This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/D58286CA1F9D11EDA5DD9842C4F9AE02.roa
File:                     D58286CA1F9D11EDA5DD9842C4F9AE02.roa (raw, json)
Hash identifier:          oG24+gBdb2MAENTwTgbndjpIPtUaekwdniISkv1l3L4=
Subject key identifier:   4F:EE:8D:C2:50:65:CB:46:ED:FC:5A:5C:71:AA:19:15:F5:06:B9:69
Certificate issuer:       /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
Certificate serial:       02BC
Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/D58286CA1F9D11EDA5DD9842C4F9AE02.roa
Signing time:             Mon 01 Dec 2025 00:27:07 +0000
ROA not before:           Mon 01 Dec 2025 00:27:07 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     140381
IP address blocks:        103.146.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl
                          rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700 (0x2bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
        Validity
            Not Before: Dec  1 00:27:07 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=692ce0db-6b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0f:71:e6:b3:2a:41:49:33:1f:b4:cc:42:03:
                    75:ed:66:47:42:1a:69:99:85:aa:ad:0a:53:bd:3c:
                    14:cc:1f:60:fb:29:00:ef:d1:1d:5b:10:aa:18:55:
                    5d:60:08:b0:53:84:8f:3a:f2:ee:ef:0c:5a:a2:80:
                    55:f2:c1:d5:47:cc:0b:7c:53:57:6b:eb:2f:ca:e1:
                    e1:d2:0d:94:cb:d5:a2:5c:47:1d:1a:ce:c1:dc:7a:
                    38:3c:d9:39:ec:25:ea:85:40:b3:e0:33:16:38:65:
                    ce:3e:1d:bc:8e:08:c9:25:34:ac:ea:25:1e:a8:94:
                    2f:c7:d4:f2:e1:da:89:2b:40:94:07:dd:ad:19:5f:
                    74:1b:53:49:06:6c:34:26:d7:95:16:90:83:05:0d:
                    bd:b1:d6:57:67:46:6e:5d:23:45:8b:6b:ed:97:5a:
                    22:65:b8:d0:8e:61:73:7c:25:eb:b8:2a:fb:61:a9:
                    44:85:11:5b:1b:6b:ee:f6:1e:f9:80:b0:e4:9b:27:
                    bd:6e:b6:fb:29:12:ef:13:1b:06:5f:37:27:ec:f0:
                    a8:c5:1b:ae:05:00:dc:1f:c8:d7:8b:3a:79:9b:a5:
                    02:68:95:21:38:e3:ce:73:af:b2:17:9a:d3:02:c0:
                    d8:34:26:c9:00:2c:69:c5:58:0c:e7:d8:71:76:9f:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EE:8D:C2:50:65:CB:46:ED:FC:5A:5C:71:AA:19:15:F5:06:B9:69
            X509v3 Authority Key Identifier:
                keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/D58286CA1F9D11EDA5DD9842C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:a6:4c:54:df:b3:b1:7d:66:e6:7a:b0:6e:44:a9:e0:64:dd:
         e4:ef:bf:6e:ea:06:1d:0d:7f:c0:60:3c:f8:65:d0:90:7b:29:
         b8:f8:62:92:56:e2:8c:f0:98:24:a0:b7:b7:27:39:84:0c:86:
         eb:45:15:01:60:91:e4:78:83:a3:04:c6:1e:e3:ec:58:c1:5a:
         59:e4:bc:ae:c3:5b:7a:5e:23:04:2a:cd:69:d3:e7:fc:21:6a:
         80:fa:ad:2e:1f:e3:7d:df:5c:1e:71:a0:72:d0:cc:7d:b8:37:
         2d:2c:a0:96:8b:ee:11:e1:b2:a7:30:19:3f:f1:23:2f:17:79:
         c2:70:65:7b:94:85:c7:82:4d:dd:d5:8b:cb:24:56:34:e5:a1:
         3a:61:52:ce:5b:8f:8e:60:ed:64:9e:86:c9:1e:f0:28:07:65:
         b9:62:c9:75:a5:f1:4d:fb:49:62:02:06:9e:14:f4:38:81:6a:
         3e:64:f8:08:99:20:1a:00:d0:6a:83:21:64:0f:53:ef:19:82:
         3b:4c:09:5e:78:7c:6e:ff:c7:15:3e:5c:b5:c6:86:7c:7b:92:
         be:d4:ea:85:75:58:ca:05:d1:a6:c9:99:37:b8:3e:9c:52:93:
         ad:c7:e3:47:ef:ef:66:18:d1:d0:8a:4b:ed:43:06:0d:a9:aa:
         bb:f9:64:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:52:56 2025 by rpki-client