:af:b7:69:d0:01:d7:
         9d:12:25:ab:ee:cc:02:58:11:65:f3:ff:2f:82:6f:fa:e2:8b:
         3c:2a:8f:98:2d:71:21:9a:ca:f4:fb:90:b1:de:30:e8:ba:05:
         6e:5d:55:ff:48:1b:17:a1:0c:2f:b8:c3:62:5e:d1:d4:6e:ce:
         75:dc:39:63:50:df:0b:1a:93:f7:80:62:18:a4:d8:d8:7c:e7:
         ff:84:9a:2f:31:cb:72:28:92:74:eb:64:54:47:ea:dd:e6:dd:
         51:41:23:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:11:42 2025 by rpki-client