This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/BD34B926367911F083BF6873C4F9AE02.roa
File:                     BD34B926367911F083BF6873C4F9AE02.roa (raw, json)
Hash identifier:          gVVuychvzE/ZHYNs+vgLYCt8oBc+ibgZ1VucbwwNR3g=
Subject key identifier:   78:6E:3A:E4:3D:08:2D:86:E7:00:3B:1B:3A:6B:0E:8B:3B:CE:FF:EC
Certificate issuer:       /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
Certificate serial:       0CCD
Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/BD34B926367911F083BF6873C4F9AE02.roa
Signing time:             Wed 26 Nov 2025 18:07:52 +0000
ROA not before:           Wed 26 Nov 2025 18:07:52 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139735
IP address blocks:        103.143.254.0/24 maxlen: 24
                          103.143.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl
                          rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 17:44:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3277 (0xccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
        Validity
            Not Before: Nov 26 18:07:52 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692741f8-1544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:83:d6:32:d9:53:d4:50:2e:48:36:14:72:a0:
                    39:74:c1:67:3f:63:8e:ef:98:7e:df:4e:56:e6:5b:
                    ef:b2:d6:2e:33:8b:43:ec:20:f1:b0:28:72:29:c4:
                    72:3c:c8:15:58:78:8e:39:8a:72:61:00:d7:6b:32:
                    08:f7:57:58:94:37:86:55:7f:b2:f9:37:fe:a7:b3:
                    98:f8:34:ac:42:cc:9c:f5:db:a3:61:b7:b9:4a:8c:
                    36:4e:4a:0e:b4:6d:fc:d8:48:77:88:3a:6d:50:45:
                    bd:48:46:cc:77:03:49:cb:cb:ad:ee:7a:4e:1c:4d:
                    0f:70:d1:d0:ab:4b:40:d1:bc:71:7a:59:2f:32:c5:
                    c3:0e:ea:c8:4a:bd:5e:26:85:0b:fd:67:4f:53:06:
                    7d:1a:52:33:64:ed:b5:da:9e:21:32:4e:74:27:8c:
                    e7:4e:0e:40:88:b1:a3:1b:cd:39:fa:e4:23:16:a8:
                    2a:6a:91:da:6e:59:e0:7d:37:20:b1:21:f5:e6:2f:
                    dd:01:be:28:cd:96:1c:17:c0:09:4c:50:3f:24:38:
                    a6:c8:62:7a:36:ee:43:b9:f5:43:b8:9c:d3:af:0a:
                    45:6c:c5:29:de:63:37:3c:59:22:b6:9b:db:4f:a5:
                    e4:86:dc:ac:74:7f:b7:20:1e:f2:32:94:c5:9c:0f:
                    42:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6E:3A:E4:3D:08:2D:86:E7:00:3B:1B:3A:6B:0E:8B:3B:CE:FF:EC
            X509v3 Authority Key Identifier:
                keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/BD34B926367911F083BF6873C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:c4:8f:16:e8:02:4e:d7:9d:ca:9a:20:50:d0:47:da:76:4c:
         07:1b:b3:b3:f3:7b:79:cd:28:6e:a1:eb:b7:0b:03:95:96:7e:
         8c:cb:7e:47:90:a5:d4:4d:53:e8:63:80:f3:04:1a:49:5c:de:
         c9:ff:fe:d8:61:96:c2:df:86:91:a7:a0:75:f8:62:a9:af:a9:
         02:98:86:67:68:30:1a:9a:fc:14:0b:7a:5d:fb:be:28:11:fa:
         a1:64:cf:5c:18:4d:d9:12:db:a9:dd:3d:9e:e1:6b:ce:d3:1e:
         94:b9:87:d8:cd:ff:66:23:94:65:75:e8:08:9e:fc:2d:2a:7b:
         91:4e:fd:2d:6e:ee:9a:09:d0:92:5a:c5:d1:a2:3f:b3:20:13:
         3e:40:a0:19:81:a5:70:5c:9c:24:7c:65:97:ee:03:f7:2e:c1:
         57:50:13:54:7e:9f:c9:f5:50:b4:80:a9:6f:fa:7d:03:96:10:
         50:11:9c:fd:ed:2c:ce:36:35:dc:57:57:63:e2:06:34:2f:f2:
         90:0c:a9:91:ec:a2:da:67:96:8b:17:89:d3:a1:1f:9a:f2:e4:
         1a:af:4f:c4:de:be:40:12:d2:54:c3:11:df:01:66:fe:d9:94:
         7e:09:08:d9:2c:71:73:10:2c:c6:06:0b:c7:78:34:17:c7:0a:
         d2:13:45:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:49:37 2025 by rpki-client