This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C4ADE9F6BC6C11F0A0E57E30C4F9AE02.roa
File:                     C4ADE9F6BC6C11F0A0E57E30C4F9AE02.roa (raw, json)
Hash identifier:          +J7yNaHnWtzfJNPaPkVEyJhoLoGr9zULZmep7i5ViUM=
Subject key identifier:   60:08:98:F7:F5:A9:4C:50:40:6F:8C:11:39:C9:7B:8F:D6:F3:3C:C3
Certificate issuer:       /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Certificate serial:       07C9
Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C4ADE9F6BC6C11F0A0E57E30C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 06:32:59 +0000
ROA not before:           Sat 08 Nov 2025 06:32:59 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     133605
IP address blocks:        103.138.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
                          rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1993 (0x7c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
        Validity
            Not Before: Nov  8 06:32:59 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=690ee41b-a5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c7:c1:37:7a:0e:dc:98:44:71:89:ed:82:19:
                    f7:73:f7:43:9e:ca:20:34:87:d3:2b:be:e4:d0:39:
                    0a:0b:ee:68:9b:6e:ff:e1:26:e2:2c:27:ef:71:74:
                    b2:20:c2:eb:cc:4e:57:64:74:5e:01:98:5e:36:d4:
                    a6:e3:fa:93:95:fd:a1:91:d9:ae:4c:e6:2d:84:ba:
                    d6:3f:f8:60:11:59:04:df:9c:7c:dd:eb:97:af:22:
                    ec:6e:df:b5:fc:bb:31:89:79:7f:e8:76:81:50:db:
                    3d:70:28:37:a2:4a:9f:96:5c:37:91:4e:a5:cd:5a:
                    56:c0:bc:7b:78:4e:22:fa:db:b2:ff:52:b2:03:70:
                    22:fd:78:18:b9:29:53:14:6a:8b:df:e5:80:41:d9:
                    60:bf:dc:f1:b9:e0:30:50:86:5d:c6:29:c2:d6:44:
                    e3:c0:77:6d:43:b9:e1:ba:5e:86:a4:99:eb:ee:98:
                    4e:ab:ea:b9:58:91:10:16:a8:47:d0:34:fe:44:26:
                    24:1d:dc:ae:05:63:68:05:90:5e:74:3e:4e:57:99:
                    bb:4f:4b:01:f2:1c:8a:d4:b8:44:3c:22:74:59:8e:
                    c4:eb:be:58:46:0b:eb:35:c5:58:6a:84:f5:0b:28:
                    67:48:c9:2c:5a:ec:36:30:b0:60:72:2d:f8:02:be:
                    37:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:08:98:F7:F5:A9:4C:50:40:6F:8C:11:39:C9:7B:8F:D6:F3:3C:C3
            X509v3 Authority Key Identifier:
                keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C4ADE9F6BC6C11F0A0E57E30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:90:38:d6:f9:11:5a:ce:35:be:2b:85:0a:89:4d:aa:7d:05:
         f6:6f:d7:6c:60:78:09:eb:3d:25:66:04:7e:5a:a1:fb:fe:98:
         d2:7c:1a:c9:91:a1:b4:a7:54:3a:b3:79:cc:7e:d3:77:44:38:
         a7:ee:b4:9c:6f:1a:04:14:14:38:51:82:af:da:52:4e:25:6d:
         4d:58:bf:c8:c8:cd:77:bc:9f:da:79:76:e8:4e:0e:97:9e:15:
         af:9b:0b:07:9a:03:9e:4d:8f:8c:fc:9a:7e:2f:34:75:a7:11:
         40:22:4d:7a:9e:ce:ac:ec:62:31:7f:7b:2a:bd:8b:15:3d:d2:
         87:fe:5c:9e:ae:3c:ce:e9:95:73:10:b6:da:08:24:17:39:57:
         16:dd:42:cf:52:34:25:ce:d8:4c:58:e3:59:84:12:0d:ce:63:
         ec:b1:87:cd:cd:c5:10:fd:76:99:ad:37:bc:08:47:14:37:a6:
         5b:70:70:d0:ca:1c:1b:77:ee:48:74:79:25:36:40:9f:99:0d:
         9b:cd:03:34:7c:50:70:33:0a:f3:47:f4:4b:91:a0:28:f4:ad:
         b6:bc:77:8e:4c:31:26:2a:55:50:28:8b:4b:9f:ca:ea:ba:be:
         a1:83:89:92:fd:ad:a5:c9:cc:d1:39:b8:7d:d0:04:00:4a:c1:
         8a:b5:c9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:47:16 2025 by rpki-client