This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/38360112C3EB11F080C9980DC4F9AE02.roa
File:                     38360112C3EB11F080C9980DC4F9AE02.roa (raw, json)
Hash identifier:          XqYyZyrqJ9BamfB85dIngxi60ilbd+EHlah+RvSpOvo=
Subject key identifier:   2C:61:AF:4D:4D:DC:1A:6C:81:E7:6D:43:79:D2:6D:38:AB:76:30:C4
Certificate issuer:       /CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Certificate serial:       0CC7
Authority key identifier: 6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/38360112C3EB11F080C9980DC4F9AE02.roa
Signing time:             Mon 17 Nov 2025 19:25:48 +0000
ROA not before:           Mon 17 Nov 2025 19:25:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137530
IP address blocks:        103.112.56.0/24 maxlen: 24
                          103.112.57.0/24 maxlen: 24
                          103.112.58.0/24 maxlen: 24
                          103.112.59.0/24 maxlen: 24
                          2402:a540:56::/48 maxlen: 48
                          2402:a540:57::/48 maxlen: 48
                          2402:a540:58::/48 maxlen: 48
                          2402:a540:59::/48 maxlen: 48
                          2402:a540:156::/48 maxlen: 48
                          2402:a540:157::/48 maxlen: 48
                          2402:a540:158::/48 maxlen: 48
                          2402:a540:159::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl
                          rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 17:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3271 (0xcc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D1A2, serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
        Validity
            Not Before: Nov 17 19:25:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=691b76bb-4678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:32:0d:b9:cd:ed:97:ea:4b:84:ae:e0:ea:
                    ea:2f:e9:33:de:75:9b:e3:fd:75:63:01:02:88:10:
                    3f:ae:9f:10:a8:2d:0e:25:50:6f:17:cb:21:7f:b8:
                    3f:f5:9e:da:1c:01:79:dd:d9:fa:97:68:05:0a:c6:
                    8e:1f:f2:1f:d9:fe:c2:b3:ac:a3:27:2e:e2:84:88:
                    6e:f3:17:a5:c3:5a:5a:96:36:72:26:b1:0a:db:9c:
                    0e:99:04:25:ae:67:cd:d5:fa:10:36:77:80:7f:5c:
                    e0:a7:3e:0c:2a:db:ce:f9:a1:ac:47:0c:00:16:fb:
                    28:7d:e7:e6:5b:a9:ac:f6:b3:bc:2a:9c:c9:9a:76:
                    e8:3a:d9:b2:0b:9b:8f:24:22:02:b5:0f:bb:ef:de:
                    79:42:2b:54:b4:17:5d:78:f2:f8:86:04:87:ba:64:
                    b8:b2:5e:d2:94:e3:16:6a:f9:dc:98:0f:e2:74:61:
                    d8:c4:8e:86:7c:5d:04:e1:57:01:21:60:9b:ef:78:
                    1d:fe:e6:c1:53:4d:45:01:c0:fd:ba:86:9b:21:c3:
                    ec:8a:a6:38:23:41:bc:ca:66:54:1c:d0:a3:7f:d3:
                    79:2f:e8:ad:d5:5a:d5:a5:5a:f7:be:62:1c:43:91:
                    08:ac:9f:76:fa:c0:86:9a:50:7b:13:d8:f3:eb:ed:
                    b6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:61:AF:4D:4D:DC:1A:6C:81:E7:6D:43:79:D2:6D:38:AB:76:30:C4
            X509v3 Authority Key Identifier:
                keyid:6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/38360112C3EB11F080C9980DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.56.0/22
                IPv6:
                  2402:a540:56::-2402:a540:59:ffff:ffff:ffff:ffff:ffff
                  2402:a540:156::-2402:a540:159:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         13:d2:96:81:a2:5e:c1:9a:fc:57:07:71:5e:81:44:c4:03:82:
         ef:30:e4:98:9e:78:7e:a8:f3:59:0f:0d:cd:56:ed:3b:86:c0:
         45:24:2f:10:dd:ba:85:9f:b5:2f:48:5f:6e:8e:0a:5a:86:64:
         f0:c7:7b:c1:0f:49:ea:0f:14:18:ea:e0:1a:23:f0:ec:f5:6c:
         48:5c:84:ac:7c:b8:86:82:bf:e2:07:0a:2b:25:10:ec:f8:b1:
         9e:23:de:bc:1d:87:d6:ff:33:86:e5:42:82:c5:87:60:6f:ea:
         c1:3b:ff:00:f1:65:eb:47:a4:e7:3d:36:8f:d2:6e:07:f5:1f:
         eb:2b:46:8d:89:16:4e:16:b1:a2:7d:22:f7:61:84:04:fa:b2:
         5f:d2:f2:50:02:99:f4:22:08:3c:79:d4:bd:ce:01:1f:f1:8a:
         be:04:8e:be:2a:a3:8b:f3:75:b6:6e:e0:de:cb:d3:4f:43:ff:
         20:e6:22:ac:ef:f7:4e:94:97:87:3c:2f:35:11:2f:e4:48:fe:
         f1:28:62:64:fe:e9:e4:e3:82:dd:d7:72:76:e2:78:6b:43:e1:
         35:f1:cb:97:0b:8c:88:d3:6b:ad:9a:04:97:01:c1:68:bf:7e:
         53:91:55:3b:e8:4c:ae:c9:d0:94:62:e6:8c:18:f8:b9:14:e1:
         5a:53:9e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:19:24 2025 by rpki-client