This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/47A72A7441ED11EC9B02377AC4F9AE02.roa
File:                     47A72A7441ED11EC9B02377AC4F9AE02.roa (raw, json)
Hash identifier:          QrLrf2+brQr8pET8HlSnm9rXz817aY8992jkS8DLh64=
Subject key identifier:   7A:F5:58:4A:F9:CF:28:AF:31:39:D4:EE:42:B3:56:C0:6D:D0:8A:45
Certificate issuer:       /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
Certificate serial:       04D9
Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/47A72A7441ED11EC9B02377AC4F9AE02.roa
Signing time:             Fri 14 Nov 2025 22:44:35 +0000
ROA not before:           Fri 14 Nov 2025 22:44:35 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139065
IP address blocks:        103.174.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl
                          rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1241 (0x4d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
        Validity
            Not Before: Nov 14 22:44:35 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6917b0d3-9d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:33:1c:56:a5:a6:e8:8f:4a:02:e1:7a:b8:
                    35:d3:3b:fc:4d:12:11:fc:2b:a5:a4:16:fb:9f:db:
                    c0:91:d5:a9:da:ba:48:89:19:19:2a:d9:49:37:9e:
                    26:07:cb:05:65:66:d7:70:c6:ba:9d:f9:ab:72:29:
                    1e:05:14:6f:63:f8:00:c5:40:f7:99:6d:a1:99:c6:
                    23:85:2b:88:7e:d6:84:b4:1b:78:72:89:23:69:26:
                    c8:7b:f5:89:9e:c0:c5:1d:d5:0d:f7:7b:ab:75:9b:
                    32:09:6a:e5:8e:de:3a:cf:84:ae:9c:69:c4:e4:91:
                    f2:ff:c5:94:29:4f:22:25:5d:2f:7e:3c:2a:a6:f2:
                    0f:c5:44:2f:09:a1:de:23:97:6b:7b:02:a9:40:0d:
                    fa:f3:37:7e:a5:85:da:59:15:47:18:38:ab:26:f4:
                    88:ca:b2:50:7d:bd:c7:2f:6d:af:71:54:38:cc:2a:
                    d8:8c:21:32:3c:96:f8:34:f6:b6:d6:32:07:64:90:
                    b2:84:67:dd:89:2f:cf:60:4a:3d:7a:84:e3:4c:82:
                    6f:be:b8:5b:39:d2:c2:e8:43:b0:a9:9d:ca:f8:c0:
                    ce:4b:77:9a:64:47:9e:4a:18:3a:bd:86:2f:f8:52:
                    6e:0b:95:82:4b:c4:71:30:31:78:8a:44:c3:fd:53:
                    54:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F5:58:4A:F9:CF:28:AF:31:39:D4:EE:42:B3:56:C0:6D:D0:8A:45
            X509v3 Authority Key Identifier:
                keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/47A72A7441ED11EC9B02377AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:58:81:e3:09:5c:57:ef:dd:ee:bc:1a:fa:aa:3a:64:67:22:
         68:f0:f8:4f:61:c1:88:8a:ba:89:bd:50:54:71:a8:6f:ce:59:
         2a:17:55:3f:2d:63:5c:49:cb:a1:a6:df:e5:a1:7e:84:d5:cc:
         3a:1c:fd:5c:3d:dc:75:b5:dd:30:5b:f5:03:98:c7:6a:00:e8:
         75:41:94:5f:ab:81:d0:26:df:a0:87:3d:c5:fe:8f:99:d7:0f:
         b3:db:d5:b0:e7:4d:83:a5:78:5d:cf:4f:85:53:24:0a:f7:43:
         8a:b7:4d:03:c4:36:03:f6:f2:9f:5f:c1:73:20:c3:df:a7:af:
         b1:c9:7e:17:da:2f:7e:12:bd:23:3c:13:ca:6f:73:02:ba:1b:
         3f:5a:96:92:32:30:2b:9a:2c:2d:a4:9e:eb:e0:3f:7d:c6:5c:
         7c:6e:a8:4d:fd:d7:98:9a:d7:c5:ad:51:c9:7a:01:1d:13:18:
         e4:cc:c3:8c:52:ec:25:bc:fa:4d:46:13:f6:ba:e5:8b:4a:c5:
         b2:00:f0:f4:0c:86:10:a6:21:db:39:71:31:21:b5:0d:ff:e1:
         7c:4c:89:41:78:1a:7b:45:71:9c:a4:78:0d:c5:4e:02:e3:5f:
         1c:aa:4f:b3:14:47:b3:ab:e7:be:e8:45:ae:cb:f7:4e:38:46:
         d3:d6:f7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:32:04 2025 by rpki-client