This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa
File:                     BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa (raw, json)
Hash identifier:          j+BVCzGmHhrmZNWRNyRwqjg6Au56wUjhsrKVbEHpiXE=
Subject key identifier:   B1:50:82:32:8E:F0:4D:05:F4:A1:29:C1:B9:02:B5:1A:A2:A9:CF:3E
Certificate issuer:       /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
Certificate serial:       06BF
Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa
Signing time:             Thu 20 Nov 2025 21:43:33 +0000
ROA not before:           Thu 20 Nov 2025 21:43:33 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     142063
IP address blocks:        103.166.102.0/24 maxlen: 24
                          103.166.103.0/24 maxlen: 24
                          2001:df1:b340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl
                          rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1727 (0x6bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
        Validity
            Not Before: Nov 20 21:43:33 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=691f8b85-1187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6c:41:06:4c:2b:d5:74:90:68:83:19:76:03:
                    4b:de:56:77:76:2a:1b:85:54:c1:83:6a:17:03:e4:
                    e4:64:38:eb:6f:5d:a5:35:fe:0f:08:ce:b1:b3:4e:
                    72:4b:a5:a1:eb:ac:39:35:03:52:c4:de:1f:b4:5e:
                    03:69:b9:d4:e3:70:ce:ad:04:02:b5:2e:aa:ab:96:
                    92:00:5b:01:40:7a:cb:99:8b:98:1b:58:6c:9f:4e:
                    d3:68:af:b8:27:4b:a4:5d:25:a4:05:80:eb:ad:c7:
                    d6:89:b3:42:6d:a3:30:fa:e7:16:d6:de:36:31:48:
                    0e:c8:df:b1:1c:52:4e:79:97:b9:22:14:b8:cc:af:
                    ab:e4:4d:ec:91:1c:a7:2c:f6:17:60:c0:0e:15:2f:
                    f3:eb:00:91:54:0d:72:e1:b3:1c:4b:83:bb:a7:22:
                    63:49:66:b8:c9:f7:16:ea:e5:23:97:54:f2:d9:35:
                    8e:b5:83:e4:c2:4a:e7:d3:9d:04:29:76:f3:d1:6a:
                    00:e4:1f:c7:32:a9:d4:dc:61:dc:7b:35:ad:d8:8c:
                    8c:83:e4:6a:6e:cd:77:93:d9:4c:2d:67:b3:d2:49:
                    4f:33:a7:3f:92:99:9e:ce:91:02:ff:0b:7b:61:b5:
                    f2:92:46:92:5f:43:14:8e:90:63:fa:d2:a7:e4:f8:
                    ec:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:50:82:32:8E:F0:4D:05:F4:A1:29:C1:B9:02:B5:1A:A2:A9:CF:3E
            X509v3 Authority Key Identifier:
                keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.102.0/23
                IPv6:
                  2001:df1:b340::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:b4:c3:b9:a2:09:0d:89:9e:b7:ed:68:d2:42:63:4a:c1:9c:
         4e:8d:1e:8f:9b:81:64:d9:00:d0:b9:06:1d:10:11:b6:f1:8e:
         f6:7c:dc:0d:d8:7a:ae:f0:f6:af:cc:88:23:a8:fd:2c:12:0c:
         74:0a:12:99:11:b3:8a:e0:76:02:61:6b:26:d0:23:40:0e:04:
         7d:28:ce:95:cb:1f:b5:47:2f:db:63:1c:b4:ee:8a:d4:96:05:
         30:bf:ae:93:95:6d:da:f6:15:09:1d:6e:b2:f1:8c:f8:1b:c9:
         b0:ff:9d:0c:53:1e:9e:f5:cf:3d:7c:b9:88:fb:9d:f8:3f:c0:
         c5:d7:16:98:d5:2d:41:b8:9f:d4:d9:5b:44:a5:b1:3b:37:70:
         9e:07:7c:44:f6:16:64:d0:1a:e5:e2:44:cf:5e:0f:9d:89:f9:
         65:fc:59:80:7e:f9:7f:8d:2c:58:f8:6a:60:4d:09:6b:72:8b:
         4f:15:9a:79:37:bf:a4:9a:83:ad:15:91:92:b1:be:80:27:fd:
         4a:b0:32:33:47:34:9e:61:9e:e3:12:37:85:64:f3:05:10:01:
         44:84:a6:07:90:2e:76:4a:ba:1f:d2:3f:46:76:4b:a0:b9:53:
         0f:d5:4f:7b:15:b5:62:24:9b:4b:b6:c0:e5:8f:70:00:a6:f3:
         ff:ac:0d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:04:46 2025 by rpki-client