This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/B62E536CD26411F0A0C1426DC4F9AE02.roa
File:                     B62E536CD26411F0A0C1426DC4F9AE02.roa (raw, json)
Hash identifier:          ji/L3w+tmrsGfycplhfdZAlMZY7tEBd1wHCdpW53sHM=
Subject key identifier:   0E:11:1D:9A:94:08:55:D0:DD:C7:0C:24:16:1F:D2:6F:39:A8:95:57
Certificate issuer:       /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial:       031B
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/B62E536CD26411F0A0C1426DC4F9AE02.roa
Signing time:             Sat 06 Dec 2025 05:30:45 +0000
ROA not before:           Sat 06 Dec 2025 05:30:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     174
IP address blocks:        103.227.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
                          rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 05:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795 (0x31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
        Validity
            Not Before: Dec  6 05:30:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6933bf84-cd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:10:64:a0:f0:13:ff:fc:58:b5:84:07:1b:a9:
                    fa:0a:8d:9e:33:65:71:4c:85:6e:6d:37:1f:e7:a3:
                    c5:93:0d:cb:7f:f7:fb:b9:89:97:0a:e6:0f:4b:46:
                    90:b1:8e:3e:62:4a:0c:3f:ed:32:fc:37:fd:26:9e:
                    99:5b:ac:6d:14:36:f4:79:af:87:41:b3:49:52:11:
                    98:63:39:67:31:8d:74:a3:e7:10:07:e8:7d:dd:e0:
                    1d:54:ef:35:e1:1a:2f:88:af:79:b9:05:ff:9c:f3:
                    a1:5f:2e:a3:26:5f:31:71:4f:01:ee:0e:08:67:44:
                    a9:6d:5e:8c:a3:85:cb:f0:c1:77:f6:49:9b:fc:c5:
                    7a:d2:79:95:91:ba:48:71:cd:11:df:8d:8e:21:51:
                    fb:e8:49:6f:a7:b7:c5:47:06:85:42:21:be:88:22:
                    84:88:a6:50:1d:43:87:de:ca:97:92:20:7c:09:d7:
                    db:32:75:58:39:d4:84:9e:75:ba:fd:3c:6e:23:76:
                    58:7c:c8:d8:f5:3f:6b:de:97:cb:e9:91:eb:85:4b:
                    52:30:d3:3f:89:b7:27:cd:98:f1:56:b8:72:33:f3:
                    d7:67:c9:87:80:58:01:07:6e:18:c6:82:35:e5:3d:
                    9e:a9:e8:93:a1:66:61:e6:4b:ad:61:2c:f6:b5:38:
                    28:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:11:1D:9A:94:08:55:D0:DD:C7:0C:24:16:1F:D2:6F:39:A8:95:57
            X509v3 Authority Key Identifier:
                keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/B62E536CD26411F0A0C1426DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:cc:ec:5a:96:ab:8e:88:8b:1d:d6:1c:21:ee:3e:65:5c:df:
         13:55:b3:01:49:09:6e:e0:a7:f0:24:ff:34:67:1b:c0:4f:22:
         47:89:a7:3d:8d:0a:38:43:1d:d9:a8:d6:58:c2:57:f6:32:2f:
         52:ae:15:c7:31:58:56:21:be:f0:95:b9:d0:87:30:cd:9d:36:
         98:1d:c5:d8:94:8a:4a:a0:ff:c8:eb:c0:d9:44:bc:3c:0a:b7:
         86:d9:5e:c3:f7:2e:7f:8a:ca:53:6c:a0:28:02:a1:eb:4e:39:
         60:06:88:27:4c:5e:8e:4b:04:3f:13:e6:a8:26:90:0e:53:fd:
         87:8f:80:d7:c6:68:40:ce:e3:49:67:3e:94:d3:3a:ef:30:64:
         a2:5a:cf:84:3e:f8:5c:7f:cd:03:a0:c5:c7:d0:37:7e:10:2c:
         bf:85:86:d2:b5:65:a9:76:eb:54:c8:47:01:aa:a8:52:d1:06:
         c5:cf:6e:1a:31:be:cb:da:eb:f1:7a:53:fa:81:61:1e:fa:b2:
         39:30:45:22:c3:d9:bf:ac:25:40:27:49:05:72:62:a9:59:2e:
         d5:da:cd:e9:33:ee:cc:9d:f2:a0:09:b6:37:db:fc:76:f1:12:
         45:de:d9:bc:75:fb:5c:39:34:7d:7c:be:54:6a:4c:06:07:2b:
         fa:35:40:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:36:08 2025 by rpki-client