This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/61F1288A76B311ECABA1A612C4F9AE02.roa
File:                     61F1288A76B311ECABA1A612C4F9AE02.roa (raw, json)
Hash identifier:          sgnzWnaw0vANyz/OY7RM5bLktuy+6I9RFPeqf3AsTxo=
Subject key identifier:   A8:7D:1B:2F:50:E4:3F:B0:52:35:61:1E:4D:E1:2E:88:09:E6:D0:4E
Certificate issuer:       /CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
Certificate serial:       0457
Authority key identifier: A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/61F1288A76B311ECABA1A612C4F9AE02.roa
Signing time:             Tue 18 Nov 2025 23:15:26 +0000
ROA not before:           Tue 18 Nov 2025 23:15:26 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147298
IP address blocks:        103.174.138.0/23 maxlen: 24
                          2400:12a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl
                          rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 22:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F26E, serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
        Validity
            Not Before: Nov 18 23:15:26 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691cfe0e-49e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:b4:ec:36:25:36:c9:93:b5:f6:3a:f9:81:
                    aa:63:96:0d:92:d8:66:06:5a:bb:cd:c3:dc:b6:8a:
                    12:06:77:6d:7e:f5:69:43:10:6a:da:db:04:97:80:
                    0e:ca:7d:8b:d4:67:0e:e6:56:0e:8a:dc:df:c5:22:
                    d3:32:ee:8d:c2:af:b6:e6:ee:32:28:ea:0b:ab:55:
                    6d:ab:d1:7a:64:96:3e:7f:14:25:64:95:4f:26:c8:
                    0e:df:77:7e:ee:23:47:7d:79:92:0d:0d:54:d9:1c:
                    99:73:c6:f8:d2:a0:91:43:1b:26:ff:d9:50:f2:7e:
                    ce:ba:b7:41:4a:2b:82:4a:52:d2:ef:ae:55:7d:e5:
                    85:81:3e:24:ad:8d:14:d8:84:89:28:72:1b:b3:65:
                    24:b2:d6:2e:d7:0e:9c:3e:7d:7e:06:08:6e:69:e4:
                    5d:1d:95:e9:98:33:d5:dc:a9:7e:0d:be:b9:17:98:
                    7b:84:64:d9:9e:59:ae:40:5f:b1:32:0e:f9:b0:cb:
                    68:c6:4d:03:06:97:59:22:0b:98:34:87:48:65:b0:
                    4e:39:0c:82:74:8e:b7:f4:cc:6a:ad:89:d9:5e:1f:
                    0a:88:97:c1:f5:68:9c:85:f5:ff:6e:40:33:ed:8a:
                    1b:9c:2a:25:33:2b:36:2d:13:18:17:54:5a:bf:48:
                    59:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7D:1B:2F:50:E4:3F:B0:52:35:61:1E:4D:E1:2E:88:09:E6:D0:4E
            X509v3 Authority Key Identifier:
                keyid:A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/61F1288A76B311ECABA1A612C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.138.0/23
                IPv6:
                  2400:12a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:2c:53:3d:a9:98:05:3f:37:b3:61:80:fe:f8:5c:e8:f9:55:
         fb:36:2b:c7:76:6c:a3:22:eb:cf:60:a7:d7:be:c4:f9:e7:c3:
         1d:2a:0e:e6:cc:a0:15:c4:95:b0:59:88:b5:ef:ee:09:2e:34:
         fc:57:82:c1:77:00:d9:52:a2:a7:55:09:aa:31:62:2a:f9:3a:
         d0:86:32:9e:fe:d8:83:90:a9:5c:04:3f:d4:6b:7e:12:35:f5:
         fa:15:92:6e:ea:a7:e2:0e:17:c1:05:58:ff:f8:34:68:de:c0:
         c0:ae:8d:49:5a:75:50:09:fe:26:3d:e4:55:d8:25:e3:c7:04:
         71:31:43:f1:52:f7:c5:16:fc:32:de:68:36:1b:fe:cb:32:54:
         e4:d6:37:97:d3:b0:79:7f:51:99:d0:4e:72:31:5b:cb:f9:9b:
         96:eb:17:0c:4a:bf:54:1f:ef:be:08:7f:e8:fd:6c:83:e9:33:
         ad:f1:ed:80:92:f2:b3:de:e6:9e:fd:eb:63:e3:24:d2:28:25:
         46:84:39:86:66:36:c3:17:38:64:46:f8:37:d9:07:ac:a4:25:
         75:47:4b:26:60:0c:50:41:e9:5c:a3:2f:9e:b2:62:32:a3:be:
         87:f1:f0:49:3b:13:64:e9:88:70:f9:ec:8d:4c:7a:ba:b7:44:
         5f:35:50:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:21:23 2025 by rpki-client