This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/5637146C507611EDB59D9E2EC4F9AE02.roa
File:                     5637146C507611EDB59D9E2EC4F9AE02.roa (raw, json)
Hash identifier:          IYazKEF9pFwcNLUhIv47rtL28xMCsqpjMCPhr8mxAvo=
Subject key identifier:   20:A1:63:01:0F:E8:59:3D:40:67:A4:34:73:96:A6:30:10:BE:D1:EE
Certificate issuer:       /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Certificate serial:       0246
Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/5637146C507611EDB59D9E2EC4F9AE02.roa
Signing time:             Sat 15 Nov 2025 00:17:26 +0000
ROA not before:           Sat 15 Nov 2025 00:17:26 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     142420
IP address blocks:        103.12.96.0/23 maxlen: 23
                          2001:df1:69c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl
                          rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156255, serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
        Validity
            Not Before: Nov 15 00:17:26 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6917c695-184c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fc:54:22:80:6d:e8:10:3e:9d:33:90:b1:05:
                    bd:54:49:60:07:a9:3f:b6:30:84:bb:db:8b:22:d9:
                    6e:7a:ca:ff:32:38:72:ba:a7:86:01:7e:14:30:90:
                    4a:fb:67:97:08:61:4d:cc:dc:9f:81:48:7c:8f:81:
                    83:76:67:29:e3:ad:f5:77:ce:fa:63:df:75:a7:df:
                    f0:9d:13:3e:35:f1:97:f9:ae:ba:f9:5a:23:95:c0:
                    3c:40:ec:27:72:4b:a4:ee:99:c3:41:57:98:82:36:
                    5f:5f:70:b0:b0:e0:b5:5f:36:53:98:c5:07:76:8b:
                    65:43:4f:02:7f:d0:09:a6:13:13:3d:be:bb:03:3f:
                    6c:e6:c1:60:28:db:67:82:c7:d9:68:92:61:48:ad:
                    78:d6:5e:b0:9d:58:7d:f9:a5:32:23:90:61:75:6d:
                    d2:99:07:c7:81:ae:b7:09:c6:50:c1:6e:0a:6d:4b:
                    3f:5e:d8:ac:4f:57:26:b6:0d:23:d9:d3:f2:ee:4b:
                    01:aa:4b:b1:31:7e:3b:d1:ae:40:2e:39:c5:c9:a9:
                    26:85:ae:b1:bb:7c:fa:4a:e4:2e:02:f9:b5:07:3d:
                    56:15:59:1d:9b:f9:78:b9:be:1f:f3:22:34:c4:81:
                    1f:e0:45:52:af:61:6d:09:b6:78:87:f6:02:b6:49:
                    60:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A1:63:01:0F:E8:59:3D:40:67:A4:34:73:96:A6:30:10:BE:D1:EE
            X509v3 Authority Key Identifier:
                keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/5637146C507611EDB59D9E2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.96.0/23
                IPv6:
                  2001:df1:69c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:44:47:68:4f:24:53:10:41:a0:41:d6:ff:44:89:ab:05:e0:
         7e:84:b8:a6:26:53:e5:3e:40:f6:4d:db:7b:0c:60:8d:3d:7c:
         ab:6e:a1:79:c0:73:b4:2b:47:75:aa:36:36:71:44:4d:43:e8:
         77:b2:b9:66:09:8c:8d:c6:6a:60:b9:93:43:32:d4:8f:51:a4:
         cf:4e:93:d1:00:d2:57:dd:e6:19:73:2a:be:b4:72:80:5a:6b:
         7f:02:3c:a4:e9:48:9b:e8:57:28:22:a8:af:db:e0:0e:7b:32:
         39:6d:03:4c:71:11:fd:3d:a8:b5:ba:74:36:66:6b:f2:7d:f9:
         fe:07:8f:ee:44:87:6b:a0:99:e4:4c:a7:e4:55:74:d3:ed:20:
         9e:3a:21:f0:e7:db:08:1f:5d:1e:74:01:35:51:46:60:d4:00:
         b6:4f:79:80:a2:b4:af:dd:38:37:25:a0:ee:54:a9:42:2a:57:
         dc:dd:ce:b6:3f:83:f5:9b:16:7c:d1:4a:3d:d5:06:fc:a7:08:
         91:1e:a0:ca:bb:5a:2e:2e:eb:c3:dc:bb:6d:44:d5:f4:72:68:
         c8:a0:68:69:29:8b:45:42:76:75:0d:e6:54:70:58:ea:d9:aa:
         22:76:1d:76:3a:15:43:a5:30:13:fe:97:b1:d1:10:c5:a7:e3:
         e1:90:99:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:23:31 2025 by rpki-client