This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/7E565BCC02EB11F084618D33C4F9AE02.roa
File:                     7E565BCC02EB11F084618D33C4F9AE02.roa (raw, json)
Hash identifier:          EiyCu0vojKly9zo+I5SeQzaBIubHaZ4bVOiCN+YJMlU=
Subject key identifier:   E7:48:C2:2F:3E:29:80:73:16:D4:DB:D5:10:C0:26:4E:93:CA:CA:DF
Certificate issuer:       /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
Certificate serial:       0C67
Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/7E565BCC02EB11F084618D33C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 18:29:31 +0000
ROA not before:           Thu 04 Dec 2025 18:29:31 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     151812
IP address blocks:        103.145.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3175 (0xc67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131579, serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
        Validity
            Not Before: Dec  4 18:29:31 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6931d30b-5602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f5:15:e3:d7:39:04:52:8e:d4:29:9a:36:6e:
                    ca:72:6f:ec:e1:c7:ac:2c:87:7e:b1:bc:0c:3b:9b:
                    35:8b:ee:0c:0f:96:a2:ae:72:4e:48:74:74:65:2b:
                    db:04:ac:bc:a7:80:a7:a6:cd:f1:86:2e:36:b7:e9:
                    91:0b:04:26:a3:f1:65:3c:4f:5e:0c:c4:1e:ac:77:
                    e9:e7:8e:bf:7c:7f:9e:f1:17:21:7b:15:14:0f:ae:
                    88:10:93:9a:69:d4:87:60:f7:68:b7:69:10:4c:3d:
                    e2:17:f8:a4:3b:09:d0:be:46:5b:50:5d:81:e1:6b:
                    1b:9f:25:d0:8d:4b:08:26:f2:62:61:5e:14:a4:3a:
                    54:e4:9b:9c:2d:29:dc:bd:8e:2b:84:5b:66:f0:bc:
                    ae:53:fe:19:39:a8:a0:9c:32:16:77:56:b7:fb:03:
                    d1:b8:11:ad:e7:b8:3f:91:63:90:8c:5f:69:f3:54:
                    18:2b:9e:ed:de:80:68:29:3a:b1:a7:5f:1a:ec:34:
                    ee:6a:dd:a0:7d:b5:8d:83:3a:40:46:87:4d:cc:5c:
                    31:9f:33:ec:44:3b:8c:ba:e7:39:fe:f2:6a:aa:a2:
                    bd:b4:48:9c:80:82:c0:5a:16:a7:fc:7f:71:74:dd:
                    7a:fe:bd:af:d5:8a:f0:ef:30:53:37:64:b6:b8:a9:
                    14:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:48:C2:2F:3E:29:80:73:16:D4:DB:D5:10:C0:26:4E:93:CA:CA:DF
            X509v3 Authority Key Identifier:
                keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/7E565BCC02EB11F084618D33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:b9:31:95:47:4d:c7:92:47:99:d0:7b:b4:5b:2b:36:82:6e:
         61:0c:93:70:81:5d:78:19:a0:27:e2:b3:32:37:ad:ea:ef:ca:
         7f:bf:0b:27:1e:05:dd:6f:b2:d7:a2:f3:11:1b:53:a4:9a:4d:
         7d:10:d2:9b:2e:c9:48:bb:b1:06:58:79:31:6c:18:5c:26:72:
         3b:4c:a9:1e:49:79:15:0f:c7:a6:21:4d:bc:c7:ea:86:55:43:
         71:92:a6:2c:e5:43:c7:d2:db:b0:8c:02:60:25:7f:96:dd:0b:
         ac:8f:79:7c:73:9f:40:4a:62:bd:96:40:f1:14:b1:40:ed:75:
         be:c9:3d:0e:ee:8a:5f:cf:6f:30:cc:93:91:fb:7c:b2:dd:17:
         e7:8b:51:59:4e:40:ec:a8:a8:be:f9:74:98:c5:6e:dc:f6:f9:
         4a:cd:09:37:af:6c:64:c0:0d:d2:87:cd:30:13:fb:c4:eb:25:
         f6:1a:ae:0a:50:62:b2:13:0a:77:34:20:21:f7:c1:f1:39:85:
         05:2a:a2:4d:f3:4e:a1:ea:9c:06:d4:b2:74:e3:06:fd:a7:a9:
         a9:c7:c6:e5:60:17:8c:c6:10:d2:4d:43:28:5c:f4:2c:71:94:
         9e:b4:57:d9:59:43:52:bb:ab:4f:e1:57:32:23:08:fb:c3:f9:
         ea:dd:c6:43
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE1NzkxMTAvBgNVBAUTKDlGMEMxNTIwOEQ3RUU2MkU4MENCOTc1Q0ZFNENFQzlD
QkYxRDI3NTYwHhcNMjUxMjA0MTgyOTMxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMxZDMwYi01NjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1PUV49c5BFKO1CmaNm7Kcm/s4cesLId+sbwMO5s1i+4MD5airnJOSHR0ZSvb
BKy8p4Cnps3xhi42t+mRCwQmo/FlPE9eDMQerHfp546/fH+e8RchexUUD66IEJOa
adSHYPdot2kQTD3iF/ikOwnQvkZbUF2B4WsbnyXQjUsIJvJiYV4UpDpU5JucLSnc
vY4rhFtm8LyuU/4ZOaignDIWd1a3+wPRuBGt57g/kWOQjF9p81QYK57t3oBoKTqx
p18a7DTuat2gfbWNgzpARodNzFwxnzPsRDuMuuc5/vJqqqK9tEicgILAWhan/H9x
dN16/r2v1Yrw7zBTN2S2uKkUDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOdIwi8+
KYBzFtTb1RDAJk6TysrfMB8GA1UdIwQYMBaAFJ8MFSCNfuYugMuXXP5M7Jy/HSdW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU3OS8yRDJGNDM3NDE0
RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVpNkF5NWRjX2t6c25MOGRK
MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL253d1ZJSTEtNWk2QXk1ZGNfa3pzbkw4ZEoxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzE1NzkvMkQyRjQzNzQxNEU2MTFFQTkyOUJCQzQ1QzRGOUFFMDIvN0U1NjVCQ0Mw
MkVCMTFGMDg0NjE4RDMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnkc0wDQYJKoZIhvcNAQELBQADggEBABe5MZVHTceSR5nQ
e7RbKzaCbmEMk3CBXXgZoCfiszI3rervyn+/CyceBd1vstei8xEbU6SaTX0Q0psu
yUi7sQZYeTFsGFwmcjtMqR5JeRUPx6YhTbzH6oZVQ3GSpizlQ8fS27CMAmAlf5bd
C6yPeXxzn0BKYr2WQPEUsUDtdb7JPQ7uil/PbzDMk5H7fLLdF+eLUVlOQOyoqL75
dJjFbtz2+UrNCTevbGTADdKHzTAT+8TrJfYargpQYrITCnc0ICH3wfE5hQUqok3z
TqHqnAbUsnTjBv2nqanHxuVgF4zGENJNQyhc9CxxlJ60V9lZQ1K7q0/hVzIjCPvD
+erdxkM=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:56:51 2025 by rpki-client