This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/7D77C698C05811F0BB78EE39C4F9AE02.roa
File:                     7D77C698C05811F0BB78EE39C4F9AE02.roa (raw, json)
Hash identifier:          jngcGens1UYCV2H59yZoYaDxMRp+Ya48t4t39KSQ5AY=
Subject key identifier:   8A:FA:3F:1F:3D:5F:B9:25:12:C4:61:96:59:68:94:E6:34:C0:3C:B0
Certificate issuer:       /CN=A913277C/serialNumber=F339DA61D93A49413E907FC5BD16AF968DFE9AD0
Certificate serial:       03
Authority key identifier: F3:39:DA:61:D9:3A:49:41:3E:90:7F:C5:BD:16:AF:96:8D:FE:9A:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/7D77C698C05811F0BB78EE39C4F9AE02.roa
Signing time:             Thu 13 Nov 2025 06:17:54 +0000
ROA not before:           Thu 13 Nov 2025 06:17:54 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136798
IP address blocks:        103.96.128.0/24 maxlen: 24
                          103.96.129.0/24 maxlen: 24
                          103.96.130.0/24 maxlen: 24
                          103.96.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.crl
                          rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913277C, serialNumber=F339DA61D93A49413E907FC5BD16AF968DFE9AD0
        Validity
            Not Before: Nov 13 06:17:54 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69157812-27d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0e:5d:d5:6f:17:95:0b:36:d5:2f:54:19:0e:
                    a2:79:0d:2b:6d:d7:b1:cc:ad:b4:fb:96:0e:dc:4c:
                    bf:70:36:5b:77:bb:aa:e8:49:f4:ce:1b:ff:a0:17:
                    20:33:9a:f7:e9:6f:49:2e:70:6e:a7:ce:2a:38:a9:
                    b5:1c:04:4e:7d:05:db:d8:db:62:64:c9:be:99:21:
                    d4:e9:1f:fa:06:e9:fd:fd:a1:b8:c1:9b:37:ce:fb:
                    99:ff:72:8f:e8:9a:93:f8:8d:b0:6e:b9:94:2e:64:
                    51:8f:a7:c1:6f:e7:cb:d4:21:8e:e6:1f:12:d9:fd:
                    df:ce:4d:72:2c:d6:03:e3:fd:bd:ee:87:49:9c:94:
                    64:20:1d:4c:a4:fe:7a:08:f0:1b:66:23:a4:18:fe:
                    4b:bf:11:ca:b5:be:ef:c6:8f:5a:62:e2:0d:d8:1a:
                    f8:90:e6:04:8d:19:1f:f2:f4:65:47:f5:82:d6:68:
                    48:7b:93:ac:7f:b9:bb:81:e0:cb:20:ad:0b:98:87:
                    f1:8b:4d:f2:57:cf:f5:83:9a:61:1e:33:13:ea:f8:
                    4a:49:74:77:7c:5f:8f:59:35:da:fb:45:1d:3c:20:
                    2d:2a:49:e2:b9:57:da:01:bf:a2:c7:a3:1f:49:6b:
                    7e:64:56:31:48:54:ed:47:6b:2b:22:1b:8d:ee:38:
                    7a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FA:3F:1F:3D:5F:B9:25:12:C4:61:96:59:68:94:E6:34:C0:3C:B0
            X509v3 Authority Key Identifier:
