This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/F800618EBBA511F0B0EA597FC4F9AE02.roa
File:                     F800618EBBA511F0B0EA597FC4F9AE02.roa (raw, json)
Hash identifier:          Yw6c7WUM5QYHlwQT+zvf4O1cT4XiBTAyty4UdU8rvsQ=
Subject key identifier:   D2:8D:6A:9B:27:D6:62:42:79:04:7B:28:39:A3:1D:14:9E:B9:A9:86
Certificate issuer:       /CN=A913B243/serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D
Certificate serial:       03
Authority key identifier: 68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/F800618EBBA511F0B0EA597FC4F9AE02.roa
Signing time:             Fri 07 Nov 2025 06:49:55 +0000
ROA not before:           Fri 07 Nov 2025 06:49:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154212
IP address blocks:        202.20.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl
                          rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B243, serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D
        Validity
            Not Before: Nov  7 06:49:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=690d9693-09f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4c:34:e0:ce:9a:20:34:34:18:7c:80:54:e5:
                    40:79:bd:84:dd:45:15:6c:33:db:4e:43:8b:f9:41:
                    d5:99:f8:f6:91:f6:9e:30:b9:b5:ba:82:a5:f2:26:
                    7d:81:d0:0b:df:16:5e:cd:06:b1:71:c5:21:f3:a3:
                    0f:82:dc:a0:72:b2:ec:7b:7d:84:96:e8:0b:d6:4c:
                    20:cc:2d:5a:29:41:ed:6f:cd:39:c8:cd:b3:d8:77:
                    41:3b:ff:3e:aa:79:3e:99:4e:2e:d3:11:4d:e0:c1:
                    f7:d3:c3:aa:3f:5d:28:7e:b7:62:52:ac:b6:44:29:
                    fa:f9:3a:d5:8e:61:7e:54:6c:23:a5:bc:cf:3f:b6:
                    ad:00:28:1e:e4:cb:ab:c8:2d:65:d0:a2:dc:af:cc:
                    29:44:4e:23:90:30:30:87:ed:9b:46:dc:f5:e6:83:
                    f9:fc:48:2f:72:eb:dd:0d:dc:10:cb:b0:96:cf:0f:
                    5f:19:1d:6f:92:69:bf:69:d9:c5:0b:a1:e6:e7:1e:
                    72:eb:66:02:69:88:34:4f:17:5e:c2:e7:36:fa:03:
                    f6:2e:c4:27:c2:5c:e2:67:de:ea:45:e1:12:16:92:
                    2b:6d:65:c2:af:42:6e:7f:0d:48:27:77:b4:c7:ca:
                    78:54:61:28:43:eb:7e:05:16:e0:fb:1c:8b:40:64:
                    af:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8D:6A:9B:27:D6:62:42:79:04:7B:28:39:A3:1D:14:9E:B9:A9:86
            X509v3 Authority Key Identifier:
                keyid:68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/F800618EBBA511F0B0EA597FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.20.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:36:d5:96:c6:29:3b:72:03:3d:fe:05:a4:c8:1e:83:25:42:
         ed:43:96:f8:9f:99:fb:5e:a9:ec:3c:d2:92:17:e8:ed:e5:81:
         3d:0e:60:f4:d2:b3:10:f1:cd:0f:a1:cd:15:5d:fa:3a:d9:c7:
         9c:3c:a6:07:23:fe:e9:79:a7:3b:a2:24:9d:90:66:82:99:35:
         c1:35:26:74:69:cb:7a:fc:5c:c0:c0:52:d9:a9:12:d4:c1:6f:
         6d:16:ae:31:86:bd:a8:46:9c:92:7c:0c:c0:b6:b3:70:fc:27:
         02:5d:f6:bc:e3:cc:ed:7c:e0:39:39:54:4c:bb:e8:35:df:77:
         ee:30:06:cf:eb:3f:96:76:c0:f2:62:44:c1:a6:26:07:6d:ed:
         c4:a3:4c:75:bd:b8:3f:dc:21:a0:af:c4:14:ae:c1:42:6d:da:
         c4:61:c9:97:9c:72:0e:d9:e6:b9:7a:32:55:17:a0:79:67:bb:
         04:34:da:6c:2b:36:b9:7f:9c:4e:44:c3:fe:1b:fd:90:4f:65:
         b0:26:12:91:2d:d6:e9:70:e7:75:83:28:5f:93:2b:9f:6b:fe:
         43:13:2a:c5:28:c9:b8:3d:7d:22:c1:f9:29:ae:1f:df:72:db:
         fd:cd:b5:32:67:fc:58:03:7f:9e:ff:9c:ad:34:c8:fe:93:ce:
         5d:7c:e3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:35:43 2025 by rpki-client