This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/C1313974CD3611F0AF85B537C4F9AE02.roa
File:                     C1313974CD3611F0AF85B537C4F9AE02.roa (raw, json)
Hash identifier:          ppc/7vtWbXh6lIBiWqey83fiaRTt71rWU/oO4/Z9TxE=
Subject key identifier:   E5:11:C8:DF:01:4D:A5:1B:B8:93:CF:04:62:04:8C:E3:2C:F8:A4:A8
Certificate issuer:       /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial:       1078
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/C1313974CD3611F0AF85B537C4F9AE02.roa
Signing time:             Sat 29 Nov 2025 15:19:10 +0000
ROA not before:           Sat 29 Nov 2025 15:19:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134153
IP address blocks:        103.138.26.0/24 maxlen: 24
                          103.138.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
                          rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4216 (0x1078)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
        Validity
            Not Before: Nov 29 15:19:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=692b0eee-38c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e5:b7:b8:69:09:84:8b:e5:e6:cd:0e:71:7c:
                    9c:f5:f5:ff:5a:31:28:02:d5:3f:89:25:3f:cc:3e:
                    b0:d8:c1:fa:5b:fa:8d:66:06:f7:9d:fd:3f:fa:1b:
                    37:f9:2a:e2:b9:71:3b:84:0f:39:19:06:39:01:8d:
                    00:b5:06:08:09:c5:ee:c4:a4:9d:01:95:ff:2d:67:
                    63:3f:38:09:87:9e:87:62:43:10:2a:c3:6a:b1:84:
                    47:2e:0e:c0:8c:90:51:7b:ed:0f:ef:fd:28:7c:79:
                    35:ae:c7:fe:3b:9b:2d:fb:1c:e5:73:44:f0:96:96:
                    d0:75:4c:e0:c4:18:c5:75:2f:45:33:69:ce:e9:52:
                    7e:3a:b1:84:29:a0:10:36:6b:4d:3d:15:e1:0f:3c:
                    ed:8d:4a:c3:b4:04:6d:ee:ce:f1:bc:e0:3e:83:24:
                    2f:54:8d:a4:85:53:b1:0e:3c:14:a3:63:3b:59:a2:
                    22:e0:00:64:95:1d:e6:97:09:c4:83:2c:38:14:9c:
                    ae:fb:ea:54:a2:5a:11:d4:fe:ff:3e:5b:3c:31:1b:
                    f6:bc:db:2f:92:22:85:8a:2c:e4:ab:66:33:dd:c9:
                    e5:00:29:12:c4:74:b9:36:ed:82:28:0a:b0:df:96:
                    37:16:20:44:81:d1:98:ea:80:83:c3:a9:96:7e:44:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:11:C8:DF:01:4D:A5:1B:B8:93:CF:04:62:04:8C:E3:2C:F8:A4:A8
            X509v3 Authority Key Identifier:
                keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/C1313974CD3611F0AF85B537C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:ce:2f:dd:3d:4c:64:b1:e9:37:a5:61:11:77:8a:3e:b7:3c:
         67:17:0e:ee:93:f8:91:74:1f:1f:44:b6:5a:ff:1b:74:3d:a4:
         ac:d6:47:01:e0:4b:5c:cc:67:d3:e9:87:f5:7c:bd:e1:b6:ac:
         3e:c1:a1:97:34:22:32:ca:8b:32:ff:08:63:8a:c1:84:08:6a:
         21:bb:70:66:fa:e3:19:e2:0d:cd:e8:3c:8d:a9:4e:6b:48:f9:
         8b:ee:a3:ac:cb:95:5a:e1:6d:d1:91:17:40:d6:19:12:70:23:
         2e:bf:08:ec:d9:aa:3b:7c:07:5d:0c:f5:5e:3b:75:74:f6:9f:
         33:06:b5:8b:e4:75:b0:41:90:20:67:00:0c:3f:1a:ed:56:85:
         8b:07:a6:59:67:52:3e:69:52:95:a7:ba:e8:28:ac:94:a9:b6:
         da:5a:21:8b:b3:8b:9b:bd:ba:8d:4e:e8:87:ec:d2:8e:25:11:
         f3:21:a7:95:78:2d:de:38:a8:cc:34:ad:42:46:e5:a1:32:5f:
         23:97:f9:af:d1:b1:26:1c:37:5b:7f:89:54:b2:57:78:c1:dd:
         41:89:6f:73:59:56:cb:a6:c0:bc:21:18:7c:6b:54:97:7f:90:
         48:88:24:91:3d:6b:40:53:aa:49:15:07:50:03:79:4f:e7:5e:
         2d:e6:02:ed
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M0MzIxMTAvBgNVBAUTKDMyOURBMDNEQjk5NDQ3NTE0OThBNUZDQTUzQzg1REFB
NjBDQjlBMzIwHhcNMjUxMTI5MTUxOTEwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJiMGVlZS0zOGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzuW3uGkJhIvl5s0OcXyc9fX/WjEoAtU/iSU/zD6w2MH6W/qNZgb3nf0/+hs3
+SriuXE7hA85GQY5AY0AtQYICcXuxKSdAZX/LWdjPzgJh56HYkMQKsNqsYRHLg7A
jJBRe+0P7/0ofHk1rsf+O5st+xzlc0TwlpbQdUzgxBjFdS9FM2nO6VJ+OrGEKaAQ
NmtNPRXhDzztjUrDtARt7s7xvOA+gyQvVI2khVOxDjwUo2M7WaIi4ABklR3mlwnE
gyw4FJyu++pUoloR1P7/Pls8MRv2vNsvkiKFiizkq2Yz3cnlACkSxHS5Nu2CKAqw
35Y3FiBEgdGY6oCDw6mWfkTG0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFOURyN8B
TaUbuJPPBGIEjOMs+KSoMB8GA1UdIwQYMBaAFDKdoD25lEdRSYpfylPIXapgy5oy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzMi8yRENBQkE2ODVD
RjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIxRkppbF9LVThoZHFtRExt
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01wMmdQYm1VUjFGSmlsX0tVOGhkcW1ETG1qSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0M0MzIvMkRDQUJBNjg1Q0YyMTFFOTg0OTM5MjI0QzRGOUFFMDIvQzEzMTM5NzRD
RDM2MTFGMEFGODVCNTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnihowDQYJKoZIhvcNAQELBQADggEBAG/OL909TGSx6Tel
YRF3ij63PGcXDu6T+JF0Hx9Etlr/G3Q9pKzWRwHgS1zMZ9Pph/V8veG2rD7BoZc0
IjLKizL/CGOKwYQIaiG7cGb64xniDc3oPI2pTmtI+Yvuo6zLlVrhbdGRF0DWGRJw
Iy6/COzZqjt8B10M9V47dXT2nzMGtYvkdbBBkCBnAAw/Gu1WhYsHpllnUj5pUpWn
uugorJSpttpaIYuzi5u9uo1O6Ifs0o4lEfMhp5V4Ld44qMw0rUJG5aEyXyOX+a/R
sSYcN1t/iVSyV3jB3UGJb3NZVsumwLwhGHxrVJd/kEiIJJE9a0BTqkkVB1ADeU/n
Xi3mAu0=
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:34:20 2025 by rpki-client