This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/003D7FEE15E811F0841B1A7DC4F9AE02.roa
File:                     003D7FEE15E811F0841B1A7DC4F9AE02.roa (raw, json)
Hash identifier:          d9uK2WHtAsxBM3XUZiIW2tQcJ8Ym1sXb/vkuZKSK3yI=
Subject key identifier:   5E:B3:CE:9F:D2:DF:86:3D:F0:92:77:51:92:53:68:07:2D:32:C7:84
Certificate issuer:       /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Certificate serial:       0254
Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/003D7FEE15E811F0841B1A7DC4F9AE02.roa
Signing time:             Wed 03 Dec 2025 00:30:34 +0000
ROA not before:           Wed 03 Dec 2025 00:30:34 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     134236
IP address blocks:        103.20.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
                          rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912804A, serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
        Validity
            Not Before: Dec  3 00:30:34 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=692f84a9-b020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:02:a8:a6:32:db:d5:8f:41:67:66:b4:e1:42:
                    6b:1d:f7:b6:d4:28:a7:5c:2c:de:8c:c0:f8:73:d5:
                    55:ed:48:0e:43:b5:ee:de:28:68:27:3c:ee:24:29:
                    c1:e9:74:f1:6f:0d:6b:5b:9b:ab:a8:86:33:dd:9b:
                    b4:bd:75:ba:d5:c2:85:ec:7e:93:ad:ee:42:12:85:
                    dd:5c:1e:00:5f:09:fb:40:df:a3:4b:05:97:a1:7c:
                    cf:fd:68:db:6b:d2:15:97:13:b9:78:f2:a6:1e:1e:
                    82:cd:e0:09:8e:3e:b2:74:43:5c:c4:4f:ac:23:59:
                    36:c3:b1:64:9b:92:cb:d2:3a:ef:b4:8d:77:c1:d3:
                    44:c6:ca:19:6c:ea:26:0b:9b:7b:cc:f2:2b:a1:60:
                    06:62:c5:25:7e:13:8a:3d:ad:28:95:8c:5c:8b:0c:
                    55:79:12:e8:d1:b1:4d:c6:19:0a:1d:6d:8a:51:fc:
                    c3:9f:a7:b1:94:41:b4:bf:3d:a1:dc:c9:da:31:a1:
                    4a:03:ea:06:18:f0:10:43:93:a7:dd:79:c4:f9:8e:
                    cc:dd:90:70:f9:c3:c7:f3:b3:43:7d:29:27:b3:16:
                    9d:69:91:4a:12:27:49:79:db:a5:f6:1b:4e:ab:a6:
                    8e:7e:c5:40:bf:11:0e:9e:f7:7a:67:5a:81:b3:b0:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B3:CE:9F:D2:DF:86:3D:F0:92:77:51:92:53:68:07:2D:32:C7:84
            X509v3 Authority Key Identifier:
                keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/003D7FEE15E811F0841B1A7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:cf:d7:33:91:8b:60:8d:9c:ea:bf:f4:98:5e:6c:06:0c:14:
         9a:af:40:91:d2:93:f2:31:73:08:ee:8c:aa:f2:4f:c5:76:61:
         b7:7a:de:1b:00:23:4c:01:d3:74:02:53:76:fa:82:7b:57:73:
         b0:bf:5e:32:c4:d6:0c:8d:93:09:26:aa:8b:d3:a6:f9:e9:fa:
         0a:cc:2c:e1:59:d7:80:70:e5:ea:2b:0a:03:23:8b:6c:a6:6f:
         84:84:14:e8:61:56:a5:5b:f2:88:d1:14:50:a3:f8:6f:14:1e:
         60:dc:12:50:6f:97:d4:a2:0f:54:cf:67:0e:00:16:30:21:3a:
         cc:6d:d6:47:57:d0:5d:b6:22:2b:ad:d7:5a:72:14:b5:bf:27:
         6a:75:d8:00:c7:c7:d0:d9:4e:a6:ba:45:c6:2a:df:25:b3:15:
         b1:13:82:c5:31:41:88:a6:f6:11:91:27:f5:30:f5:f4:59:9a:
         74:96:b2:af:ff:ee:70:c4:df:d5:88:f7:0a:5f:6d:05:6b:b7:
         3a:75:8d:09:10:c3:46:c7:a3:4e:a2:d3:6c:47:19:0f:34:d7:
         6a:46:f3:41:5e:ee:66:5c:ad:e1:6c:d2:bd:21:63:b3:8f:aa:
         63:a5:de:19:f6:a2:4a:67:3a:19:ac:be:82:f6:64:0c:ae:28:
         8d:b5:fa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:06:32 2025 by rpki-client