This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/741645EE422211EA937BB919C4F9AE02.roa
File:                     741645EE422211EA937BB919C4F9AE02.roa (raw, json)
Hash identifier:          8tDMb7QbvAxPwaQ73OW8ydvRFg2I4adHfXyKJL4c0jA=
Subject key identifier:   2B:55:DC:97:A4:32:3D:46:AC:7F:77:41:97:DD:F5:07:9C:99:F3:22
Certificate issuer:       /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155
Certificate serial:       0B70
Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/741645EE422211EA937BB919C4F9AE02.roa
Signing time:             Wed 26 Nov 2025 13:14:58 +0000
ROA not before:           Wed 26 Nov 2025 13:14:58 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     58713
IP address blocks:        103.21.20.0/24 maxlen: 24
                          103.21.21.0/24 maxlen: 24
                          103.21.22.0/24 maxlen: 24
                          103.21.23.0/24 maxlen: 24
                          139.5.112.0/22 maxlen: 22
                          139.5.112.0/24 maxlen: 24
                          139.5.113.0/24 maxlen: 24
                          139.5.114.0/24 maxlen: 24
                          139.5.115.0/24 maxlen: 24
                          2405:92c0::/32 maxlen: 32
                          2405:92c0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl
                          rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2928 (0xb70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155
        Validity
            Not Before: Nov 26 13:14:58 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6926fd51-ee48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:eb:9d:67:bd:eb:04:38:17:56:70:00:0c:64:
                    17:1b:dc:c6:77:0e:42:c9:99:d8:6a:be:a5:4e:9e:
                    cf:3c:65:21:70:e5:c5:eb:e0:15:d4:52:3f:73:57:
                    38:08:b1:ca:33:52:a5:fb:be:a5:79:22:ae:6e:96:
                    d5:e5:9f:c4:4d:e5:10:9f:ee:9b:22:33:42:1a:ff:
                    c0:c7:04:34:f8:39:18:ab:6b:c4:ca:4a:54:2d:17:
                    0c:af:0f:71:11:05:35:1a:91:f2:e1:90:42:d6:30:
                    66:c4:62:74:b6:34:af:a1:f4:fc:d9:42:63:6b:ca:
                    ca:ab:24:0b:46:58:a7:c2:de:f2:c7:7a:c1:56:fe:
                    59:95:37:bc:7e:8a:64:eb:67:c6:09:54:ed:6b:d1:
                    0f:e3:a1:08:9e:07:53:bb:9a:92:44:88:17:fa:ea:
                    af:7f:64:3f:d9:92:3b:ae:0b:18:57:f8:82:2d:b9:
                    1e:11:a1:2d:3d:d9:4b:49:a6:b8:45:03:6b:33:04:
                    19:46:1d:ff:b6:61:88:1f:50:33:b8:00:46:e8:3d:
                    75:32:35:f2:7e:e4:1d:0d:99:b5:63:36:c8:43:9e:
                    4c:70:05:4b:83:e2:1e:eb:a3:40:be:59:f5:82:d3:
                    54:44:21:9c:fe:92:5e:74:1f:39:67:60:9c:ef:f2:
                    aa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:55:DC:97:A4:32:3D:46:AC:7F:77:41:97:DD:F5:07:9C:99:F3:22
            X509v3 Authority Key Identifier:
                keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/741645EE422211EA937BB919C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.20.0/22
                  139.5.112.0/22
                IPv6:
                  2405:92c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:5f:48:66:63:c2:e5:81:ab:b7:44:2a:00:59:08:f5:f4:cd:
         fe:22:e9:56:10:31:ed:94:83:9c:f1:3a:7c:47:4b:39:e0:6c:
         0b:ae:63:f4:e0:14:46:47:62:91:17:d8:eb:a9:9a:f2:e9:30:
         7e:1e:ea:03:fa:ec:21:09:92:2e:48:26:42:56:88:81:ee:a2:
         13:6c:36:76:aa:4f:c4:03:a7:d3:29:10:ac:89:2b:cf:42:4e:
         90:cf:4e:21:1d:ef:2b:f0:15:35:d7:35:4b:73:be:5d:d5:dd:
         d8:3b:37:cf:70:4c:02:2d:41:80:19:de:46:ab:9e:14:dc:6e:
         ba:f0:71:f6:60:11:fe:c1:ea:88:42:c9:89:a9:72:1c:a7:92:
         4e:ed:a0:70:3c:92:6d:2a:cd:5a:33:f6:de:3a:93:c6:43:86:
         e2:5d:b2:6f:8e:be:1f:48:1c:5b:ed:ab:38:3b:d3:93:5a:f0:
         1b:11:59:bd:01:82:52:c2:02:32:44:66:9b:49:8d:d0:fa:e3:
         25:85:39:02:4e:8d:e2:4b:a2:a4:fc:d1:ff:cd:69:45:24:20:
         d6:0f:dc:07:43:1d:2f:a9:dc:7a:0d:5c:11:db:f9:3c:4a:d7:
         dc:d5:0f:4c:9b:6e:dd:33:02:ea:45:e0:2c:0d:74:b1:bc:12:
         86:e4:5e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:04:28 2025 by rpki-client