This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/683A9D3A52EF11EC83A5744EC4F9AE02.roa
File:                     683A9D3A52EF11EC83A5744EC4F9AE02.roa (raw, json)
Hash identifier:          LakU53mmAKZxWbtHABnd6u2JIQUwSgIdxv6XnbOWa7Q=
Subject key identifier:   39:83:E7:C0:50:FA:C9:F0:AD:28:92:A4:9B:CC:FC:74:36:4E:6E:3C
Certificate issuer:       /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Certificate serial:       04AF
Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/683A9D3A52EF11EC83A5744EC4F9AE02.roa
Signing time:             Fri 14 Nov 2025 22:45:00 +0000
ROA not before:           Fri 14 Nov 2025 22:45:00 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     148988
IP address blocks:        103.175.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
                          rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 22:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199 (0x4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
        Validity
            Not Before: Nov 14 22:45:00 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6917b0ec-76b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c2:e9:7a:c2:74:85:e6:ab:41:a3:77:63:39:
                    3d:73:6c:d5:63:c6:d3:be:d1:e9:a9:2e:f9:02:8c:
                    b0:0c:86:86:c8:4c:83:b8:f9:9b:ff:40:88:66:5a:
                    a1:e6:b0:c8:7f:19:3a:f4:21:be:5a:30:38:46:b2:
                    cb:0b:ae:41:3a:f1:54:3f:bf:46:73:30:e1:c3:3e:
                    57:04:96:be:a9:65:24:4e:03:26:d6:42:86:f6:96:
                    d6:79:bb:ee:4e:ba:d7:96:23:a5:6b:28:9a:56:80:
                    10:09:5c:19:cf:fa:da:e5:96:d5:28:ed:3c:88:44:
                    4c:0c:af:cf:c0:de:a3:c9:6e:dc:a3:ff:9d:68:49:
                    cf:39:59:c1:f5:b2:53:9a:16:df:48:b8:ab:c7:42:
                    8c:6e:51:db:b6:42:c2:38:1b:2f:61:0c:74:f3:82:
                    6b:bb:9d:75:d1:4c:67:ec:f3:cb:ea:34:66:f7:8d:
                    86:28:85:14:ac:19:b6:f9:0e:28:f5:64:3c:43:15:
                    b6:af:4c:2e:c9:b9:c1:14:de:3a:37:f8:69:a5:4e:
                    90:fa:6b:e6:2a:e5:5d:a7:ff:e8:a5:7a:a4:ec:b6:
                    33:1e:05:ce:f9:44:e5:4d:ab:cb:45:bc:22:b7:94:
                    8e:fa:4f:24:2a:6f:d3:67:27:8e:a5:42:55:58:e9:
                    76:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:83:E7:C0:50:FA:C9:F0:AD:28:92:A4:9B:CC:FC:74:36:4E:6E:3C
            X509v3 Authority Key Identifier:
                keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/683A9D3A52EF11EC83A5744EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:96:07:8b:09:1d:f6:87:a2:b5:97:3b:f7:c2:38:ad:df:f6:
         cf:58:6c:8d:b5:48:df:b5:69:f5:2a:df:dd:f3:e4:13:d5:b2:
         9d:07:50:0d:df:b7:2f:3a:12:78:04:fa:29:d6:89:e2:a7:f4:
         80:88:1d:5c:ab:a2:bd:73:b2:e2:a1:1c:07:6b:23:79:4c:ac:
         69:b5:1e:d0:50:3c:8e:39:7c:d0:0b:a6:c9:7e:12:4b:be:90:
         74:32:53:94:51:b9:73:4d:ed:35:16:f0:38:ac:33:02:54:9d:
         d0:1a:05:80:36:c7:17:1d:04:97:1b:a1:6c:6b:8a:b6:40:bb:
         af:81:e4:02:2b:02:08:4e:59:54:34:16:35:33:21:5c:92:b6:
         21:d3:20:c4:ac:c8:1d:ca:1c:e5:66:e1:00:0e:7a:13:72:fc:
         d3:83:ff:ee:8f:e0:c6:9f:a1:26:81:89:15:06:6f:94:5e:c6:
         e3:59:8b:03:f1:dd:95:83:db:48:e8:01:75:8c:3e:e4:2f:a1:
         d0:75:a7:df:d3:91:e3:d5:16:c5:48:dd:8f:2a:9a:b3:02:9a:
         63:e7:70:65:14:c5:a6:aa:ba:27:20:84:40:37:2c:80:1f:57:
         57:7b:41:bb:ab:a8:36:87:23:97:4d:70:2d:72:84:69:7a:cf:
         de:87:e3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:40:11 2025 by rpki-client