This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/253B1382106C11F08D824C19C4F9AE02.roa
File:                     253B1382106C11F08D824C19C4F9AE02.roa (raw, json)
Hash identifier:          Lm98gfuE4nx/90/5gHuI/T5p7zlVxbDFyDvflUZQMdA=
Subject key identifier:   52:B9:DF:F6:7D:89:F5:2F:C3:F8:8A:A7:8D:4B:5A:7A:14:CD:85:FA
Certificate issuer:       /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Certificate serial:       18C3
Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/253B1382106C11F08D824C19C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 16:15:29 +0000
ROA not before:           Thu 04 Dec 2025 16:15:29 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153621
IP address blocks:        103.77.24.0/23 maxlen: 23
                          2401:d540::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
                          rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6339 (0x18c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
        Validity
            Not Before: Dec  4 16:15:29 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6931b3a1-d6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:83:26:52:9a:c4:20:b1:79:85:36:7b:cb:
                    22:70:01:1e:e9:1a:75:15:ac:0e:7f:2e:22:f3:e2:
                    c7:c2:ca:de:1f:94:1c:ca:6e:ab:c6:c3:97:b9:a5:
                    e1:62:0d:ee:da:2f:7d:b2:32:f4:1e:9c:fc:d9:22:
                    9a:b2:48:04:f3:e7:4e:93:25:cf:98:7c:a2:6c:4a:
                    e8:04:ee:21:82:de:ec:18:db:72:7c:8d:4f:0d:c4:
                    04:56:ae:96:e6:b6:74:1b:20:ca:36:3d:db:df:cc:
                    d7:88:f1:65:63:f3:f9:45:88:2d:ad:8d:4b:56:a8:
                    78:08:95:a2:1e:9a:6a:93:77:b0:38:77:1c:58:29:
                    f8:45:29:c4:7f:b1:4c:cc:6a:69:46:86:aa:f5:0b:
                    19:a9:ed:5f:d0:db:44:d0:00:67:f2:69:3c:a8:1f:
                    53:2e:d8:76:51:c1:65:92:06:8d:c8:6b:ac:37:14:
                    0f:ad:38:f2:06:37:06:86:ff:b7:a4:0c:e9:39:1b:
                    eb:ca:76:87:2f:a7:5b:59:74:33:f4:b8:3f:49:2a:
                    e4:11:7a:72:33:7f:05:2c:74:2d:7b:32:a9:9d:49:
                    b6:ff:0f:90:e4:80:81:21:19:27:54:83:7f:21:03:
                    ed:f9:33:07:f4:44:bb:8a:eb:89:0a:cb:35:70:58:
                    74:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B9:DF:F6:7D:89:F5:2F:C3:F8:8A:A7:8D:4B:5A:7A:14:CD:85:FA
            X509v3 Authority Key Identifier:
                keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/253B1382106C11F08D824C19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.24.0/23
                IPv6:
                  2401:d540::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:a9:0f:74:20:9d:d4:69:db:86:bb:27:5b:dc:cc:b7:a6:71:
         5a:92:61:87:d5:f8:ba:3b:b2:b4:b9:57:8b:82:60:bd:4a:cd:
         61:b6:7d:ce:ad:ba:48:f8:f5:43:f8:a7:90:2b:bf:70:21:f3:
         75:46:5f:c2:16:94:5c:6c:3e:bd:97:29:d2:50:4b:0f:35:e4:
         7c:cc:cb:c4:53:9a:bc:ce:01:54:76:a9:b1:3a:b4:64:ae:60:
         2a:04:9a:7f:4e:84:13:c7:35:7f:df:67:0b:8b:75:9f:90:f1:
         fb:af:76:82:52:67:02:7f:d2:75:78:dd:ec:d2:40:13:8c:d2:
         98:c7:d1:1c:60:b1:96:0e:56:63:9b:22:8d:96:a6:6e:7c:55:
         3e:a3:da:f0:2c:de:55:b9:fc:98:22:ed:35:3c:2d:9d:12:ff:
         13:a6:e4:11:79:7b:4e:e7:2a:ab:47:e6:ed:72:86:87:16:f9:
         0e:5b:66:b1:e9:6d:42:4e:3f:53:58:9a:cf:71:08:b1:21:16:
         0b:40:94:4d:e6:d2:fb:47:20:4d:aa:a0:62:66:c6:f2:42:8d:
         1f:1f:65:a8:76:9d:78:ef:8c:7f:5f:67:99:ec:1e:61:cf:50:
         d5:6c:cb:c6:cb:01:ca:a3:bf:16:82:3d:14:5c:11:ca:b2:b4:
         5a:21:d6:cc
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICGMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVCRTUxMTAvBgNVBAUTKEI3NDRBNDRFNUI2NTNFNkM3QTkwQ0Y2MDM0RTAwRENG
RDg5NDdENjAwHhcNMjUxMjA0MTYxNTI5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMxYjNhMS1kNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCyDJlKaxCCxeYU2e8sicAEe6Rp1FawOfy4i8+LHwsreH5Qcym6rxsOXuaXh
Yg3u2i99sjL0Hpz82SKaskgE8+dOkyXPmHyibEroBO4hgt7sGNtyfI1PDcQEVq6W
5rZ0GyDKNj3b38zXiPFlY/P5RYgtrY1LVqh4CJWiHppqk3ewOHccWCn4RSnEf7FM
zGppRoaq9QsZqe1f0NtE0ABn8mk8qB9TLth2UcFlkgaNyGusNxQPrTjyBjcGhv+3
pAzpORvrynaHL6dbWXQz9Lg/SSrkEXpyM38FLHQtezKpnUm2/w+Q5ICBIRknVIN/
IQPt+TMH9ES7iuuJCss1cFh0CQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFK53/Z9
ifUvw/iKp41LWnoUzYX6MB8GA1UdIwQYMBaAFLdEpE5bZT5sepDPYDTgDc/YlH1g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJFNS82NEM1MjcwOEE5
NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBteDZrTTlnTk9BTno5aVVm
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3QwU2tUbHRsUG14NmtNOWdOT0FOejlpVWZXQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVCRTUvNjRDNTI3MDhBOTVGMTFFNzlBRDRFNzM0QzRGOUFFMDIvMjUzQjEzODIx
MDZDMTFGMDhEODI0QzE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnTRgwDQQCAAIwBwMFACQB1UAwDQYJKoZIhvcNAQELBQAD
ggEBAJ6pD3QgndRp24a7J1vczLemcVqSYYfV+Lo7srS5V4uCYL1KzWG2fc6tukj4
9UP4p5Arv3Ah83VGX8IWlFxsPr2XKdJQSw815HzMy8RTmrzOAVR2qbE6tGSuYCoE
mn9OhBPHNX/fZwuLdZ+Q8fuvdoJSZwJ/0nV43ezSQBOM0pjH0RxgsZYOVmObIo2W
pm58VT6j2vAs3lW5/Jgi7TU8LZ0S/xOm5BF5e07nKqtH5u1yhocW+Q5bZrHpbUJO
P1NYms9xCLEhFgtAlE3m0vtHIE2qoGJmxvJCjR8fZah2nXjvjH9fZ5nsHmHPUNVs
y8bLAcqjvxaCPRRcEcqytFoh1sw=
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:31:02 2025 by rpki-client