This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/EDB5F114A63711EF89F3B833C4F9AE02.roa
File:                     EDB5F114A63711EF89F3B833C4F9AE02.roa (raw, json)
Hash identifier:          uQM6SKGof/O1Wbld70qp2buHFHsOt09Sypi0b/EZeEM=
Subject key identifier:   03:46:33:D0:4B:52:A7:F4:66:F7:64:A7:C5:D0:07:30:22:C4:42:A7
Certificate issuer:       /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial:       22CF
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/EDB5F114A63711EF89F3B833C4F9AE02.roa
Signing time:             Fri 28 Nov 2025 22:58:12 +0000
ROA not before:           Fri 28 Nov 2025 22:58:12 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.205.76.0/24 maxlen: 24
                          103.205.77.0/24 maxlen: 24
                          103.205.78.0/24 maxlen: 24
                          103.205.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
                          rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8911 (0x22cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
        Validity
            Not Before: Nov 28 22:58:12 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=692a2904-5324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:d3:20:36:92:45:d6:46:6a:d0:2e:10:47:
                    40:91:29:c7:15:c1:41:ad:ac:46:95:5b:a9:2e:3f:
                    2d:ba:7f:b5:a6:1d:c3:16:2b:c7:2c:ba:fc:fa:53:
                    32:3c:ce:1d:c3:af:3f:32:98:0d:dd:5d:88:c4:02:
                    e1:3e:3d:87:74:57:0f:c6:e6:15:a2:d9:a3:ba:23:
                    be:a4:a9:6a:67:f2:96:2c:1e:7c:f5:79:a1:80:f8:
                    83:3a:f3:42:9c:34:b1:94:02:72:6c:0c:8a:54:2f:
                    27:f7:8f:41:40:b3:56:ee:6f:18:8f:2f:f0:b3:26:
                    2f:34:c3:65:57:1f:79:f4:0d:da:40:27:8e:90:c3:
                    57:01:79:c1:03:d0:04:f9:a2:d8:04:f4:7c:66:cb:
                    05:b1:c0:c9:e2:26:ab:51:3d:25:a9:62:be:d6:b4:
                    7c:e6:ab:aa:5f:7c:9e:23:0a:1c:75:98:b4:12:d7:
                    c3:7d:e2:da:46:f1:f3:cc:f9:39:67:c5:84:a6:72:
                    a7:9a:26:7c:26:3a:c0:86:25:16:f1:93:cd:3d:76:
                    5f:cb:a9:d9:b8:02:67:f8:c9:c6:bf:ec:64:91:73:
                    1c:e0:02:6b:a5:63:3f:48:be:e7:16:a7:80:af:43:
                    93:51:ad:32:dc:36:42:9c:4f:7f:99:8f:26:b7:8e:
                    76:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:46:33:D0:4B:52:A7:F4:66:F7:64:A7:C5:D0:07:30:22:C4:42:A7
            X509v3 Authority Key Identifier:
                keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/EDB5F114A63711EF89F3B833C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:e8:89:68:44:c3:71:0b:90:23:9a:54:03:42:ef:49:f8:6d:
         64:be:bb:ec:5d:a7:7d:ae:3c:57:38:7e:29:44:ee:c4:35:b4:
         9b:38:3f:4f:a7:09:5b:47:7b:87:d9:68:6b:38:b4:ae:d1:68:
         82:ba:2e:82:f1:f2:22:19:a7:e9:65:96:d1:d3:e1:17:e4:41:
         2c:d5:4e:ed:e8:bb:c4:02:42:15:27:e0:2d:f7:8e:c8:06:ea:
         1f:55:1c:d1:f2:a1:31:b0:61:c6:01:14:7d:d6:c3:3c:ec:1e:
         0f:ef:7f:98:1d:19:6a:74:e0:0c:0b:69:54:1c:fc:f4:5f:25:
         c1:a5:f4:a1:93:a4:d7:bf:bb:f7:9f:a2:9d:be:b3:ea:d8:41:
         59:b5:cb:1e:c0:f9:51:eb:3f:62:aa:31:29:08:d3:ff:6c:28:
         79:18:17:5f:50:cf:c6:6a:e8:22:e3:f2:a9:bb:74:25:16:c7:
         a1:e8:c0:34:2c:52:f8:8c:8b:8c:4c:79:d6:ad:39:f1:50:b6:
         4a:7d:a8:1c:c8:c3:ea:76:9c:a5:d5:85:38:69:c5:44:67:d9:
         7d:17:e8:64:9c:34:07:44:66:e1:06:f8:0b:86:4f:74:89:88:
         35:c1:aa:6a:29:09:19:37:16:4f:e9:57:16:ee:73:11:99:ff:
         37:c1:b3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:54:02 2025 by rpki-client