This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/8325B5147FE911F09A568E85C4F9AE02.roa
File:                     8325B5147FE911F09A568E85C4F9AE02.roa (raw, json)
Hash identifier:          v3/g5fOu1I3Xt9XyiRKqp60C0Htsc/EEKv6CYurACO0=
Subject key identifier:   71:9A:D7:28:BC:23:10:D7:59:B1:86:99:D7:E3:CE:5C:AA:F4:DD:2A
Certificate issuer:       /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Certificate serial:       0CCC
Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/8325B5147FE911F09A568E85C4F9AE02.roa
Signing time:             Tue 02 Dec 2025 17:48:44 +0000
ROA not before:           Tue 02 Dec 2025 17:48:44 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     135654
IP address blocks:        103.78.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl
                          rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3276 (0xccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
        Validity
            Not Before: Dec  2 17:48:44 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692f267c-24ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:38:42:46:67:55:15:51:fd:71:69:0d:4c:
                    5c:25:d4:9f:4e:f5:6d:ee:9d:54:8c:aa:8b:84:11:
                    e1:b2:12:7e:b0:d3:9b:a9:c5:b6:5c:8d:a3:4d:6d:
                    6e:58:d9:0d:14:12:ed:4e:9a:4a:0c:f6:cb:ce:b4:
                    11:4b:82:db:ef:e7:57:20:ca:60:d1:32:33:aa:ca:
                    17:5f:b2:16:7d:70:ad:c3:4d:9f:33:a9:f9:d6:47:
                    9b:75:b0:e0:49:a4:1e:30:26:47:00:09:82:68:a2:
                    27:96:73:f0:a4:f7:bb:51:b8:f9:d4:a6:4b:e7:40:
                    ce:0f:fc:2a:82:56:8a:7d:39:d7:9d:8c:02:97:ed:
                    00:da:4d:15:54:ac:52:ac:23:f5:5f:0f:0c:ba:90:
                    79:9d:5c:c4:06:22:2b:84:b7:ae:7c:68:ae:b8:c4:
                    8a:10:f2:87:cf:6d:3d:ed:c6:a6:ba:86:6c:82:d3:
                    a4:ed:b5:0e:7a:6c:9e:43:e8:af:a0:c5:c8:f9:fc:
                    59:6d:e9:bc:d9:7b:52:ac:7e:a0:a4:1d:77:ac:f7:
                    3e:fb:1a:40:4e:d7:2c:97:8f:74:a2:8b:9e:36:d8:
                    0e:43:20:4f:89:da:ec:11:7a:07:e2:68:07:bf:6e:
                    9a:76:6e:87:c1:3f:d1:eb:f7:43:2b:c5:9e:d2:4f:
                    8a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9A:D7:28:BC:23:10:D7:59:B1:86:99:D7:E3:CE:5C:AA:F4:DD:2A
            X509v3 Authority Key Identifier:
                keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/8325B5147FE911F09A568E85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:cc:1f:45:38:95:9c:e3:1f:47:4d:11:21:94:1e:8d:64:c9:
         31:75:f5:0a:ae:cc:80:ab:0e:be:5c:5d:d4:90:97:a8:c6:04:
         0a:bb:0b:99:30:2b:b9:4a:5f:3e:e1:52:a4:09:50:4d:c6:97:
         85:18:83:33:e2:26:96:85:21:1b:9b:59:0c:a2:aa:01:fb:7a:
         10:83:83:6f:d2:ba:2c:2f:b8:22:fb:bc:d8:47:39:c6:40:ad:
         f6:e7:99:a7:5d:3a:95:e2:37:ef:b5:9e:dd:cd:96:cf:22:98:
         3a:65:75:73:95:1a:07:be:3a:46:a1:3c:3c:5b:79:27:f0:17:
         67:39:59:a0:fe:b4:9a:cc:0a:98:9a:4d:19:7b:05:77:f1:af:
         b6:ee:30:6f:a1:95:37:de:18:98:cd:75:09:54:11:33:a4:12:
         80:0c:42:e4:c9:e2:cb:82:a1:c5:12:8b:0e:0b:ca:24:af:42:
         f5:a9:48:d1:8b:05:08:2e:33:d9:8c:31:dd:cf:3a:fe:26:f3:
         12:32:dc:c2:97:a8:99:58:10:2a:aa:a5:28:d4:3f:a4:78:42:
         e9:2f:02:91:5d:d5:75:78:d6:09:d5:3d:0e:49:cc:d2:4e:61:
         33:a5:1e:d7:39:73:fe:23:53:cd:2e:28:f5:51:5b:69:db:6a:
         27:5b:8d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:19:50 2025 by rpki-client