This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/31603938763B11EF810E6D1FC4F9AE02.roa
File:                     31603938763B11EF810E6D1FC4F9AE02.roa (raw, json)
Hash identifier:          z6LWqtEj9AU1LHL6Pkyr2Ux5B41+S1GwphxwVqUtIEg=
Subject key identifier:   18:D0:C6:CE:A0:04:3D:46:1E:67:02:7F:3C:C6:B6:DC:4E:60:FD:5F
Certificate issuer:       /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Certificate serial:       1F3E
Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/31603938763B11EF810E6D1FC4F9AE02.roa
Signing time:             Thu 06 Nov 2025 15:53:57 +0000
ROA not before:           Thu 06 Nov 2025 15:53:57 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     58631
IP address blocks:        103.5.28.0/24 maxlen: 24
                          103.192.197.0/24 maxlen: 24
                          2001:df0:247::/48 maxlen: 48
                          2400:c760:1::/48 maxlen: 48
                          2400:c760:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
                          rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7998 (0x1f3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
        Validity
            Not Before: Nov  6 15:53:57 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690cc495-f690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:8b:b4:d9:c0:ab:d8:4a:da:74:2b:12:d4:
                    a6:16:c9:01:ff:49:63:03:ec:8f:df:77:0f:a5:76:
                    10:e6:a7:e9:59:39:c3:0f:1a:c3:ee:03:7f:39:e0:
                    7d:3e:3d:08:9f:09:e1:43:86:ba:06:ae:85:5e:fb:
                    f5:81:c4:0e:f4:7b:1a:3a:4c:c5:fd:87:f5:f1:e5:
                    44:a1:a0:51:7f:fa:ca:73:eb:bf:32:ec:6a:f7:ab:
                    f1:01:dc:59:6d:ab:aa:b4:8d:69:ac:f3:c5:3e:e8:
                    4b:16:bf:bb:e7:66:bf:89:12:cb:0b:95:22:6b:88:
                    bd:68:80:3e:ab:78:0e:6f:b2:54:0c:e2:9a:b4:1c:
                    4c:20:1e:7f:c7:75:db:fe:ad:a5:e4:3b:c8:ae:69:
                    51:e2:69:5d:2e:8c:43:00:0e:d0:46:de:26:64:1a:
                    87:03:c9:74:5f:bf:4b:f2:28:c4:01:dd:94:89:f9:
                    5a:a0:10:13:3f:d5:3a:93:08:b0:42:2f:a3:4e:df:
                    a0:74:cc:4d:11:68:52:0c:8b:ad:25:e9:b7:0e:69:
                    f7:a3:24:8e:93:28:60:92:a6:e8:26:72:1f:a7:07:
                    9a:09:ab:a8:40:e6:6b:29:21:aa:51:d1:09:46:76:
                    b2:5e:32:2f:eb:fb:f9:c1:eb:e0:ff:10:1b:c5:9e:
                    f5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D0:C6:CE:A0:04:3D:46:1E:67:02:7F:3C:C6:B6:DC:4E:60:FD:5F
            X509v3 Authority Key Identifier:
                keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/31603938763B11EF810E6D1FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.28.0/24
                  103.192.197.0/24
                IPv6:
                  2001:df0:247::/48
                  2400:c760:1::-2400:c760:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         72:ca:48:2e:f4:55:7e:f8:a1:b4:a7:00:a3:ef:dc:f0:66:8d:
         da:44:44:2d:07:78:d6:42:d5:2a:50:e7:73:e5:23:0b:39:50:
         49:2a:e0:20:de:5e:dc:49:e5:72:6b:68:a2:43:67:f7:7f:64:
         6b:73:d8:d9:2f:b6:40:93:70:f2:dd:e7:66:6f:2b:b5:6c:76:
         09:f9:60:20:92:aa:82:18:c0:7c:fd:f5:54:0b:fb:9c:2d:37:
         ec:58:50:5a:fc:ff:d2:50:7e:09:30:3c:bf:1a:f3:ba:26:29:
         a5:f7:b5:11:5b:04:46:08:2f:93:a7:3d:f0:33:0a:75:57:3f:
         3c:37:4a:a9:17:e5:71:3b:c7:b5:16:9c:70:85:25:e5:7e:20:
         d1:e3:60:dd:2b:67:2b:37:03:f5:f3:b9:9d:50:4b:45:0f:f7:
         fa:9d:e3:5e:c8:86:7e:c4:23:30:3b:cf:83:51:c0:55:ff:f3:
         ce:d0:51:8a:00:09:90:df:53:f7:4d:37:36:53:eb:df:50:c2:
         09:ea:7d:19:fd:bc:ff:04:87:65:b3:84:44:9d:7f:5f:b6:5c:
         65:49:51:2c:e3:44:3f:c1:d8:e0:4c:73:37:8a:68:aa:bc:3a:
         00:15:e0:4b:ce:c5:ce:ec:fd:60:b4:e0:d4:ea:29:ef:34:1d:
         d7:85:f4:10
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgICHz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1
MDM2ODI0NkYwHhcNMjUxMTA2MTU1MzU3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTBjYzQ5NS1mNjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx9CLtNnAq9hK2nQrEtSmFskB/0ljA+yP33cPpXYQ5qfpWTnDDxrD7gN/OeB9
Pj0InwnhQ4a6Bq6FXvv1gcQO9HsaOkzF/Yf18eVEoaBRf/rKc+u/Muxq96vxAdxZ
bauqtI1prPPFPuhLFr+752a/iRLLC5Uia4i9aIA+q3gOb7JUDOKatBxMIB5/x3Xb
/q2l5DvIrmlR4mldLoxDAA7QRt4mZBqHA8l0X79L8ijEAd2UiflaoBATP9U6kwiw
Qi+jTt+gdMxNEWhSDIutJem3Dmn3oySOkyhgkqboJnIfpweaCauoQOZrKSGqUdEJ
RnayXjIv6/v5wevg/xAbxZ71XwIDAQABo4ICwDCCArwwHQYDVR0OBBYEFBjQxs6g
BD1GHmcCfzzGttxOYP1fMB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC
MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0YwRTMvMjkxNTc2QkU2QjM0MTFFNjkxODRCNjZDQzRGOUFFMDIvMzE2MDM5Mzg3
NjNCMTFFRjgxMEU2RDFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E
OzA5MBIEAgABMAwDBABnBRwDBABnwMUwIwQCAAIwHQMHACABDfACRzASAwcAJADH
YAABAwcAJADHYAACMA0GCSqGSIb3DQEBCwUAA4IBAQByykgu9FV++KG0pwCj79zw
Zo3aREQtB3jWQtUqUOdz5SMLOVBJKuAg3l7cSeVya2iiQ2f3f2Rrc9jZL7ZAk3Dy
3edmbyu1bHYJ+WAgkqqCGMB8/fVUC/ucLTfsWFBa/P/SUH4JMDy/GvO6Jiml97UR
WwRGCC+Tpz3wMwp1Vz88N0qpF+VxO8e1FpxwhSXlfiDR42DdK2crNwP187mdUEtF
D/f6neNeyIZ+xCMwO8+DUcBV//PO0FGKAAmQ31P3TTc2U+vfUMIJ6n0Z/bz/BIdl
s4REnX9ftlxlSVEs40Q/wdjgTHM3imiqvDoAFeBLzsXO7P1gtODU6invNB3XhfQQ
-----END CERTIFICATE-----
Generated at Mon Dec 8 09:12:56 2025 by rpki-client