This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/736F8DBA819311EB8964C17EC4F9AE02.roa
File:                     736F8DBA819311EB8964C17EC4F9AE02.roa (raw, json)
Hash identifier:          XVfMBcXtDO1jUoG+sHDNkKo4flq8bpzbYOt+jR030cw=
Subject key identifier:   F4:E8:37:8B:76:D3:FC:E2:57:2D:B9:E2:1C:4E:A3:2A:C3:EC:66:64
Certificate issuer:       /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Certificate serial:       0BE6
Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/736F8DBA819311EB8964C17EC4F9AE02.roa
Signing time:             Wed 24 Dec 2025 19:16:06 +0000
ROA not before:           Wed 24 Dec 2025 19:16:06 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     5580
IP address blocks:        59.191.240.0/20 maxlen: 20
                          103.47.76.0/23 maxlen: 23
                          103.53.152.0/23 maxlen: 23
                          103.207.156.0/23 maxlen: 23
                          103.230.248.0/22 maxlen: 22
                          103.230.249.0/24 maxlen: 24
                          103.232.34.0/23 maxlen: 23
                          203.95.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
                          rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3046 (0xbe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
        Validity
            Not Before: Dec 24 19:16:06 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=694c3bf5-4645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:ba:51:41:9e:f3:d5:ed:29:a3:7d:e5:3a:
                    ab:e6:c4:80:e8:29:ee:86:4f:1f:55:f0:f8:8a:ac:
                    2e:02:fe:d5:16:ce:9b:24:c5:4b:e4:98:22:ec:95:
                    a4:b0:97:84:c6:e6:97:d2:95:1b:3b:1d:63:f6:1a:
                    c1:bb:ce:ff:bb:24:23:94:1c:c8:18:84:d0:ce:eb:
                    3f:6b:48:65:b1:19:91:23:ec:a0:a4:df:cf:b7:47:
                    0e:ba:2b:86:b4:61:36:71:22:19:c2:4e:28:dd:8d:
                    63:fe:73:ce:49:a5:72:3e:38:9c:80:fe:97:d2:d2:
                    8e:e2:45:cd:2c:66:3a:8b:42:39:79:d7:31:e8:21:
                    86:bd:7b:b7:cf:41:7c:0a:62:ec:0f:f1:08:ab:25:
                    c3:af:06:61:a6:02:5a:c5:1b:7d:c9:e6:48:6f:6c:
                    ef:af:d8:e2:73:12:13:42:2c:75:de:d6:29:a5:21:
                    7b:19:0a:7d:ff:90:2e:c7:d8:1e:5a:e0:db:96:7a:
                    56:8c:75:ab:82:cb:af:2d:38:61:14:ec:d1:29:82:
                    13:5c:9b:7b:bc:ce:3e:8a:ff:1c:f6:d0:95:55:a3:
                    bc:ab:cc:ee:9b:5d:40:8b:f3:59:46:bb:a6:c9:8b:
                    10:fe:4d:eb:5c:73:54:ac:c6:58:2c:46:ff:bd:89:
                    fa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E8:37:8B:76:D3:FC:E2:57:2D:B9:E2:1C:4E:A3:2A:C3:EC:66:64
            X509v3 Authority Key Identifier:
                keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/736F8DBA819311EB8964C17EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.191.240.0/20
                  103.47.76.0/23
                  103.53.152.0/23
                  103.207.156.0/23
                  103.230.248.0/22
                  103.232.34.0/23
                  203.95.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:af:f6:5b:d6:ea:b9:ad:6c:30:e3:b0:3c:71:f8:c0:6a:30:
         db:59:cb:03:c7:f4:e3:26:2d:a0:6d:62:93:6e:ea:30:d3:f5:
         22:6f:c0:e1:18:37:f0:58:a4:ec:6a:7f:bb:bd:f1:66:cc:ac:
         a3:b8:94:42:af:ad:ac:d2:32:40:c7:79:fd:6c:fa:7d:f6:41:
         74:f9:01:61:2e:47:c4:a7:85:d0:00:76:57:a0:76:e6:54:fc:
         dc:ed:b3:b4:85:41:3f:05:b8:db:80:b3:3f:0f:8c:cd:06:0d:
         87:ef:a8:3b:52:43:43:c0:97:dd:34:82:67:f3:ab:91:9f:c4:
         c0:b4:80:51:f2:23:d7:d8:3f:e6:e9:f0:2c:1a:6c:fe:60:08:
         b1:28:3c:d8:aa:75:b4:bb:3d:d3:e7:5a:e6:9b:b1:f2:20:3a:
         4b:92:25:2b:fe:48:9c:ec:31:1f:12:a9:f6:ab:eb:85:79:e0:
         37:ea:94:46:be:e6:90:6e:11:46:7f:7c:bd:f3:f3:8d:c8:a9:
         a7:f3:ca:39:47:92:d6:1b:91:a0:13:b7:87:48:bf:67:f6:d2:
         b9:08:d5:e5:2b:39:b7:dc:8b:b2:53:57:75:86:80:1f:15:dc:
         4b:3f:fb:2d:b1:03:6c:ec:30:99:96:f4:c2:c6:52:61:05:04:
         af:45:9f:b9
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgICC+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC
RjFGODlCNDAwHhcNMjUxMjI0MTkxNjA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTRjM2JmNS00NjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzKa6UUGe89XtKaN95Tqr5sSA6Cnuhk8fVfD4iqwuAv7VFs6bJMVL5Jgi7JWk
sJeExuaX0pUbOx1j9hrBu87/uyQjlBzIGITQzus/a0hlsRmRI+ygpN/Pt0cOuiuG
tGE2cSIZwk4o3Y1j/nPOSaVyPjicgP6X0tKO4kXNLGY6i0I5edcx6CGGvXu3z0F8
CmLsD/EIqyXDrwZhpgJaxRt9yeZIb2zvr9jicxITQix13tYppSF7GQp9/5Aux9ge
WuDblnpWjHWrgsuvLThhFOzRKYITXJt7vM4+iv8c9tCVVaO8q8zum11Ai/NZRrum
yYsQ/k3rXHNUrMZYLEb/vYn6iwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFPToN4t2
0/ziVy254hxOoyrD7GZkMB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz
QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt
MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkFDM0UvMEY1MEUwMzYzM0JBMTFFQTk1ODI4NTgxQzRGOUFFMDIvNzM2RjhEQkE4
MTkzMTFFQjg5NjRDMTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E
NDAyMDAEAgABMCoDBAQ7v/ADBAFnL0wDBAFnNZgDBAFnz5wDBAJn5vgDBAFn6CID
BALLX9QwDQYJKoZIhvcNAQELBQADggEBAHyv9lvW6rmtbDDjsDxx+MBqMNtZywPH
9OMmLaBtYpNu6jDT9SJvwOEYN/BYpOxqf7u98WbMrKO4lEKvrazSMkDHef1s+n32
QXT5AWEuR8SnhdAAdlegduZU/Nzts7SFQT8FuNuAsz8PjM0GDYfvqDtSQ0PAl900
gmfzq5GfxMC0gFHyI9fYP+bp8CwabP5gCLEoPNiqdbS7PdPnWuabsfIgOkuSJSv+
SJzsMR8Sqfar64V54DfqlEa+5pBuEUZ/fL3z843IqafzyjlHktYbkaATt4dIv2f2
0rkI1eUrObfci7JTV3WGgB8V3Es/+y2xA2zsMJmW9MLGUmEFBK9Fn7k=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:25:35 2026 by rpki-client