This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/D19C3D9CCB9F11F090C50D0BC4F9AE02.roa
File:                     D19C3D9CCB9F11F090C50D0BC4F9AE02.roa (raw, json)
Hash identifier:          qRx7TQ6UV8tNdrKdv3Zo/CrjupoAaJ536/Jh6JtiZmA=
Subject key identifier:   FC:B8:10:93:EC:EC:89:BA:DF:A9:EB:95:08:AC:C9:49:96:95:B4:65
Certificate issuer:       /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
Certificate serial:       04F7
Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/D19C3D9CCB9F11F090C50D0BC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 22:25:18 +0000
ROA not before:           Fri 28 Nov 2025 22:25:18 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139604
IP address blocks:        103.175.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl
                          rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1271 (0x4f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F
        Validity
            Not Before: Nov 28 22:25:18 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692a214e-abac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:72:6b:d4:79:e1:f3:74:c9:eb:f6:a1:76:
                    f6:fe:af:dd:8e:ac:39:db:b4:17:0d:01:72:54:ff:
                    ed:50:eb:8f:3c:b0:54:67:62:da:35:76:bb:62:0d:
                    67:84:4a:b8:36:6e:0a:51:2c:c9:54:6d:a0:63:74:
                    91:a2:3d:96:2c:b6:e6:7f:c3:25:65:fd:e5:9d:51:
                    88:af:49:63:84:b4:0b:ea:bc:af:e5:3c:26:50:b7:
                    ce:8b:40:93:14:ff:75:12:a8:b4:a4:26:a0:aa:c3:
                    a6:eb:05:df:93:ba:00:90:b7:9a:64:07:45:b1:0c:
                    d6:d0:7c:86:92:4f:e2:a3:b9:0d:2d:ae:36:d4:59:
                    40:91:37:ad:bc:5f:f5:45:b5:41:02:fc:52:3f:e3:
                    78:eb:ce:2e:0e:64:55:21:aa:3a:07:09:9b:4d:2c:
                    ba:d9:65:3e:d7:44:af:97:99:03:ac:64:11:d6:57:
                    cd:3d:ef:26:7b:22:02:0f:8c:4e:e9:d8:fb:43:f1:
                    7b:68:64:1e:de:e7:d3:19:13:98:dc:78:e5:36:6f:
                    ad:97:9c:34:a2:63:1b:0b:5d:35:f9:37:a7:c0:d1:
                    26:c4:8e:d9:75:8f:5a:1e:c4:37:b6:46:a9:e3:99:
                    cf:5f:b4:a3:38:6d:a1:86:1b:28:e2:3e:a9:1a:ef:
                    6b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B8:10:93:EC:EC:89:BA:DF:A9:EB:95:08:AC:C9:49:96:95:B4:65
            X509v3 Authority Key Identifier:
                keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/D19C3D9CCB9F11F090C50D0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:9f:25:5a:3b:e5:39:64:97:a4:5c:33:e0:a9:6c:a9:16:78:
         27:0b:04:c7:bf:0a:fb:83:b4:f3:e1:cc:ee:03:0e:f9:98:67:
         a0:6d:d6:0f:82:fb:9b:f1:8b:43:5f:75:3d:c8:20:07:c4:e7:
         db:81:54:34:03:c4:88:2e:1b:95:13:fd:59:56:1d:21:a3:a4:
         fb:2b:4d:0d:a7:17:79:33:c0:2b:a4:99:77:f8:58:1a:ed:15:
         f9:b3:2f:8b:66:39:7f:79:f7:18:ef:ac:27:96:8c:5e:eb:e2:
         95:57:6b:2f:1c:4c:ed:e6:0b:dc:d1:05:bf:be:ac:05:54:30:
         0d:1b:8b:89:76:df:cf:2c:af:17:e7:70:7d:f3:f4:da:5e:16:
         ba:1d:30:b2:ec:5a:e7:fa:00:56:69:38:52:01:f6:ab:46:4f:
         7e:66:17:3a:8a:1b:eb:90:f3:40:6a:f8:71:89:69:72:e5:65:
         97:eb:06:cd:c2:a1:42:27:cd:80:52:c0:7e:c4:77:24:76:81:
         00:3e:ae:2a:d3:50:31:3b:58:d0:09:df:6e:91:7d:d4:ea:61:
         42:83:82:4f:5b:eb:12:73:44:99:34:13:1a:35:0a:01:96:25:
         ac:f9:55:18:e2:01:33:27:d6:ca:50:b6:49:4c:6c:07:a9:54:
         90:53:c4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:30:08 2025 by rpki-client