This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/ABD61D2E06D611EA8EBBEA50C4F9AE02.roa
File:                     ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (raw, json)
Hash identifier:          gcmOeuv4CPwiyDEbbjuVKa7sBj9FNhXZhMuz2eqrCks=
Subject key identifier:   52:DD:59:67:79:A5:DC:70:FF:29:07:F4:DA:31:D8:8E:63:1F:0A:55
Certificate issuer:       /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
Certificate serial:       0C9C
Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/ABD61D2E06D611EA8EBBEA50C4F9AE02.roa
Signing time:             Mon 10 Nov 2025 18:07:22 +0000
ROA not before:           Mon 10 Nov 2025 18:07:22 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139786
IP address blocks:        103.145.57.0/24 maxlen: 24
                          103.157.35.0/24 maxlen: 24
                          2001:df1:fe80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl
                          rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3228 (0xc9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
        Validity
            Not Before: Nov 10 18:07:22 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691229d9-567f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:b6:25:0c:68:57:c7:9d:17:90:9a:15:9a:
                    af:a3:78:6d:ed:27:ea:2a:5b:eb:2c:c2:3e:d1:df:
                    be:ee:bf:1a:58:60:96:92:7d:e8:fa:aa:71:7d:de:
                    67:c4:de:b2:20:3b:7b:77:f6:7a:85:a1:2f:a4:5f:
                    68:fa:5f:48:c2:e8:b9:13:47:f9:17:5b:0f:86:1c:
                    fc:8b:dd:3c:9d:c1:da:10:7a:71:cc:0e:dd:87:48:
                    53:d2:45:c7:1d:13:13:4d:b2:b5:5d:40:8d:7d:56:
                    76:49:cf:02:3b:08:35:21:a3:27:ea:d8:38:73:dd:
                    52:7b:68:31:a6:4d:21:bd:92:70:e8:cc:d4:8c:06:
                    46:9c:c6:88:0d:59:9d:7d:e5:a4:35:6d:b6:5e:30:
                    c5:c8:bb:e2:58:65:61:7a:77:46:71:15:d4:dd:2a:
                    c3:a0:1c:df:81:ae:85:74:f3:4e:1f:6a:7d:a7:d2:
                    4b:73:d4:eb:95:b6:48:39:e8:f9:b6:27:37:e4:90:
                    35:1e:2e:42:f1:1b:25:5b:a3:49:0f:f7:4e:01:cc:
                    ca:a3:35:35:4c:a4:3a:cf:41:be:34:6e:97:09:aa:
                    b2:71:a8:96:17:d0:22:85:2c:40:9e:18:47:6e:6f:
                    ba:fe:ad:e0:ef:76:d8:37:17:95:4a:f4:eb:2e:60:
                    9e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DD:59:67:79:A5:DC:70:FF:29:07:F4:DA:31:D8:8E:63:1F:0A:55
            X509v3 Authority Key Identifier:
                keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/ABD61D2E06D611EA8EBBEA50C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.57.0/24
                  103.157.35.0/24
                IPv6:
                  2001:df1:fe80::/48

    Signature Algorithm: sha256WithRSAEncryption
         e3:26:11:89:5b:d6:92:38:7c:7d:64:5b:1c:ae:85:67:e7:5a:
         ba:71:34:3a:42:e9:43:4b:34:50:78:be:ea:fb:9b:6d:77:96:
         c2:17:ae:38:f6:d6:80:6e:19:37:e9:be:91:dc:18:75:0b:d1:
         86:e4:07:39:e8:0b:38:d3:21:03:75:ce:5a:21:a3:aa:ba:a4:
         a6:01:aa:4d:d8:9d:46:1a:16:fb:2d:1e:3e:ac:81:27:43:ee:
         93:4d:39:cd:62:7c:c8:69:0d:56:20:06:d4:c4:6a:9d:48:77:
         83:f0:b9:63:63:eb:00:3c:7b:39:34:6c:35:0e:8f:a7:dc:52:
         ba:6b:d4:64:c4:51:1f:dd:40:e8:1f:1b:06:dc:ac:d0:75:04:
         97:f2:d5:ea:73:30:fc:23:15:67:16:c6:8a:21:22:f1:f4:61:
         b5:72:ca:f7:31:b4:2c:8e:15:31:ac:98:cd:37:79:da:d8:bd:
         3b:63:b2:12:dc:76:0a:29:3e:73:63:ff:83:36:58:51:99:d1:
         e9:0c:56:e3:90:44:16:b1:24:3b:98:c0:a6:8b:86:b0:58:26:
         42:dc:38:51:be:0b:d8:00:fd:40:95:9d:b0:3b:3a:22:a0:8c:
         bf:f3:ef:8b:29:42:45:5c:93:5c:1e:f8:ca:da:eb:52:e8:e6:
         61:6c:ad:55
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICDJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTZFNkYxMTAvBgNVBAUTKDdDRTM3MjJEMUVDQjAwODM5QjI0NjdGRDVDMzlBNkFE
NDZBNjIyNjEwHhcNMjUxMTEwMTgwNzIyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTEyMjlkOS01NjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzfK2JQxoV8edF5CaFZqvo3ht7SfqKlvrLMI+0d++7r8aWGCWkn3o+qpxfd5n
xN6yIDt7d/Z6haEvpF9o+l9Iwui5E0f5F1sPhhz8i908ncHaEHpxzA7dh0hT0kXH
HRMTTbK1XUCNfVZ2Sc8COwg1IaMn6tg4c91Se2gxpk0hvZJw6MzUjAZGnMaIDVmd
feWkNW22XjDFyLviWGVhendGcRXU3SrDoBzfga6FdPNOH2p9p9JLc9TrlbZIOej5
tic35JA1Hi5C8RslW6NJD/dOAczKozU1TKQ6z0G+NG6XCaqycaiWF9AihSxAnhhH
bm+6/q3g73bYNxeVSvTrLmCe9QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFFLdWWd5
pdxw/ykH9Nox2I5jHwpVMB8GA1UdIwQYMBaAFHzjci0eywCDmyRn/Vw5pq1GpiJh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkU2Ri9CMUI1QjNENjA2
RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJT2JKR2Y5WERtbXJVYW1J
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZPTnlMUjdMQUlPYkpHZjlYRG1tclVhbUltRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTZFNkYvQjFCNUIzRDYwNkQ1MTFFQUE4QkEzRTRGQzRGOUFFMDIvQUJENjFEMkUw
NkQ2MTFFQThFQkJFQTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E
JzAlMBIEAgABMAwDBABnkTkDBABnnSMwDwQCAAIwCQMHACABDfH+gDANBgkqhkiG
9w0BAQsFAAOCAQEA4yYRiVvWkjh8fWRbHK6FZ+daunE0OkLpQ0s0UHi+6vubbXeW
wheuOPbWgG4ZN+m+kdwYdQvRhuQHOegLONMhA3XOWiGjqrqkpgGqTdidRhoW+y0e
PqyBJ0Puk005zWJ8yGkNViAG1MRqnUh3g/C5Y2PrADx7OTRsNQ6Pp9xSumvUZMRR
H91A6B8bBtys0HUEl/LV6nMw/CMVZxbGiiEi8fRhtXLK9zG0LI4VMayYzTd52ti9
O2OyEtx2Cik+c2P/gzZYUZnR6QxW45BEFrEkO5jApouGsFgmQtw4Ub4L2AD9QJWd
sDs6IqCMv/PviylCRVyTXB74ytrrUujmYWytVQ==
-----END CERTIFICATE-----
Generated at Mon Dec 8 09:12:16 2025 by rpki-client