This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/C11EB2BACB5911F0BEAC2433C4F9AE02.roa
File:                     C11EB2BACB5911F0BEAC2433C4F9AE02.roa (raw, json)
Hash identifier:          NlH/sj/YUu/p/8KIBHJXkag7VgICTRuX3xC9F1/t6lo=
Subject key identifier:   FC:8D:8D:A2:C4:DE:70:78:C9:55:01:F4:1E:70:E5:D3:36:D6:B2:35
Certificate issuer:       /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
Certificate serial:       0287
Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/C11EB2BACB5911F0BEAC2433C4F9AE02.roa
Signing time:             Thu 27 Nov 2025 06:24:40 +0000
ROA not before:           Thu 27 Nov 2025 06:24:40 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149994
IP address blocks:        103.7.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl
                          rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
        Validity
            Not Before: Nov 27 06:24:40 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6927eea8-0b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:86:18:3a:60:b8:6d:87:3e:12:b9:dc:90:
                    b9:51:e3:23:b7:37:fd:64:0d:95:4d:3a:7f:48:3b:
                    e5:95:d6:0f:a9:33:62:b1:3f:3b:68:95:9d:74:eb:
                    5b:e6:8d:61:b5:7c:e6:da:5f:04:9c:d0:c4:f0:9d:
                    8a:6e:b4:ef:18:ff:db:7f:f6:37:ea:b3:bf:06:45:
                    c9:3b:83:a5:6c:1a:69:4a:c4:41:6d:e6:e2:bf:18:
                    e8:f7:0f:1c:33:a7:86:58:c0:c8:b7:a6:de:43:dc:
                    55:d2:ed:56:a7:1d:f1:f7:52:dd:9e:5c:3b:a3:2b:
                    8d:0f:63:49:43:3a:fc:8b:01:b3:b8:ec:37:00:47:
                    cd:20:fd:65:84:9e:48:03:e2:c5:8d:2f:5c:59:f5:
                    7c:de:c6:b4:d1:26:2b:68:70:39:38:22:ec:9a:35:
                    64:ff:df:f7:11:7b:62:50:71:dc:40:a2:21:8d:cf:
                    55:cd:ad:43:3b:75:1b:17:6d:03:8a:c5:b5:1d:03:
                    5c:c3:4c:0f:c0:e4:dd:69:27:5e:68:9a:a1:89:5e:
                    18:00:48:9a:1a:99:14:7f:15:20:38:03:93:e9:81:
                    b9:a0:79:51:81:94:d3:f8:25:33:bf:5e:6e:49:21:
                    14:a9:43:4d:83:3a:94:f4:6f:41:22:d5:3f:cc:d1:
                    02:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8D:8D:A2:C4:DE:70:78:C9:55:01:F4:1E:70:E5:D3:36:D6:B2:35
            X509v3 Authority Key Identifier:
                keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/C11EB2BACB5911F0BEAC2433C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:ff:31:f2:2c:1c:50:23:30:11:82:6e:df:73:90:1e:7e:8d:
         62:5d:ac:8d:a6:4c:55:88:a6:bb:4f:01:d0:34:3f:b5:68:ab:
         1d:7f:58:e2:68:06:f9:14:01:9b:58:5a:52:d7:20:98:41:7f:
         c4:ba:2d:c3:5c:5c:e7:e6:fe:13:a1:28:0a:7a:fd:2e:07:89:
         42:c8:20:f3:23:43:42:6b:24:76:37:0d:59:53:94:c8:85:f7:
         c6:a3:ce:77:df:07:43:cf:85:75:b4:c6:62:2b:0c:3b:1e:11:
         e6:d0:88:b2:aa:34:5d:aa:ca:a3:f2:92:5c:de:9c:37:3c:30:
         d9:7b:29:da:02:42:57:b6:9d:a6:54:97:47:eb:a9:dc:65:0c:
         78:a1:8b:c7:9a:b3:32:33:c4:eb:61:23:82:06:a4:a8:6e:dd:
         44:0d:cb:4e:01:d6:fa:8e:6d:4c:9d:92:47:8f:07:8b:25:5d:
         f8:2b:da:1f:04:ff:a3:0b:e9:76:31:0f:ba:02:fb:47:08:d4:
         b7:32:28:42:2e:3a:18:fb:1a:7b:6d:64:c1:a7:a6:b8:04:eb:
         6f:d9:4b:f1:9b:b1:b7:9a:24:e7:eb:7f:bc:b8:15:02:5d:0f:
         61:24:75:22:5b:f3:72:ff:92:25:af:45:8a:50:f8:92:78:1e:
         a9:f0:e0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:18:55 2025 by rpki-client