This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/A18054D6CB9F11F088CB660AC4F9AE02.roa
File:                     A18054D6CB9F11F088CB660AC4F9AE02.roa (raw, json)
Hash identifier:          FvO8DlZzQVmPTZqjUi7Dxx3ih+VGjpPESsv0+jY8ciU=
Subject key identifier:   07:FF:96:57:C2:81:7E:BB:E2:B6:9B:34:E3:D6:25:2B:8D:2A:75:FE
Certificate issuer:       /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Certificate serial:       04F8
Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/A18054D6CB9F11F088CB660AC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 22:25:19 +0000
ROA not before:           Fri 28 Nov 2025 22:25:19 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     148986
IP address blocks:        103.175.132.0/24 maxlen: 24
                          2001:df7:f780::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl
                          rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1272 (0x4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
        Validity
            Not Before: Nov 28 22:25:19 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692a214f-7a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:09:19:f6:44:37:aa:7a:63:db:f1:07:f4:7b:
                    a4:83:de:90:4a:b6:39:cd:ef:ef:0b:3c:2b:3d:23:
                    e3:80:78:02:02:d7:a1:ad:1d:22:52:08:68:3f:be:
                    45:83:27:a2:4a:79:85:96:80:70:75:32:2e:54:2f:
                    d8:65:c5:00:2c:b4:f0:5c:93:d2:98:24:d0:a5:58:
                    38:be:27:8e:b5:59:bf:4b:c8:30:76:30:c3:56:dc:
                    70:f1:24:5a:01:f2:c0:4d:5e:c5:68:f5:08:ad:91:
                    9a:d2:e9:70:f0:aa:88:ba:ec:7b:59:06:08:d4:08:
                    6a:db:5b:87:a8:d0:88:cb:53:54:f0:3e:dd:9b:77:
                    94:16:28:e7:23:a4:4a:b9:c9:6b:ce:2f:ee:db:2a:
                    40:1b:ad:7c:3a:ce:62:7d:73:e1:1e:3d:06:33:fd:
                    0c:92:03:a9:2a:da:9d:2a:f2:83:7d:00:8d:86:9f:
                    d3:11:3d:f8:27:7a:94:54:0b:24:93:31:c2:0c:1d:
                    9f:78:1f:f1:0c:3c:4d:d2:b5:96:22:38:bf:17:b6:
                    01:3b:6f:89:c4:4a:28:ac:dd:16:cc:89:53:af:ae:
                    01:8f:a5:62:55:b6:7a:2d:cc:61:6a:1e:19:f6:19:
                    8a:9c:6b:5e:39:11:e8:94:0a:6e:e0:02:eb:51:75:
                    3b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FF:96:57:C2:81:7E:BB:E2:B6:9B:34:E3:D6:25:2B:8D:2A:75:FE
            X509v3 Authority Key Identifier:
                keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/A18054D6CB9F11F088CB660AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.132.0/24
                IPv6:
                  2001:df7:f780::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:2f:97:1a:a9:d4:cb:15:b7:cf:28:85:99:33:4a:25:39:cd:
         91:e4:4d:3a:40:79:99:46:c6:bb:42:4d:ee:7c:22:34:14:76:
         68:cb:82:46:0a:35:19:47:65:1c:73:a6:70:80:b0:0d:63:c0:
         34:81:42:c2:78:4c:30:b8:f0:2a:b4:75:87:32:8b:77:f0:fa:
         96:dc:70:70:56:5f:0a:84:2f:13:80:95:c2:ca:09:27:e2:80:
         2f:ad:df:1a:fa:7c:4d:69:8b:de:b5:7d:b9:c2:af:13:c0:8a:
         49:d3:bd:77:2b:d6:c8:8f:61:bf:7a:ca:90:d1:a1:bb:58:23:
         42:6c:03:f9:81:c2:27:02:fd:31:f2:1d:27:ce:81:13:87:a3:
         3a:fa:60:68:94:11:05:ce:4b:76:48:20:de:db:8d:29:61:3d:
         30:92:9c:3a:7a:04:dd:6b:cb:6b:e4:53:4d:38:0b:8a:89:2e:
         aa:19:27:6d:1d:a9:48:3b:95:4b:9c:a6:fb:33:37:0a:32:1f:
         ad:19:6a:ff:bd:82:42:ad:a4:9a:56:14:85:6c:fe:06:c2:b8:
         47:1f:5b:60:c1:e0:4c:c3:ed:cf:f9:b1:c3:dc:50:d7:ad:d5:
         1d:74:27:b7:08:73:a4:84:62:7b:35:b5:2e:40:7b:a7:7f:37:
         f6:34:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:29:42 2025 by rpki-client