This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/3ABCE5008B9811EE9C0BA252C4F9AE02.roa
File:                     3ABCE5008B9811EE9C0BA252C4F9AE02.roa (raw, json)
Hash identifier:          QARhrQCIusoXboY/rX+cC36TY43s5E2mm8nkohh7VsI=
Subject key identifier:   05:15:FF:1B:60:2D:AC:77:64:0D:0D:CE:5A:65:62:5B:DE:D7:F6:10
Certificate issuer:       /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial:       080F
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/3ABCE5008B9811EE9C0BA252C4F9AE02.roa
Signing time:             Wed 31 Dec 2025 01:34:12 +0000
ROA not before:           Wed 31 Dec 2025 01:34:12 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     63916
IP address blocks:        103.42.212.0/22 maxlen: 22
                          103.42.214.0/24 maxlen: 24
                          183.78.168.0/22 maxlen: 22
                          183.78.168.0/24 maxlen: 24
                          183.78.169.0/24 maxlen: 24
                          183.78.170.0/24 maxlen: 24
                          183.78.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
                          rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2063 (0x80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
        Validity
            Not Before: Dec 31 01:34:12 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69547d94-d220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b3:8a:d6:a8:b6:c7:76:e6:57:82:9d:74:fa:
                    2f:01:3f:65:24:1f:26:d9:c9:06:fd:33:9d:fa:6c:
                    24:9d:78:1d:90:c0:2d:c3:57:4f:e1:3b:3b:ec:05:
                    31:f6:f8:89:09:27:ec:b8:5a:bb:94:18:60:e0:b3:
                    82:eb:d8:db:00:0b:10:36:1e:b7:9d:3b:f9:87:47:
                    45:43:e0:c6:fb:b6:c8:01:a1:09:0e:2e:40:fe:44:
                    2d:6b:50:85:5e:61:21:13:66:7d:96:e0:e4:a5:b2:
                    6d:5f:6c:c7:88:6f:60:63:e9:3b:3b:cb:8f:d1:8e:
                    84:c4:79:fd:5f:c0:6d:06:5d:43:be:b0:90:20:15:
                    29:9c:0c:1e:c7:5f:01:3c:53:09:a5:d9:73:c7:f6:
                    7b:a0:af:d1:3e:1e:ea:da:85:c6:5e:a4:0f:b1:9b:
                    b7:e6:fa:95:8b:90:35:da:65:22:09:0d:d5:f6:47:
                    4e:d9:e1:10:fa:9a:e1:0c:a2:64:61:7c:48:4f:b6:
                    12:a4:c4:66:c5:00:bf:de:bb:c6:ff:13:41:12:57:
                    9a:78:ca:1a:df:fe:e5:03:ac:54:e4:ea:6f:05:f2:
                    99:81:94:41:da:c7:9e:97:8b:b3:10:77:a0:98:5b:
                    d8:bb:bb:7f:5f:e1:83:38:42:cb:f3:e5:ca:65:fa:
                    e9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:15:FF:1B:60:2D:AC:77:64:0D:0D:CE:5A:65:62:5B:DE:D7:F6:10
            X509v3 Authority Key Identifier:
                keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/3ABCE5008B9811EE9C0BA252C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.212.0/22
                  183.78.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:81:a7:c0:5f:df:01:64:89:61:8c:8b:96:15:2f:0a:9a:3e:
         ce:90:68:29:da:0a:ee:62:18:4b:a9:3d:eb:8b:cc:7b:62:8f:
         f0:3a:a9:dc:8b:1a:e5:bb:ad:43:b7:85:ca:fd:91:b9:1c:32:
         98:3c:a7:4c:da:3c:d8:b7:3e:e7:ca:57:03:d5:4b:eb:e8:28:
         12:14:7a:75:cf:fb:ec:46:ce:c7:c2:6a:34:d0:58:32:c6:ff:
         65:3e:d4:88:ca:1d:77:4c:22:8b:24:dd:9d:3e:a0:c3:8b:53:
         05:ea:a6:48:67:4b:5a:00:73:27:4f:5f:72:52:64:88:ec:7d:
         47:84:c8:74:bb:80:39:44:57:9c:53:fa:45:4e:5c:b2:e7:54:
         c5:d3:6a:77:e0:49:c6:4e:ab:4c:18:fa:b1:20:44:68:79:1a:
         c4:c8:75:77:0b:e0:0f:31:fd:f4:8a:9e:e5:a5:a6:9c:d7:64:
         ac:d7:df:8e:e2:63:c3:2c:4d:aa:7c:59:56:19:fa:e5:08:82:
         ec:0e:9b:47:e2:e6:a9:cc:3a:45:ef:38:b4:7d:2e:53:23:09:
         d5:2c:c1:28:34:c8:70:0d:04:9e:d9:88:42:7c:cb:a4:5e:7c:
         bd:6c:74:00:78:8e:4c:ae:83:22:17:5a:74:19:be:f5:d2:55:
         c2:f0:95:35
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ2NUExMTAvBgNVBAUTKDc4NUUwQkZGMDdCOTAzN0M2MDMzNEIyREYzMzY5Mjgx
QTREQzNGNUEwHhcNMjUxMjMxMDEzNDEyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU0N2Q5NC1kMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl7OK1qi2x3bmV4KddPovAT9lJB8m2ckG/TOd+mwknXgdkMAtw1dP4Ts77AUx
9viJCSfsuFq7lBhg4LOC69jbAAsQNh63nTv5h0dFQ+DG+7bIAaEJDi5A/kQta1CF
XmEhE2Z9luDkpbJtX2zHiG9gY+k7O8uP0Y6ExHn9X8BtBl1DvrCQIBUpnAwex18B
PFMJpdlzx/Z7oK/RPh7q2oXGXqQPsZu35vqVi5A12mUiCQ3V9kdO2eEQ+prhDKJk
YXxIT7YSpMRmxQC/3rvG/xNBEleaeMoa3/7lA6xU5OpvBfKZgZRB2seel4uzEHeg
mFvYu7t/X+GDOELL8+XKZfrp6wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAUV/xtg
Lax3ZA0NzlplYlve1/YQMB8GA1UdIwQYMBaAFHheC/8HuQN8YDNLLfM2koGk3D9a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1QS84ODk0QTcwQTFD
NTUxMUVCQUI4OEMxODJDNEY5QUUwMi9lRjRMX3dlNUEzeGdNMHN0OHphU2dhVGNQ
MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VGNExfd2U1QTN4Z00wc3Q4emFTZ2FUY1Axby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTQ2NUEvODg5NEE3MEExQzU1MTFFQkFCODhDMTgyQzRGOUFFMDIvM0FCQ0U1MDA4
Qjk4MTFFRTlDMEJBMjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnKtQDBAK3TqgwDQYJKoZIhvcNAQELBQADggEBADKBp8Bf
3wFkiWGMi5YVLwqaPs6QaCnaCu5iGEupPeuLzHtij/A6qdyLGuW7rUO3hcr9kbkc
Mpg8p0zaPNi3PufKVwPVS+voKBIUenXP++xGzsfCajTQWDLG/2U+1IjKHXdMIosk
3Z0+oMOLUwXqpkhnS1oAcydPX3JSZIjsfUeEyHS7gDlEV5xT+kVOXLLnVMXTanfg
ScZOq0wY+rEgRGh5GsTIdXcL4A8x/fSKnuWlppzXZKzX347iY8MsTap8WVYZ+uUI
guwOm0fi5qnMOkXvOLR9LlMjCdUswSg0yHANBJ7ZiEJ8y6RefL1sdAB4jkyugyIX
WnQZvvXSVcLwlTU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:08 2026 by rpki-client