This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/2E680D2AC99911F0BDA2F55CC4F9AE02.roa
File:                     2E680D2AC99911F0BDA2F55CC4F9AE02.roa (raw, json)
Hash identifier:          EiMOxmgDdeQS71DiadCvwBaFB8K5LkJbRgnGcwVdsHc=
Subject key identifier:   D1:B0:C5:C7:1F:8D:EE:33:10:CE:F1:2A:8E:88:F3:94:5F:29:A7:41
Certificate issuer:       /CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
Certificate serial:       10A6
Authority key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/2E680D2AC99911F0BDA2F55CC4F9AE02.roa
Signing time:             Tue 25 Nov 2025 01:23:27 +0000
ROA not before:           Tue 25 Nov 2025 01:23:27 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     24511
IP address blocks:        103.138.131.0/24 maxlen: 24
                          2001:df6:5c40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl
                          rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4262 (0x10a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130F4B, serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
        Validity
            Not Before: Nov 25 01:23:27 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6925050f-d08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:d0:32:cf:fd:0d:33:2f:a5:90:71:0b:50:
                    dc:03:a3:60:95:ad:55:3b:23:1d:4f:34:3e:22:1d:
                    0e:87:b9:96:bd:4e:0e:5e:89:ee:6d:68:45:a0:c6:
                    00:99:4a:4d:4e:1a:3b:c0:5b:81:12:07:78:8c:08:
                    c7:02:05:b9:39:67:67:f7:db:7f:c6:09:19:1b:d8:
                    d8:e4:dc:6e:d6:a9:a5:16:50:5b:b7:c5:19:ab:7f:
                    0c:b2:7e:4c:7e:bb:9f:e9:42:d6:e7:a8:8c:e2:43:
                    e2:f2:00:a0:3c:c4:ee:8d:72:25:e1:9e:ad:9c:2f:
                    78:fb:46:17:21:2d:b5:c7:02:31:8d:5f:27:ed:22:
                    9e:7c:7d:9b:a7:7a:45:8c:78:c9:eb:87:26:e4:85:
                    83:34:a1:03:2b:5a:fe:16:a0:0b:ab:d7:ac:3b:aa:
                    05:97:aa:30:f1:25:22:5e:7a:3e:7e:6d:27:15:30:
                    09:f8:78:53:1b:90:44:90:12:f2:75:d2:a8:02:d7:
                    23:ee:5e:19:e1:30:31:5d:f0:71:3a:ea:d0:10:85:
                    b6:07:da:3b:a8:0c:93:91:ce:e7:e7:0e:bb:e9:a2:
                    b4:96:88:29:23:7c:1c:e4:98:33:68:04:0a:16:7d:
                    6b:47:c5:d0:14:c4:64:a8:32:dc:ac:b6:b4:c5:18:
                    89:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B0:C5:C7:1F:8D:EE:33:10:CE:F1:2A:8E:88:F3:94:5F:29:A7:41
            X509v3 Authority Key Identifier:
                keyid:99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/2E680D2AC99911F0BDA2F55CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.131.0/24
                IPv6:
                  2001:df6:5c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:99:0b:bd:4d:3f:a1:77:67:ac:a4:1b:58:46:13:09:0f:38:
         63:0d:86:e1:26:92:fc:51:f9:33:05:eb:ae:b6:96:4e:31:84:
         af:2c:cf:31:9a:65:82:b6:88:68:71:67:0a:47:25:ca:c4:34:
         57:ac:9a:94:8f:41:8c:10:b8:c8:66:13:b7:c3:e4:e0:0f:11:
         7c:71:4a:eb:ab:4a:a0:18:a6:45:72:03:c3:7d:ec:d8:5d:e7:
         bb:75:cb:d8:01:8c:ea:33:75:7d:c5:ef:62:32:25:0f:1e:be:
         11:92:58:cc:45:d7:d1:09:23:15:5b:f2:5e:2a:bb:62:c4:93:
         bb:7d:b0:be:6b:46:16:10:34:8d:2b:3c:bc:f2:de:69:f1:0e:
         79:b1:ed:af:38:b8:ee:8a:bd:89:e9:82:5d:7a:68:04:f1:a7:
         b2:42:01:56:1b:31:b2:d6:fd:09:71:96:77:9f:5e:78:4a:57:
         a8:33:53:ea:21:f1:03:04:8a:53:87:29:5f:78:60:43:e7:78:
         9b:db:2d:da:5b:21:db:c7:39:32:7e:c1:07:5f:2b:b7:42:fe:
         3b:bd:29:12:d0:00:01:d3:76:dd:5a:90:a5:aa:8a:ae:c6:8e:
         82:b2:51:69:00:34:e5:cc:d5:17:e3:30:a2:b6:79:cf:f4:61:
         3b:8f:5f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:49:44 2025 by rpki-client