This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/CCB0DBA8CB2911EE9CE70483C4F9AE02.roa
File:                     CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (raw, json)
Hash identifier:          hTqAJeFz8PTA6anqEQNdKINuIjAXAozH9CZXJQVA+Tc=
Subject key identifier:   AD:01:04:AE:C6:D8:85:C2:D9:85:2A:51:2C:7E:31:D5:A5:A7:E3:51
Certificate issuer:       /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Certificate serial:       0255
Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/CCB0DBA8CB2911EE9CE70483C4F9AE02.roa
Signing time:             Wed 03 Dec 2025 00:30:35 +0000
ROA not before:           Wed 03 Dec 2025 00:30:34 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     134603
IP address blocks:        103.20.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
                          rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912804A, serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
        Validity
            Not Before: Dec  3 00:30:34 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=692f84aa-ef84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6c:35:04:4a:7c:e3:f7:d7:b2:61:65:f4:b4:
                    e0:2c:6f:cc:88:39:d3:58:2f:de:1c:82:b0:d6:bc:
                    e8:d6:f4:23:32:4c:c2:4a:9c:d9:da:38:18:54:dc:
                    33:23:d2:a0:8e:7b:91:9b:b5:bc:07:84:a9:98:73:
                    1b:d0:75:df:41:19:07:71:ee:21:5f:a5:1d:41:7a:
                    9d:17:d9:8e:21:af:07:6a:d2:58:90:74:55:a3:16:
                    b2:48:83:ab:1a:d4:a6:d2:93:6d:5d:bb:be:ea:b0:
                    d0:02:a0:45:8e:7e:f5:6e:00:c9:f4:91:c5:b8:56:
                    90:af:0d:52:cd:8e:53:cc:05:e5:d7:00:2a:a9:12:
                    1e:17:ca:32:87:eb:47:5c:13:55:04:69:ba:80:e3:
                    f3:a4:3e:67:5b:e8:1e:c1:36:f7:02:38:4c:36:fd:
                    b1:a2:5f:2f:fb:28:aa:7b:10:85:bb:16:ed:b4:89:
                    f5:cd:7f:d0:95:d5:2c:fa:bf:5c:4f:b6:c6:7e:a1:
                    69:c3:60:ae:7e:eb:96:e5:b9:a9:aa:ca:41:ab:30:
                    1a:a1:bc:a7:fa:bc:9a:9b:78:ed:58:b9:dc:4f:94:
                    68:d5:99:ba:b1:5f:b5:12:a7:12:7b:0b:1a:86:d7:
                    18:82:2b:cb:e9:7f:55:0e:29:31:3a:e1:68:87:08:
                    15:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:01:04:AE:C6:D8:85:C2:D9:85:2A:51:2C:7E:31:D5:A5:A7:E3:51
            X509v3 Authority Key Identifier:
                keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/CCB0DBA8CB2911EE9CE70483C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:f6:cc:da:12:7b:ef:72:88:52:8a:e1:d5:c5:60:fd:f4:1e:
         8f:5c:04:b1:8b:98:2f:05:a2:0c:ea:4a:38:d0:08:98:b9:7d:
         7b:cc:07:20:53:9b:62:44:fc:97:1b:00:29:e1:8a:c6:b9:bb:
         ec:be:02:77:14:1f:f1:60:db:b1:c3:5a:81:11:57:36:70:56:
         48:68:f3:68:0f:1f:de:4e:c0:1b:59:4b:d6:71:9e:8b:13:39:
         78:94:78:73:55:a6:7f:6b:de:ee:e6:7b:bb:1c:f0:66:db:54:
         af:3a:e4:d4:0d:bd:a7:36:09:c2:97:92:73:81:c7:39:b8:d0:
         77:a1:86:13:dd:77:d1:fc:f1:d3:32:ce:1a:94:75:bd:fb:c5:
         ef:a8:5b:55:34:3b:ca:cd:20:e4:80:0d:e6:e2:84:bc:9f:e4:
         64:52:c5:14:94:87:c0:a9:0e:8f:04:8d:43:c6:7a:e0:f9:d4:
         a3:af:48:5b:8e:07:da:fe:8d:02:ca:37:a1:45:89:9d:dc:94:
         22:9f:43:5a:2d:42:96:c5:1a:be:7a:53:e0:10:c4:65:9d:13:
         d3:05:44:c2:18:ed:03:18:3b:26:86:82:59:d5:a4:67:91:b1:
         b9:98:7c:9d:22:3a:27:54:43:24:9e:35:3a:a3:c8:25:bc:f6:
         7f:6a:02:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:02:53 2025 by rpki-client