                keyid:F3:39:DA:61:D9:3A:49:41:3E:90:7F:C5:BD:16:AF:96:8D:FE:9A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/7D77C698C05811F0BB78EE39C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:5d:cd:74:54:54:06:5b:dc:94:cc:32:7f:f7:35:5b:ce:44:
         e1:83:1a:16:5a:92:7c:6f:9e:64:c1:69:db:fb:81:cd:29:b8:
         85:b7:80:95:45:e9:76:01:24:83:61:63:3c:84:de:cb:e4:80:
         e1:ea:79:d1:40:d2:d5:76:ff:d5:ad:06:f0:b6:79:4f:1b:7c:
         81:68:2f:2b:95:cc:a0:22:9b:a0:c2:c1:eb:fb:08:64:53:f4:
         13:df:84:b7:ef:89:23:d5:69:62:be:14:42:2d:24:9f:a7:fb:
         89:b4:b9:e5:02:a5:06:80:81:e8:5a:9a:17:09:dd:8a:e2:87:
         ea:10:a3:52:1f:27:24:83:ec:da:b1:dc:58:38:bc:5a:e3:82:
         3d:06:36:c0:98:8b:22:c3:b2:d8:0c:e7:e6:c5:67:2a:93:d0:
         e0:0c:af:34:d2:92:8b:c8:ac:54:ef:00:34:0b:33:88:b2:4e:
         42:d3:bf:f1:a0:fa:09:df:da:c1:db:33:7a:30:f7:32:00:8b:
         a8:73:bd:c1:5c:a1:56:d1:16:15:e2:fc:98:f4:75:9a:2e:8d:
         b0:09:be:1a:63:7d:e5:06:6c:ed:18:b0:31:3a:66:7f:02:d9:
         1b:d7:3c:58:23:9c:04:b3:1e:b7:1f:4b:ea:ca:c1:72:3c:09:
         8c:bb:82:e7
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Mjc3QzExMC8GA1UEBRMoRjMzOURBNjFEOTNBNDk0MTNFOTA3RkM1QkQxNkFGOTY4
REZFOUFEMDAeFw0yNTExMTMwNjE3NTRaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MTU3ODEyLTI3ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSDl3VbxeVCzbVL1QZDqJ5DStt17HMrbT7lg7cTL9wNlt3u6roSfTOG/+gFyAz
mvfpb0kucG6nzio4qbUcBE59BdvY22Jkyb6ZIdTpH/oG6f39objBmzfO+5n/co/o
mpP4jbBuuZQuZFGPp8Fv58vUIY7mHxLZ/d/OTXIs1gPj/b3uh0mclGQgHUyk/noI
8BtmI6QY/ku/Ecq1vu/Gj1pi4g3YGviQ5gSNGR/y9GVH9YLWaEh7k6x/ubuB4Msg
rQuYh/GLTfJXz/WDmmEeMxPq+EpJdHd8X49ZNdr7RR08IC0qSeK5V9oBv6LHox9J
a35kVjFIVO1HaysiG43uOHqPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUivo/Hz1f
uSUSxGGWWWiU5jTAPLAwHwYDVR0jBBgwFoAU8znaYdk6SUE+kH/FvRavlo3+mtAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNzdDL0I5N0M3Mzk2QzlG
MjExRURBMUQ5OUU2NUM0RjlBRTAyLzh6bmFZZGs2U1VFLWtIX0Z2UmF2bG8zLW10
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOHpuYVlkazZTVUUta0hfRnZSYXZsbzMtbXRBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Mjc3Qy9COTdDNzM5NkM5RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi83RDc3QzY5OEMw
NTgxMUYwQkI3OEVFMzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmdggDANBgkqhkiG9w0BAQsFAAOCAQEASV3NdFRUBlvclMwy
f/c1W85E4YMaFlqSfG+eZMFp2/uBzSm4hbeAlUXpdgEkg2FjPITey+SA4ep50UDS
1Xb/1a0G8LZ5Txt8gWgvK5XMoCKboMLB6/sIZFP0E9+Et++JI9VpYr4UQi0kn6f7
ibS55QKlBoCB6FqaFwndiuKH6hCjUh8nJIPs2rHcWDi8WuOCPQY2wJiLIsOy2Azn
5sVnKpPQ4AyvNNKSi8isVO8ANAsziLJOQtO/8aD6Cd/awdszejD3MgCLqHO9wVyh
VtEWFeL8mPR1mi6NsAm+GmN95QZs7RiwMTpmfwLZG9c8WCOcBLMetx9L6srBcjwJ
jLuC5w==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:06:06 2025 by rpki-client