This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/65FE79B8885D11EB81454E41C4F9AE02.roa
File:                     65FE79B8885D11EB81454E41C4F9AE02.roa (raw, json)
Hash identifier:          jIcmISVPA5DP2aVKanXlgtnTLpIc4xkMqPcAMV4fzi0=
Subject key identifier:   8D:06:BB:BE:5E:76:21:51:4A:80:96:A9:27:E7:0C:85:A0:F3:0E:74
Certificate issuer:       /CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
Certificate serial:       06B8
Authority key identifier: C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/65FE79B8885D11EB81454E41C4F9AE02.roa
Signing time:             Tue 18 Nov 2025 21:14:04 +0000
ROA not before:           Tue 18 Nov 2025 21:14:04 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     58507
IP address blocks:        103.103.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl
                          rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1720 (0x6b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B83, serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
        Validity
            Not Before: Nov 18 21:14:04 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691ce19c-0292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:55:b1:c9:11:cd:77:5c:2d:45:c8:ad:31:f8:
                    64:b3:c1:1d:cb:d1:3e:8f:88:e6:d6:e0:f7:ad:3a:
                    14:03:60:29:a5:69:f5:81:40:c6:7d:01:90:27:d2:
                    72:11:7d:ee:4b:09:6d:b6:a9:3b:cb:c7:4a:c6:ae:
                    a8:16:bb:70:38:4f:46:32:49:8a:77:77:54:b2:78:
                    e6:e6:0f:34:ee:97:8a:fe:75:60:fd:18:35:9f:19:
                    a6:f5:b5:75:0b:85:ce:cc:75:36:9a:79:e6:f1:f9:
                    41:68:df:cf:df:d4:97:e4:d8:38:07:19:5a:2b:81:
                    59:26:ca:f1:a4:54:3b:31:51:89:bf:3e:d8:30:d4:
                    a0:ec:68:60:8b:68:86:c4:30:f3:c8:19:96:45:e7:
                    a6:6e:16:85:8c:11:01:4e:70:31:a0:8c:98:df:b0:
                    c9:da:87:9a:10:58:26:24:4c:a1:a4:d9:be:dc:0e:
                    5b:bc:29:8f:04:f2:46:73:f5:49:3e:20:8f:85:1c:
                    d9:f1:ef:74:8a:04:8a:90:dd:1a:a7:c8:ea:dc:a5:
                    88:87:f4:bb:87:4c:3f:e1:34:3f:45:2d:0d:c0:87:
                    5d:a0:7d:71:47:63:19:68:2a:15:76:1d:8d:3a:71:
                    cd:0c:62:28:ff:b0:74:e7:17:a2:4c:4d:4a:ee:67:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:06:BB:BE:5E:76:21:51:4A:80:96:A9:27:E7:0C:85:A0:F3:0E:74
            X509v3 Authority Key Identifier:
                keyid:C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/65FE79B8885D11EB81454E41C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:46:bf:4d:66:57:e6:49:69:c2:4f:09:c4:4b:fd:24:60:29:
         72:57:05:90:33:3a:b2:89:c4:51:d9:5d:16:33:a5:4e:4e:a6:
         f1:cc:e0:ee:4d:95:71:bc:6b:1e:fb:f4:15:3d:3e:c6:e5:25:
         73:85:c5:a4:a9:9d:c1:b0:d8:ab:29:6b:13:50:e3:62:8a:39:
         a5:e3:2f:0e:e0:3e:7c:dd:13:75:e5:45:b8:13:6d:0f:f7:ae:
         8d:0f:2f:8b:02:67:42:4a:07:19:b9:1f:7a:2e:01:fc:a8:b4:
         41:2a:64:6a:13:aa:c5:29:fd:b2:9b:70:69:1a:98:a1:44:50:
         af:d5:00:e9:32:c6:e2:05:9e:a9:eb:1d:f9:23:ba:f8:5f:fd:
         d6:13:82:76:5b:32:3d:17:28:4d:51:94:45:cc:97:29:86:d0:
         9d:8e:96:08:ab:5e:a7:a1:2d:2b:66:f7:a6:84:e1:78:77:34:
         cf:55:30:50:1b:f5:84:56:86:b5:f1:c1:68:ef:99:15:ac:2d:
         8d:3f:3d:15:2a:7b:12:4b:2d:5d:ed:ce:d2:32:f7:a5:dd:8d:
         03:b9:17:90:58:54:21:f5:d3:56:dd:04:b8:9a:92:11:0d:ab:
         23:a6:f2:9a:ae:7a:de:45:30:14:8a:97:f5:0b:30:1c:a6:c6:
         f0:18:ac:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:46:16 2025 by rpki-client