This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/A83E51EC45F611EDBA9D6062C4F9AE02.roa
File:                     A83E51EC45F611EDBA9D6062C4F9AE02.roa (raw, json)
Hash identifier:          /+DB0DwIdWV5MsoUQNnzsNFXQf9YCNytI0Fy3CklZBg=
Subject key identifier:   F4:C7:83:CB:38:A7:76:91:54:90:11:49:7C:51:25:29:9B:1E:FF:1B
Certificate issuer:       /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Certificate serial:       024C
Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/A83E51EC45F611EDBA9D6062C4F9AE02.roa
Signing time:             Sun 23 Nov 2025 00:17:46 +0000
ROA not before:           Sun 23 Nov 2025 00:17:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        103.58.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
                          rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
        Validity
            Not Before: Nov 23 00:17:46 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=692252aa-0eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1f:b4:cc:20:cc:44:25:4d:44:5e:11:66:6d:
                    07:83:26:88:69:13:ce:25:f4:0a:a2:66:68:98:8e:
                    5b:97:9e:aa:16:bf:d9:7f:b1:dc:34:e6:5e:37:f5:
                    c7:e6:ca:f6:47:7b:98:86:39:20:10:24:4f:67:2c:
                    61:d5:7f:d3:57:bb:ad:0e:3f:70:90:8d:ff:9f:a3:
                    4c:f1:06:0d:a0:9b:fb:4c:f9:e0:2a:ef:1a:f0:e4:
                    d0:fb:a4:db:82:e3:86:f1:42:72:45:e2:d9:61:c6:
                    ef:96:c1:a2:ba:4c:7c:99:48:13:eb:67:c2:08:94:
                    22:a5:30:57:1d:03:e3:29:f3:8f:c5:9e:7d:3a:7c:
                    92:d3:98:f7:02:69:eb:ac:e4:e4:a3:2e:dd:e7:43:
                    f3:99:86:14:2b:6a:ae:1a:c4:69:dd:88:68:8b:c7:
                    07:fc:26:ff:84:98:e2:3a:c7:10:d8:cb:98:ae:5a:
                    e1:c3:1f:1d:3a:05:e0:66:21:9d:af:95:9b:be:8c:
                    ca:44:f1:63:1a:fb:33:63:7d:9e:6f:a5:28:ed:c2:
                    fb:28:6b:f0:d7:05:c3:28:fe:e2:7a:09:89:07:32:
                    da:75:44:e6:95:f3:ba:e0:d0:9b:15:ac:e1:30:c8:
                    9c:7c:b6:25:83:b9:6f:ea:46:00:02:8b:f5:f0:f8:
                    a4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C7:83:CB:38:A7:76:91:54:90:11:49:7C:51:25:29:9B:1E:FF:1B
            X509v3 Authority Key Identifier:
                keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/A83E51EC45F611EDBA9D6062C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:fc:df:5f:f7:8a:30:ff:e8:c3:d7:f7:e9:cb:51:ed:be:86:
         a3:36:9c:b2:2a:e6:59:c4:76:ab:c3:ff:f8:77:08:23:53:d6:
         c1:f6:44:80:4c:e0:51:8a:39:9d:ca:9f:2f:cf:61:98:5b:87:
         d6:7d:2b:fe:98:52:2d:5e:f1:e1:8d:a3:8b:12:d1:5a:e2:22:
         0b:f1:cb:83:5d:2e:09:f2:ac:c5:d9:df:55:c3:5a:6b:60:ec:
         f0:fb:c4:b9:a9:81:c6:0c:18:59:c7:a4:54:bd:f8:38:73:ad:
         db:ff:4b:55:d6:be:27:01:9d:da:47:b7:10:93:2e:64:68:73:
         6b:56:8f:d6:08:b8:80:84:b4:b0:d8:13:29:ad:d0:2e:55:b1:
         eb:cf:f1:85:a5:6b:eb:75:29:f7:e8:61:02:77:4d:1b:92:c2:
         04:8c:a7:06:10:61:c6:79:c4:e6:bd:94:75:e1:ec:73:4c:c5:
         98:12:7b:ea:f7:f3:bd:87:03:79:35:48:12:76:67:be:ef:cf:
         ee:bc:10:4a:1e:c4:f6:7e:f9:74:45:de:4a:f6:a5:b4:5b:e8:
         60:22:31:48:e8:18:5b:93:f2:f0:c7:ab:4e:be:9f:c3:67:89:
         1f:07:dd:08:4d:f7:2f:d6:b4:10:a9:0a:8f:aa:d0:b1:3e:53:
         19:0d:1f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:45:19 2025 by rpki-client