This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/575CFFB013BE11EB943B905BC4F9AE02.roa
File:                     575CFFB013BE11EB943B905BC4F9AE02.roa (raw, json)
Hash identifier:          paGBc2b6LPLnqdowl7MZLqnVoY/NNt1WUomSYnNyDjs=
Subject key identifier:   98:DE:8A:1A:50:B7:63:CC:72:0D:7B:83:15:B5:EF:A8:F2:78:C7:6C
Certificate issuer:       /CN=A912FF31/serialNumber=C2AC9454158A37C1A1189D46A2EE1453750DA9AF
Certificate serial:       07E2
Authority key identifier: C2:AC:94:54:15:8A:37:C1:A1:18:9D:46:A2:EE:14:53:75:0D:A9:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/575CFFB013BE11EB943B905BC4F9AE02.roa
Signing time:             Thu 04 Dec 2025 20:33:53 +0000
ROA not before:           Thu 04 Dec 2025 20:33:53 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     141355
IP address blocks:        103.157.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl
                          rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2018 (0x7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FF31, serialNumber=C2AC9454158A37C1A1189D46A2EE1453750DA9AF
        Validity
            Not Before: Dec  4 20:33:53 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6931f031-9949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:76:9c:6b:62:7f:55:90:21:7d:68:83:0a:58:
                    cd:3c:a5:55:0c:c7:be:91:b6:ce:4a:04:78:13:91:
                    8f:c8:0c:fa:75:e1:d1:73:ab:7c:e6:a0:a9:80:13:
                    cc:2f:67:85:7a:e0:e1:dc:aa:e6:84:7a:0b:bd:3f:
                    24:f6:b5:55:53:da:ff:a5:ba:32:3a:63:e9:64:cc:
                    a3:7d:c2:58:a0:0a:37:82:c7:6d:d3:b7:ed:1f:36:
                    b9:3b:8d:34:2e:8e:a4:40:21:71:e1:89:52:ce:db:
                    e0:27:22:fd:44:97:42:ab:b3:88:f2:ee:13:19:b7:
                    76:c4:80:14:c3:7c:9c:b3:c5:d8:c1:8d:8a:3b:94:
                    bb:0a:5d:5c:54:bd:31:0a:49:2a:e4:87:aa:fb:97:
                    6f:28:d9:4f:a6:66:22:b2:fb:bf:49:67:ca:28:c2:
                    8f:55:81:56:14:fa:f3:e0:28:1d:bd:b2:94:8c:92:
                    7d:5b:53:43:2f:88:ee:0d:ef:82:d6:65:60:79:f2:
                    5c:fc:95:62:7d:91:ef:2a:26:b1:76:a3:ad:54:97:
                    bc:82:f0:70:79:5b:a1:62:f1:ba:c0:54:e5:91:ea:
                    34:92:e9:7a:f2:82:61:04:3e:90:18:af:cf:2d:e3:
                    9d:fe:68:d5:94:9f:d6:c7:0f:10:a1:5d:11:70:60:
                    4c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DE:8A:1A:50:B7:63:CC:72:0D:7B:83:15:B5:EF:A8:F2:78:C7:6C
            X509v3 Authority Key Identifier:
                keyid:C2:AC:94:54:15:8A:37:C1:A1:18:9D:46:A2:EE:14:53:75:0D:A9:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/575CFFB013BE11EB943B905BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:82:5a:75:e9:43:12:62:04:af:18:77:e1:6e:86:1a:5f:55:
         bd:16:af:d3:0b:ce:fa:c0:b3:92:d7:9b:69:b3:89:82:1b:b6:
         4a:52:36:5e:32:9a:18:b1:5c:b1:c1:f5:be:da:8e:56:fd:be:
         c3:bd:a7:79:60:91:4b:41:16:1a:26:8f:f6:58:1a:ff:3d:38:
         4e:74:3b:50:34:6c:72:7a:2d:84:9a:bf:ca:2b:a4:99:36:35:
         f9:db:3c:d9:46:2a:da:31:ab:79:d8:54:d7:15:91:4c:f1:cc:
         cd:17:cc:7e:ce:7c:40:72:d5:37:d0:e0:86:9a:60:44:da:fb:
         96:2d:e4:0c:09:d8:f9:72:f9:f7:91:9a:8e:0e:e8:cf:6f:18:
         a7:dc:ff:d5:a2:ef:82:ea:e8:44:0e:69:92:c4:8d:21:4a:a8:
         dc:94:6e:f0:5d:fd:c9:ea:1f:26:e0:92:c2:a8:7d:07:77:64:
         cb:7b:fc:ca:cb:f4:bf:30:19:73:0e:15:cb:67:29:28:51:06:
         2e:76:a2:ef:a6:8f:3c:67:68:e6:47:19:e8:c7:ad:8c:97:8b:
         80:e6:cc:e2:b5:57:12:50:12:90:1a:03:0a:36:1e:d0:1b:f4:
         b0:50:86:9a:ac:12:61:33:58:69:3b:94:42:cc:5f:dc:08:7f:
         e0:37:2c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:39:20 2025 by rpki-client