This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/27BCA4ECCCAD11F0B8832177C4F9AE02.roa
File:                     27BCA4ECCCAD11F0B8832177C4F9AE02.roa (raw, json)
Hash identifier:          /b/HE29VkzRu6puxi118aV61lD4MgPZJsNuOhpfIX8Y=
Subject key identifier:   62:51:C8:1F:36:19:30:FC:3E:85:F1:4C:D7:52:D4:B2:A2:77:2B:01
Certificate issuer:       /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial:       22CD
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/27BCA4ECCCAD11F0B8832177C4F9AE02.roa
Signing time:             Fri 28 Nov 2025 22:54:12 +0000
ROA not before:           Fri 28 Nov 2025 22:54:12 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     135002
IP address blocks:        103.205.76.0/24 maxlen: 24
                          103.205.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
                          rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8909 (0x22cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
        Validity
            Not Before: Nov 28 22:54:12 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=692a2814-23cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:63:39:a4:f7:f9:8f:19:bc:33:2f:1d:d6:3a:
                    42:bd:d3:d0:6f:22:d7:96:cb:97:ef:10:27:65:3f:
                    e7:40:37:4b:23:ef:a4:4f:36:ef:76:5a:5b:54:c4:
                    7c:ad:10:34:3a:c7:c8:fa:f7:fc:d5:c8:30:8b:19:
                    b3:96:56:48:a2:d2:43:d6:64:8c:e9:fd:b4:b8:38:
                    8d:09:fb:69:7e:1a:40:f3:3a:a2:f8:58:cb:2f:99:
                    fe:8b:a2:92:70:68:ee:0d:98:a3:d7:68:22:55:12:
                    01:46:13:6a:23:fe:b4:2e:c7:b5:6f:df:2f:22:93:
                    bd:cd:12:0c:52:2f:3e:bc:76:a6:02:03:16:5b:2c:
                    b9:c4:bf:52:24:f7:13:80:22:7d:13:89:47:00:94:
                    4d:cd:81:39:48:46:e3:81:b3:7e:29:49:8f:88:5d:
                    2b:53:14:2f:8b:47:ad:48:8f:2d:07:38:dc:09:a0:
                    30:0d:f3:27:59:ca:1b:0e:c2:13:8b:d5:0c:8c:36:
                    bf:24:17:15:20:24:94:b9:88:53:e0:62:6f:56:b9:
                    9a:7b:3d:66:1b:67:a9:b1:b0:54:48:d9:84:da:a5:
                    69:c1:85:0f:b6:35:8e:e0:0f:22:e6:4f:b9:ec:02:
                    08:b9:31:0b:5f:61:c1:ad:35:72:e4:96:b1:94:05:
                    17:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:51:C8:1F:36:19:30:FC:3E:85:F1:4C:D7:52:D4:B2:A2:77:2B:01
            X509v3 Authority Key Identifier:
                keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/27BCA4ECCCAD11F0B8832177C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:b2:dd:11:44:f6:26:dc:36:ee:21:e1:66:f4:65:07:be:fc:
         7f:f7:69:f0:6d:1e:66:08:22:20:0e:ab:8c:71:c0:f1:b8:66:
         b9:ab:90:ab:bc:ef:24:29:02:61:19:e3:73:ce:ed:88:4b:34:
         94:6f:b5:fc:f6:9c:2a:31:c9:7e:3e:2a:37:d6:62:2f:55:4d:
         a8:82:38:83:fd:32:85:45:5c:ce:71:7f:c1:d7:3e:5f:cd:ca:
         58:91:28:af:f1:cb:d3:34:a2:4b:21:f0:2b:96:d6:0a:87:c4:
         4a:66:8a:d6:8a:6b:14:ba:da:32:2a:3b:b7:45:36:d5:77:a7:
         a5:14:fc:25:28:bf:e8:76:20:7d:0d:e2:ab:c6:cd:55:0f:ae:
         5f:da:e2:10:17:ce:00:cd:fb:9b:4d:43:f8:a3:d5:d5:c8:1c:
         2a:6a:94:0c:80:d8:dc:0e:83:3e:41:e2:c2:0f:d5:4d:73:d2:
         72:a6:b1:4d:12:a0:c4:71:30:e6:94:3c:ab:76:db:16:06:08:
         f4:b1:aa:67:7a:b5:3f:6e:56:da:69:26:64:4a:70:2d:5a:2f:
         df:fa:69:44:80:f9:4d:66:c9:24:a0:0c:71:b3:b7:bb:70:61:
         c9:05:60:2d:7a:0f:0a:68:5f:9c:43:63:a4:af:a3:3b:06:e3:
         8a:36:96:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:22:36 2025 by rpki-client