This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/BD63D19A650D11EA8FAFD931C4F9AE02.roa
File:                     BD63D19A650D11EA8FAFD931C4F9AE02.roa (raw, json)
Hash identifier:          akVT/BN7ctQb0crZ9G6inMAlZXO1p13vWkVgyRPTskg=
Subject key identifier:   F0:A5:60:FF:53:17:3A:76:56:09:CD:D0:38:BF:A1:DB:35:7F:CE:76
Certificate issuer:       /CN=A912C2D5/serialNumber=BA5A20C406858AFC2506A935786316414652609D
Certificate serial:       0AD0
Authority key identifier: BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/BD63D19A650D11EA8FAFD931C4F9AE02.roa
Signing time:             Wed 31 Dec 2025 19:16:36 +0000
ROA not before:           Wed 31 Dec 2025 19:16:36 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139845
IP address blocks:        103.146.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl
                          rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2768 (0xad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2D5, serialNumber=BA5A20C406858AFC2506A935786316414652609D
        Validity
            Not Before: Dec 31 19:16:36 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69557694-1f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:e5:db:cd:5b:06:24:17:8d:50:cc:61:30:
                    3b:d0:2d:38:04:55:e6:51:3c:e2:90:c1:35:ea:35:
                    20:e2:71:f7:79:46:46:5d:72:c1:b7:9f:a8:af:64:
                    4e:8d:75:3b:b2:54:1b:7b:2b:f0:71:aa:8d:53:8c:
                    df:6d:e6:22:19:64:48:c7:d6:3c:48:24:3b:76:38:
                    9b:fa:97:82:cc:c5:4d:53:3a:83:d8:54:b1:5b:c6:
                    5b:b7:a7:b1:9b:54:c7:7d:96:10:19:42:d0:99:ef:
                    f2:91:2a:e2:e9:d5:81:c0:09:b4:78:ff:3c:80:f5:
                    bd:d4:53:68:c8:8e:36:d7:4a:d4:b1:7a:73:0f:31:
                    63:92:0e:8f:59:07:21:30:73:10:b2:ec:7e:fd:dd:
                    79:37:ac:72:ca:d6:7b:f0:e7:94:a2:fa:1b:d0:38:
                    14:c5:a4:0c:93:98:8a:ae:aa:81:41:aa:7e:58:08:
                    20:f0:28:24:41:8b:1e:87:99:aa:32:4c:fe:f2:f0:
                    ed:e5:37:39:fb:55:3b:23:9f:7c:7c:d3:07:94:16:
                    04:7c:42:58:a2:f1:7a:f3:12:ae:d1:09:db:2d:8e:
                    09:9a:06:2c:3a:ba:55:40:dc:95:15:40:5a:09:7c:
                    23:0b:0d:f3:e8:93:10:97:5c:13:0b:e4:eb:0d:40:
                    38:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A5:60:FF:53:17:3A:76:56:09:CD:D0:38:BF:A1:DB:35:7F:CE:76
            X509v3 Authority Key Identifier:
                keyid:BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/BD63D19A650D11EA8FAFD931C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:99:4b:10:9f:da:9d:ce:a1:52:aa:a0:e2:ae:47:e2:9f:a2:
         90:3a:e2:19:78:0a:50:0d:07:af:75:f9:6b:a8:80:8c:b2:bb:
         10:bb:bd:61:c4:24:4c:d5:85:53:59:20:9a:16:5c:8a:0c:f5:
         8a:18:08:05:b8:cd:7a:26:f2:4f:3a:56:4b:24:c8:8a:12:77:
         38:48:93:15:08:e6:ce:36:c5:01:52:cb:75:02:9d:f5:64:7c:
         9b:fd:33:44:32:dd:f2:30:e6:e1:f3:29:04:3a:b6:e5:21:6c:
         fa:e3:51:53:e4:8a:2b:46:a2:ed:b5:38:39:80:51:9f:73:fd:
         fc:8d:10:7a:45:8f:36:51:4e:6a:e1:ee:d5:28:71:fa:a2:84:
         ef:2b:af:2f:60:07:45:21:92:4c:8a:a3:af:45:51:10:7f:1e:
         6e:e1:68:ff:b8:02:a1:57:73:80:17:59:96:9e:36:9a:a1:ca:
         b4:34:0e:b3:05:af:54:20:82:5b:93:59:2f:6b:1c:cf:06:57:
         16:30:2a:69:11:5e:34:b0:98:5c:94:36:db:7d:51:e6:1c:16:
         5f:6e:31:0c:57:4a:fc:ea:a7:d9:c3:80:2f:92:f0:e2:2a:90:
         89:0a:66:de:21:c7:a4:15:c4:3b:bd:70:d4:67:83:14:b4:f4:
         66:eb:f1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:35:39 2026 by rpki-client