This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/009E969E885C11EB88A7723DC4F9AE02.roa
File:                     009E969E885C11EB88A7723DC4F9AE02.roa (raw, json)
Hash identifier:          K6g4QgChsxgzRfHFt3YwGm0Ei1HU3rEHfJ2P36tg9XM=
Subject key identifier:   B7:45:0D:65:A8:EF:FA:CE:DC:07:77:49:08:13:2A:DE:B4:9E:3F:D3
Certificate issuer:       /CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
Certificate serial:       06B7
Authority key identifier: C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/009E969E885C11EB88A7723DC4F9AE02.roa
Signing time:             Tue 18 Nov 2025 21:14:03 +0000
ROA not before:           Tue 18 Nov 2025 21:14:03 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     45654
IP address blocks:        103.103.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl
                          rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1719 (0x6b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B83, serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
        Validity
            Not Before: Nov 18 21:14:03 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691ce19b-8382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:c1:9a:07:00:d4:4e:bf:e1:7e:87:f2:8f:
                    04:4f:e8:a8:bf:cc:67:5c:80:e7:3e:94:ab:72:88:
                    06:ce:0d:7b:b7:64:66:ce:95:d1:e7:b9:00:89:db:
                    69:69:94:44:ab:cf:fc:c7:8f:8b:e0:5e:fb:87:8d:
                    15:20:df:11:79:fe:a1:83:97:e2:04:6a:44:99:4a:
                    64:da:6b:79:8d:a5:bc:9a:ee:28:dc:4a:a9:e7:f5:
                    2e:f9:2f:bc:a4:b0:5f:43:a3:b7:b3:d3:cd:60:93:
                    6d:e6:8f:d8:f0:a6:7d:67:88:df:c2:65:66:8c:d9:
                    61:d1:66:fa:42:4d:e9:29:6f:ee:20:bf:d3:53:df:
                    7d:2b:be:57:eb:9b:68:66:7d:dc:53:1d:95:69:49:
                    ec:74:d2:59:75:f2:1e:ea:ec:e5:6f:d5:6b:84:bb:
                    f4:d2:2e:0a:e1:e6:d4:78:9b:d0:91:59:2c:c7:7e:
                    ee:7a:f6:79:41:c3:a0:80:51:60:63:1a:eb:7a:75:
                    a2:bc:ff:47:8a:75:5c:14:3e:6c:08:e6:2a:85:ea:
                    ec:81:42:a1:87:ad:19:07:a6:4a:be:73:50:90:83:
                    63:45:e3:b2:94:b2:52:1c:cf:a3:c8:e1:c7:1f:87:
                    ec:8f:da:a7:63:d7:7c:40:b8:72:a6:ff:c5:d6:0e:
                    df:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:45:0D:65:A8:EF:FA:CE:DC:07:77:49:08:13:2A:DE:B4:9E:3F:D3
            X509v3 Authority Key Identifier:
                keyid:C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/009E969E885C11EB88A7723DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:0f:85:63:b8:e2:90:7b:d6:d4:a0:34:44:ba:66:13:50:a0:
         90:21:59:e6:e9:68:ae:ac:94:0b:c0:79:8f:44:a7:13:43:65:
         55:8a:ed:10:23:cd:bf:ab:21:ab:a9:75:f7:3d:dd:bc:26:9d:
         8c:32:a3:14:fd:c6:a1:50:17:e6:4e:59:a2:dd:98:2d:31:79:
         b3:e6:3a:9e:fb:ab:50:8f:a3:39:18:88:13:7a:61:68:1e:59:
         0d:15:bc:ad:b6:a4:b1:21:4a:e8:82:80:a3:0a:9a:48:e8:07:
         79:3e:16:24:b7:58:11:a9:2e:7d:e7:c0:05:5f:f0:a8:9c:ca:
         f2:ac:2a:af:a3:7f:86:6c:b8:2f:4a:13:58:65:fb:44:81:ed:
         47:7a:9e:77:48:07:6a:cf:0e:8f:f7:18:19:7f:dc:04:34:cc:
         de:a1:69:90:1e:27:fb:46:8a:41:64:81:49:e7:2a:a2:e3:16:
         2f:78:40:f1:96:4f:a6:30:c4:89:bd:f5:33:5c:b0:ec:92:4e:
         5a:e1:50:3f:8b:59:7e:67:e2:17:fd:b0:74:52:f4:b4:72:1f:
         ad:73:07:7f:7e:30:ad:00:41:07:c2:f3:dd:23:9a:28:d9:2f:
         3b:38:20:21:ec:20:54:74:90:d4:52:ce:b8:bd:8a:17:ef:9d:
         ba:58:65:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:00:33 2025 by rpki-client