This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/B49D829014F411EA96EC5874C4F9AE02.roa
File:                     B49D829014F411EA96EC5874C4F9AE02.roa (raw, json)
Hash identifier:          2n+pOMbXO7Z6sbIAK/vUBP+MDxkFKijt/P29CCZWwUw=
Subject key identifier:   CD:D5:23:A3:A1:36:9C:1F:C1:38:F0:A2:34:95:5D:F1:17:9E:2F:58
Certificate issuer:       /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Certificate serial:       0C67
Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/B49D829014F411EA96EC5874C4F9AE02.roa
Signing time:             Wed 24 Dec 2025 18:16:23 +0000
ROA not before:           Wed 24 Dec 2025 18:16:23 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.145.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
                          rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3175 (0xc67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
        Validity
            Not Before: Dec 24 18:16:23 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=694c2df6-845b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:cc:c7:38:50:68:22:39:ba:ea:f1:ca:12:
                    db:9f:06:c6:da:fa:4a:3a:4f:46:3e:da:48:30:33:
                    c8:de:e8:44:93:16:f6:ee:e5:e2:c3:44:d0:f6:a2:
                    ba:33:01:10:c2:43:31:41:cf:67:03:44:31:6f:77:
                    6e:fc:55:40:d0:12:65:4f:08:e9:3a:ad:c4:7b:39:
                    1e:14:c1:e7:a0:8b:cb:09:09:86:69:a1:bf:ab:8d:
                    c7:ee:2d:63:ac:0e:25:2b:dc:c2:8f:85:71:13:38:
                    5a:04:ef:0a:fc:ba:ac:ad:0c:8a:06:7e:10:34:e8:
                    30:ef:ee:3a:16:bb:74:48:1c:4c:ef:16:ec:d6:72:
                    3b:c4:cd:16:d9:04:51:f6:84:12:cc:a0:2c:18:15:
                    98:b2:96:87:79:e5:f0:cb:60:b9:7f:92:4e:28:54:
                    d3:ce:35:3d:eb:f0:6c:ef:6c:6d:56:c6:a0:0c:d1:
                    bd:79:90:2f:ae:d2:51:45:64:f4:95:a8:24:7e:7e:
                    ab:e2:a6:45:d5:01:48:42:08:c6:cc:2a:5a:27:ee:
                    b8:eb:ce:e8:dd:d4:b9:2b:a2:68:a4:ad:17:e4:1d:
                    9c:10:f7:3d:cc:9c:02:00:46:f1:bb:8a:1b:a9:93:
                    c4:d9:00:72:d1:c9:6b:4c:c9:c6:18:30:e1:32:a8:
                    15:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D5:23:A3:A1:36:9C:1F:C1:38:F0:A2:34:95:5D:F1:17:9E:2F:58
            X509v3 Authority Key Identifier:
                keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/B49D829014F411EA96EC5874C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:62:12:fa:b0:89:2d:3b:43:d3:80:a9:39:7a:e2:bc:2c:4e:
         0f:44:2c:20:c6:5d:81:9e:c0:52:e8:83:01:62:a8:4d:af:67:
         67:39:ad:77:09:6a:fd:96:78:be:98:31:48:28:e1:99:49:17:
         4c:64:8b:52:ef:f4:b6:3d:d6:75:c6:c6:cc:fc:ff:02:a0:80:
         8d:80:4f:ff:6e:9c:29:bb:2d:f2:79:f4:fa:d8:ed:7b:f8:62:
         1f:84:c9:eb:36:08:3d:5a:61:ec:3d:15:4c:20:c1:fd:aa:34:
         16:11:84:b9:7a:95:17:fb:81:4f:3d:cb:77:25:37:5c:7e:14:
         8e:81:fe:a7:04:29:52:0a:30:14:71:b3:a4:49:b3:d2:0b:2e:
         63:a0:8d:b7:62:68:4f:f6:62:09:44:9f:39:82:39:2e:94:2c:
         63:6a:eb:99:9d:87:a4:80:23:0d:56:9d:b9:61:f4:b6:0d:e2:
         5e:41:54:3f:a9:c8:27:c2:7b:a3:f5:1c:aa:74:c2:75:46:3e:
         60:b6:06:73:e3:c2:da:d6:7c:d6:5f:ab:a8:af:aa:56:18:c4:
         de:39:8f:95:ac:da:7c:6c:e2:c2:12:b8:98:42:69:98:02:b4:
         1b:0c:6d:2e:2d:9f:a1:e2:c4:a8:9f:8c:e3:e4:26:b9:7f:54:
         dc:87:d1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:17:06 2026 by rpki-client