This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/BBD396F8CC1D11F09B362031C4F9AE02.roa
File:                     BBD396F8CC1D11F09B362031C4F9AE02.roa (raw, json)
Hash identifier:          gh8+qv3MhaUl1O19jg6tnVa+KoQIkfYNDiOkghKWIjk=
Subject key identifier:   37:71:68:B5:89:FC:03:9F:F8:87:4A:93:15:1B:50:07:87:CE:5A:14
Certificate issuer:       /CN=A915AC36/serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Certificate serial:       02
Authority key identifier: 50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/BBD396F8CC1D11F09B362031C4F9AE02.roa
Signing time:             Fri 28 Nov 2025 05:47:33 +0000
ROA not before:           Fri 28 Nov 2025 05:47:33 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141518
IP address blocks:        103.160.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
                          rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AC36, serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
        Validity
            Not Before: Nov 28 05:47:33 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69293774-b06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:27:84:5a:bb:cc:48:d7:73:ab:48:ab:ed:d4:
                    27:86:cd:04:0f:f0:b2:5d:af:4a:80:c6:72:20:22:
                    00:8d:02:14:94:7a:25:6e:52:6d:13:a5:91:ad:65:
                    5e:a1:59:a4:d1:eb:c2:fd:00:2e:af:2c:ad:96:aa:
                    45:f0:48:ad:18:92:9c:73:99:ea:c3:24:80:df:54:
                    f0:b4:9f:bb:09:7e:84:71:d7:41:73:e9:cf:dc:5f:
                    9e:9d:7b:ee:79:2f:4a:21:80:62:15:14:2b:df:08:
                    51:0d:0e:fe:32:7f:ab:e6:5b:d5:14:c9:a5:13:c4:
                    13:d9:8c:a7:dc:57:8b:75:e6:09:e1:ce:e0:a6:fa:
                    b4:54:15:1a:4c:4d:24:12:ef:e2:b6:6d:22:43:85:
                    1c:37:d7:18:2a:2c:5b:bd:2a:60:04:8f:53:1b:14:
                    99:76:1c:e0:9b:c9:49:2b:3e:eb:49:00:f9:ce:97:
                    0f:17:11:21:5f:44:46:04:2b:89:20:21:e9:9f:72:
                    9c:42:33:a3:74:48:8d:7c:b0:03:c0:a8:b6:4f:40:
                    58:b5:1d:e2:0a:da:69:c6:ba:3d:e2:4d:51:c5:42:
                    d8:53:51:52:8e:fc:dd:17:ab:75:f4:a4:63:56:4e:
                    7b:c4:a9:aa:4e:91:9f:78:9f:84:b8:9c:33:59:31:
                    47:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:71:68:B5:89:FC:03:9F:F8:87:4A:93:15:1B:50:07:87:CE:5A:14
            X509v3 Authority Key Identifier:
                keyid:50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/BBD396F8CC1D11F09B362031C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:71:6f:b3:1f:b0:9e:29:cd:90:cd:b7:cf:82:b8:2d:cc:61:
         9a:52:0c:69:0c:52:a5:d2:05:10:a5:da:01:8e:9b:c7:9c:de:
         de:c5:96:17:73:12:dd:e6:f4:28:15:9e:79:a4:4d:50:3c:62:
         d9:89:95:e0:1c:3b:8f:8b:70:22:1d:f1:18:2f:c0:75:3e:37:
         f5:d1:60:28:58:49:df:8b:2a:b9:a6:d0:a1:68:97:53:32:31:
         bc:f9:e6:46:e0:87:57:e6:9d:2f:bc:b9:d0:26:de:57:ec:96:
         11:7f:fd:df:e6:29:a7:66:ae:0c:a4:4f:44:ed:2d:9e:ff:51:
         eb:63:6a:38:25:87:b1:c3:cf:5c:c0:e2:3f:da:69:e1:13:78:
         fd:44:86:4e:77:3b:2e:72:8d:58:9d:5a:47:9e:12:8b:2c:0b:
         9e:f5:24:05:73:4e:fe:28:54:ae:35:3f:b5:f6:a0:87:16:e9:
         a6:66:e9:e0:fc:dd:57:fa:f7:e3:8f:0d:30:a0:64:47:f1:cf:
         10:cf:f1:2e:44:7c:b1:38:67:b1:27:cc:2e:a2:95:77:0d:2c:
         fa:f5:e3:3b:79:f5:dd:d2:b2:e5:b2:b0:c0:9f:4f:bd:5f:9c:
         51:24:25:7f:0c:dd:af:72:8b:23:5d:52:8e:05:e4:00:05:c9:
         f9:5c:5d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:26:43 2025 by rpki-client