This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/702B683202E911F097290F2EC4F9AE02.roa
File:                     702B683202E911F097290F2EC4F9AE02.roa (raw, json)
Hash identifier:          sacDAKMV0IlhxL+E1+gGomun+TIZdZwc4g1OZ/geqzA=
Subject key identifier:   1D:F1:9B:16:E2:16:5E:40:3C:FD:B7:E7:FF:4C:6A:FC:2A:6F:7C:91
Certificate issuer:       /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
Certificate serial:       0C66
Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/702B683202E911F097290F2EC4F9AE02.roa
Signing time:             Thu 04 Dec 2025 18:29:30 +0000
ROA not before:           Thu 04 Dec 2025 18:29:30 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139823
IP address blocks:        103.145.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3174 (0xc66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131579, serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
        Validity
            Not Before: Dec  4 18:29:30 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6931d309-9deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:27:07:c8:cc:48:c0:55:5b:dc:6f:61:06:
                    a0:e4:56:01:a8:10:05:d8:c1:a9:86:6d:b9:0f:89:
                    5c:6c:67:85:8e:1c:27:c3:74:c4:13:69:d9:8b:92:
                    c1:d2:9f:ae:81:12:96:0c:40:01:8f:e6:3d:a2:a4:
                    bc:95:ba:ea:6c:46:f2:a8:28:a0:bb:ff:77:d4:fb:
                    9e:ec:9a:89:de:5f:34:a5:50:7d:48:48:3b:fd:72:
                    2f:3f:1b:4d:f4:e2:85:fb:55:c7:73:cd:2f:3c:12:
                    cf:c6:a1:04:c7:a5:fb:4a:93:86:78:9e:0b:61:f2:
                    26:74:b8:da:7f:39:0c:d3:6c:33:df:eb:cd:9e:e7:
                    3d:23:44:ed:67:aa:11:e9:37:0f:15:58:5f:31:22:
                    36:3d:3f:79:e4:98:98:b1:81:fa:78:90:da:6c:d7:
                    a5:a1:62:6b:01:5c:d5:7a:06:6b:e8:9e:6b:e6:28:
                    8c:22:a6:25:78:1f:c3:5a:7a:49:5f:e3:22:6f:17:
                    ea:aa:1f:4d:d0:f3:be:e2:57:d7:16:93:a0:b5:80:
                    dc:1a:b9:ae:ec:48:bf:27:77:9d:df:d0:5b:49:50:
                    a9:df:07:f2:df:ac:73:94:8f:37:15:5c:aa:7a:2f:
                    0b:b3:7f:f6:a3:80:81:0e:3c:98:5e:b4:83:6a:f1:
                    e2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F1:9B:16:E2:16:5E:40:3C:FD:B7:E7:FF:4C:6A:FC:2A:6F:7C:91
            X509v3 Authority Key Identifier:
                keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/702B683202E911F097290F2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:d9:60:32:98:f2:77:c4:7d:d7:93:b9:6c:bd:18:69:7b:c1:
         f9:c9:70:42:19:39:14:22:4d:88:9a:85:90:11:ad:e1:71:6f:
         a0:bb:6d:2e:b0:05:6a:d7:82:9a:44:12:b0:c9:21:26:08:d9:
         2c:71:d5:aa:7a:67:95:71:71:b7:bd:7c:60:77:9c:34:9b:f0:
         40:b3:51:f4:03:d8:94:00:26:ec:fe:83:c1:41:8a:f3:4a:c0:
         85:85:ad:ff:ad:7e:b4:ab:ff:b2:e5:b3:ca:8e:15:a9:73:79:
         aa:9b:72:69:6a:1e:d3:57:72:0f:97:e6:ee:8f:75:dc:4a:34:
         d2:36:30:08:9b:a6:da:15:fd:a0:65:9c:06:81:37:e7:e0:aa:
         3b:bc:16:7a:98:88:bb:1c:96:53:13:74:dd:3c:e0:75:53:d6:
         b4:34:25:2d:08:df:66:99:d3:e1:22:89:d8:f2:53:5a:4d:af:
         94:ea:dd:73:e5:8b:51:51:14:1b:75:44:a4:d5:8e:4d:0a:de:
         6c:d9:95:e9:ee:70:69:aa:b8:bf:2a:11:da:69:cd:00:8d:95:
         57:cf:ce:16:18:39:5c:bb:fa:7f:ef:d4:b1:d9:c3:20:ef:ce:
         04:5e:83:35:57:65:19:86:4e:75:0c:32:40:d1:d0:64:15:d3:
         01:36:52:6e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE1NzkxMTAvBgNVBAUTKDlGMEMxNTIwOEQ3RUU2MkU4MENCOTc1Q0ZFNENFQzlD
QkYxRDI3NTYwHhcNMjUxMjA0MTgyOTMwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMxZDMwOS05ZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwGknB8jMSMBVW9xvYQag5FYBqBAF2MGphm25D4lcbGeFjhwnw3TEE2nZi5LB
0p+ugRKWDEABj+Y9oqS8lbrqbEbyqCigu/931Pue7JqJ3l80pVB9SEg7/XIvPxtN
9OKF+1XHc80vPBLPxqEEx6X7SpOGeJ4LYfImdLjafzkM02wz3+vNnuc9I0TtZ6oR
6TcPFVhfMSI2PT955JiYsYH6eJDabNeloWJrAVzVegZr6J5r5iiMIqYleB/DWnpJ
X+Mibxfqqh9N0PO+4lfXFpOgtYDcGrmu7Ei/J3ed39BbSVCp3wfy36xzlI83FVyq
ei8Ls3/2o4CBDjyYXrSDavHi3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFB3xmxbi
Fl5APP235/9Mavwqb3yRMB8GA1UdIwQYMBaAFJ8MFSCNfuYugMuXXP5M7Jy/HSdW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU3OS8yRDJGNDM3NDE0
RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVpNkF5NWRjX2t6c25MOGRK
MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL253d1ZJSTEtNWk2QXk1ZGNfa3pzbkw4ZEoxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzE1NzkvMkQyRjQzNzQxNEU2MTFFQTkyOUJCQzQ1QzRGOUFFMDIvNzAyQjY4MzIw
MkU5MTFGMDk3MjkwRjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnkcwwDQYJKoZIhvcNAQELBQADggEBAMDZYDKY8nfEfdeT
uWy9GGl7wfnJcEIZORQiTYiahZARreFxb6C7bS6wBWrXgppEErDJISYI2Sxx1ap6
Z5Vxcbe9fGB3nDSb8ECzUfQD2JQAJuz+g8FBivNKwIWFrf+tfrSr/7Lls8qOFalz
eaqbcmlqHtNXcg+X5u6PddxKNNI2MAibptoV/aBlnAaBN+fgqju8FnqYiLscllMT
dN084HVT1rQ0JS0I32aZ0+EiidjyU1pNr5Tq3XPli1FRFBt1RKTVjk0K3mzZlenu
cGmquL8qEdppzQCNlVfPzhYYOVy7+n/v1LHZwyDvzgRegzVXZRmGTnUMMkDR0GQV
0wE2Um4=
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:46:02 2025 by rpki-client