This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/5007D8DECAB411E889484D32C4F9AE02.roa
File:                     5007D8DECAB411E889484D32C4F9AE02.roa (raw, json)
Hash identifier:          TVZFCFvktJ5OxkCoipiRWo+QWTbjibg23BZncqtSlRw=
Subject key identifier:   2A:83:A5:13:2A:35:DB:3C:88:38:23:90:44:24:B0:7D:AD:D8:5C:17
Certificate issuer:       /CN=A914CF73/serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6
Certificate serial:       34B7
Authority key identifier: 78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/5007D8DECAB411E889484D32C4F9AE02.roa
Signing time:             Tue 02 Dec 2025 15:41:28 +0000
ROA not before:           Tue 02 Dec 2025 15:41:28 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     58739
IP address blocks:        103.30.168.0/24 maxlen: 24
                          103.243.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl
                          rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:09:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13495 (0x34b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CF73, serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6
        Validity
            Not Before: Dec  2 15:41:28 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=692f08a8-7904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:82:28:cd:62:df:11:8a:39:04:0c:9b:78:
                    31:a2:67:66:91:68:06:21:da:ee:e8:20:cc:b9:c2:
                    fd:cf:ad:fc:63:21:25:8f:51:20:0f:d3:45:df:60:
                    2d:5c:c9:ba:5b:c9:50:8f:7f:fb:98:08:fd:b0:b0:
                    2e:98:87:0d:8a:b5:d8:8a:89:d9:d4:91:55:8a:77:
                    b9:40:e1:ff:e4:d7:bc:5a:23:15:25:8c:67:3b:69:
                    5e:54:54:60:e2:d0:cc:d2:47:7f:e7:35:99:d1:16:
                    f6:48:da:19:34:46:5b:57:97:8b:4c:0c:ac:75:15:
                    a0:fd:cd:7a:6d:16:42:34:b5:26:ae:7b:35:d2:ff:
                    47:50:12:a4:1f:95:d3:d7:b1:f3:e8:4f:76:5c:68:
                    df:c9:9e:45:e6:07:c5:16:7b:61:dd:ba:37:ff:0a:
                    fe:d9:14:ee:4e:7e:44:f6:6e:a4:be:4f:49:43:ec:
                    78:b7:70:fc:a7:3b:a6:39:d7:ca:c9:06:7d:b4:43:
                    3f:a1:88:33:39:9a:d8:91:a7:1a:6e:01:88:32:d2:
                    5d:89:09:be:4a:82:fe:90:eb:cb:7d:56:8f:da:82:
                    71:8d:89:1e:e9:39:47:c8:0d:5a:75:45:ad:e4:07:
                    e3:6b:4f:c7:15:91:98:7c:04:2d:43:bb:6a:5b:2e:
                    87:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:83:A5:13:2A:35:DB:3C:88:38:23:90:44:24:B0:7D:AD:D8:5C:17
            X509v3 Authority Key Identifier:
                keyid:78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/5007D8DECAB411E889484D32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.168.0/24
                  103.243.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:92:2f:53:fe:28:38:40:6a:17:2b:f8:20:53:8b:d4:1f:41:
         77:78:a9:16:cf:5b:a2:2e:f8:25:fd:d5:e6:c4:b2:1e:cc:da:
         b5:e1:a0:a3:31:df:92:15:4b:65:80:53:e3:66:de:e2:e9:33:
         e8:9f:ab:41:8d:05:6f:17:f8:eb:53:d3:95:7d:3b:d6:a1:bd:
         ed:42:bb:f6:e8:2b:be:1a:4b:6d:b6:9d:c2:1c:6a:26:44:10:
         10:5b:61:59:e5:97:77:de:a1:97:7c:87:50:ad:f2:f0:98:85:
         87:56:43:63:46:03:68:75:f1:d4:13:d6:99:e9:44:6e:52:70:
         24:d7:06:fb:51:36:49:81:f6:73:5b:98:f0:42:c0:de:9a:1f:
         fe:a9:62:a8:12:74:f7:0f:29:37:b1:2e:75:b9:0b:4f:f8:18:
         a0:83:2e:1d:a4:c7:6e:3a:e0:45:1d:bc:88:97:17:54:c1:70:
         52:a9:4a:8f:92:dc:81:35:05:41:26:68:42:b5:39:fd:28:c5:
         36:cf:b8:16:c8:7c:38:ab:e8:c9:1a:84:9a:95:8a:6b:c0:c6:
         9d:d0:7a:8d:c6:e1:3d:1f:cc:fa:37:5f:ae:6f:9f:c8:bf:a6:
         2f:f6:04:ed:2f:67:51:bf:74:c4:83:84:f6:a6:91:c6:9d:50:
         79:f3:b8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:31:29 2025 by rpki-client