This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/98647190660511EE9F741151C4F9AE02.roa
File:                     98647190660511EE9F741151C4F9AE02.roa (raw, json)
Hash identifier:          w5qfrybVCNEt6L5g9RuoRTFfg1zzv3yykY9V2clxDGI=
Subject key identifier:   7E:AC:4D:17:E0:90:9A:09:C9:34:52:31:E1:8E:75:2F:EE:28:71:BF
Certificate issuer:       /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
Certificate serial:       019C
Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/98647190660511EE9F741151C4F9AE02.roa
Signing time:             Mon 01 Dec 2025 02:29:48 +0000
ROA not before:           Mon 01 Dec 2025 02:29:48 +0000
ROA not after:            Mon 30 Mar 2026 00:00:00 +0000
asID:                     137985
IP address blocks:        103.241.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl
                          rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C68B, serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
        Validity
            Not Before: Dec  1 02:29:48 2025 GMT
            Not After : Mar 30 00:00:00 2026 GMT
        Subject: CN=692cfd9c-d996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:cc:5c:47:e5:0e:b0:9b:13:03:02:33:3a:
                    82:d3:36:23:37:b3:da:e3:f6:49:2b:34:f3:c3:69:
                    df:a1:bf:a3:62:18:89:c2:bc:64:3b:6d:9a:dd:02:
                    83:c9:c9:36:28:83:1d:f4:ef:68:e4:14:b5:86:ba:
                    1b:f0:83:fb:3d:10:97:ee:77:86:fe:6d:21:ca:be:
                    63:d5:22:4a:57:d5:49:7c:dc:48:b5:15:2c:6a:92:
                    26:ec:c0:7b:1d:64:5e:03:3c:bd:89:c8:d5:db:36:
                    d1:c0:df:31:06:9f:71:a2:36:47:35:23:e4:ed:d8:
                    0c:d9:14:3a:03:46:d3:55:bb:22:af:6b:12:76:2d:
                    51:f9:14:fc:9c:ce:b4:e0:95:2a:5b:29:d6:1f:71:
                    dd:74:24:b1:31:01:04:d4:78:2b:27:da:b1:1e:26:
                    84:de:99:75:a8:ef:ba:5e:9f:ca:79:66:b2:e7:5c:
                    9a:cd:18:e3:3e:b4:5b:db:e1:be:7d:77:70:2f:27:
                    4e:b3:82:be:8c:24:e9:91:1d:e9:87:f9:ff:5a:bf:
                    4e:e7:37:48:1e:a5:9a:d3:e2:b7:ac:a2:fd:49:b6:
                    40:cb:dc:4d:10:ef:3c:40:a3:e8:81:bb:c6:34:98:
                    0e:e2:8d:7b:ef:55:ae:67:b4:00:5d:c0:8e:80:c5:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AC:4D:17:E0:90:9A:09:C9:34:52:31:E1:8E:75:2F:EE:28:71:BF
            X509v3 Authority Key Identifier:
                keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/98647190660511EE9F741151C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:07:a4:9a:72:b0:95:85:ec:4e:f4:90:ec:07:1a:1c:c9:77:
         01:c1:26:74:bb:d7:5b:f3:59:d0:bc:59:17:01:f8:d9:7e:86:
         87:d5:98:3b:12:0b:c4:29:fb:7c:bf:5d:28:73:61:b2:c8:95:
         a3:19:22:7f:f1:3c:d9:4d:24:b0:79:f8:b3:d0:11:26:77:9b:
         14:4b:bc:e9:68:30:c9:2f:a5:9e:ed:95:e4:af:74:d7:bd:c1:
         42:07:d6:25:d7:a7:0a:d2:c3:2b:58:f1:02:53:41:a6:bb:50:
         96:f0:9e:0c:4b:13:77:c6:71:e6:b8:b6:b3:cf:87:d2:7e:29:
         67:ef:e4:23:5c:90:02:cf:14:45:fb:5f:7b:fe:6a:9f:f8:82:
         3f:4e:b1:b0:ef:7d:6a:20:87:a1:9e:05:8f:aa:b9:d1:bb:63:
         00:ab:27:3b:b0:ee:3c:c2:e9:a7:ee:b8:d3:d7:7f:14:ff:3f:
         52:47:59:5b:32:c4:5c:66:eb:ce:97:96:10:af:aa:2b:29:9d:
         4c:91:f5:7d:51:71:f0:21:86:68:db:9b:79:55:81:1d:c7:36:
         ab:d7:ca:52:81:66:e9:c3:44:74:e4:00:48:18:1b:ec:3c:8f:
         e8:e8:58:83:80:04:e7:88:e0:a5:be:c1:27:3a:45:ce:d3:b9:
         50:f5:0d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:44:34 2025 by rpki-client