This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/F5CABDCAAFEC11F09FCD3B73C4F9AE02.roa
File:                     F5CABDCAAFEC11F09FCD3B73C4F9AE02.roa (raw, json)
Hash identifier:          0yZs3Xym+WnGMp8KHnnak/TVR2TnL+mhDrrt7KhFJKI=
Subject key identifier:   3E:B8:3A:84:1F:30:DD:38:27:5A:00:27:D7:91:D6:73:A0:42:7D:CD
Certificate issuer:       /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial:       0830
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/F5CABDCAAFEC11F09FCD3B73C4F9AE02.roa
Signing time:             Fri 14 Nov 2025 20:10:58 +0000
ROA not before:           Fri 14 Nov 2025 20:10:58 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     58601
IP address blocks:        103.243.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
                          rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2096 (0x830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D35E, serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
        Validity
            Not Before: Nov 14 20:10:58 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69178cd2-b900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:44:63:1b:66:ed:54:b1:1e:45:d0:a6:e0:
                    94:a1:ea:de:4e:ea:ae:85:81:a2:56:ba:13:00:75:
                    fc:d0:fc:aa:74:93:02:f9:1e:15:23:44:10:af:57:
                    e3:d2:c3:b9:27:17:fa:57:cc:a1:fe:9d:75:94:b8:
                    d4:e5:de:93:9d:71:73:ee:c9:10:c4:94:d3:91:5d:
                    35:35:02:5c:7f:2c:94:51:a8:62:47:dd:70:f8:64:
                    f2:b2:c9:89:76:5b:75:02:40:38:ea:a8:af:19:06:
                    43:d0:e1:e9:b8:f0:66:e1:aa:59:d2:3c:d9:1c:8b:
                    6f:33:d3:02:c0:c6:22:8e:d9:5f:ee:40:ba:4b:e5:
                    87:08:a2:09:86:cd:c3:14:76:a6:f2:3c:4c:e9:78:
                    1a:fe:99:35:93:a1:42:0f:6c:86:7e:ac:a1:b4:40:
                    ec:00:c7:ab:25:f1:2b:59:34:e3:65:fe:ff:bf:9b:
                    e2:b7:fb:31:a0:d5:5a:12:36:91:d7:c0:98:da:89:
                    ad:c5:d3:2a:24:5e:58:c3:e5:48:69:62:a4:dc:e8:
                    53:55:74:89:62:37:c8:a2:fb:ca:84:22:16:0a:01:
                    39:75:a3:1b:c9:aa:7d:9b:e3:b6:21:67:ea:48:e5:
                    11:8e:7d:b6:a0:d0:e8:ba:77:26:e6:51:d6:ed:68:
                    e8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B8:3A:84:1F:30:DD:38:27:5A:00:27:D7:91:D6:73:A0:42:7D:CD
            X509v3 Authority Key Identifier:
                keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/F5CABDCAAFEC11F09FCD3B73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:83:df:7c:f9:92:be:2c:d8:1f:12:a2:b5:2d:99:1e:49:4f:
         16:fa:d7:4d:fe:ef:f6:cc:97:16:e6:5c:42:96:c5:da:0a:15:
         de:78:39:6a:fe:a3:e6:0b:49:6b:df:be:04:0b:5a:8f:47:8b:
         fe:6a:62:11:e4:09:4e:af:19:5d:bf:7a:7b:f3:47:da:7d:f6:
         14:8d:cd:1e:e8:4e:36:a8:e9:a6:bf:29:01:65:dd:08:3a:8e:
         16:ec:89:b3:5e:c0:e1:9e:fd:ed:0a:7f:ef:d9:1b:2f:a5:e8:
         b8:30:de:1d:7a:6c:d3:91:8f:a6:f8:3c:b9:3a:47:95:b7:c4:
         56:0c:32:32:23:0f:e3:df:d8:c0:71:89:97:26:bb:d7:1c:cf:
         88:d0:20:44:a4:b8:26:65:c1:cd:29:a4:65:cb:71:d3:da:ea:
         c0:ef:d9:fb:14:03:4a:bf:cd:1b:c5:83:c6:e8:05:b9:4b:08:
         17:e3:87:7b:c5:db:3c:07:72:94:84:10:01:c6:0a:93:d7:d1:
         38:b8:cb:76:c7:fd:06:e7:22:51:9f:3c:c4:b1:00:2a:73:cc:
         08:65:30:3b:08:a0:b7:b9:2e:c4:cc:10:a2:e6:e5:40:a7:9d:
         0f:1c:a7:52:90:4d:9e:43:06:8f:95:1a:13:2b:d7:62:4e:88:
         d9:33:1f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:50:08 2025 by rpki-client