This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/B9003CC84EE811EA8C045D52C4F9AE02.roa
File:                     B9003CC84EE811EA8C045D52C4F9AE02.roa (raw, json)
Hash identifier:          3kF8zJlwF4UbEFsgd+jLuLFD7uUy5scRolMoxM2c994=
Subject key identifier:   8E:A1:89:88:7A:67:23:BB:B8:1A:A4:EC:2A:BE:47:88:AF:C5:63:2E
Certificate issuer:       /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Certificate serial:       0C09
Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/B9003CC84EE811EA8C045D52C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 18:30:13 +0000
ROA not before:           Thu 04 Dec 2025 18:30:13 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     132468
IP address blocks:        103.9.50.0/24 maxlen: 24
                          103.21.230.0/24 maxlen: 24
                          103.21.231.0/24 maxlen: 24
                          103.115.80.0/24 maxlen: 24
                          103.115.81.0/24 maxlen: 24
                          2405:c0c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
                          rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3081 (0xc09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
        Validity
            Not Before: Dec  4 18:30:13 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6931d335-0761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:7e:f8:87:7c:6a:e4:c0:5b:cb:42:a4:13:
                    09:7f:31:e3:2a:11:88:75:19:b6:0e:47:f2:23:54:
                    7a:6b:c7:a6:68:46:54:2c:e6:f2:92:fd:46:f0:a3:
                    63:d8:da:85:a7:66:5f:e9:67:42:9a:ef:c8:27:07:
                    a3:02:09:d2:c3:45:e2:58:7d:94:04:67:5e:ba:a0:
                    f3:2e:a3:a6:0a:c6:79:ed:d0:a9:16:65:2c:6a:73:
                    0b:97:86:e9:65:77:d2:ac:f6:be:2d:ba:e2:6c:e2:
                    e5:05:b1:b1:51:d9:07:cc:49:02:7d:b2:26:86:89:
                    3a:96:42:0a:f7:f0:01:ff:eb:37:89:f6:82:c1:52:
                    49:2b:d6:1f:2b:8b:28:e2:06:20:69:15:40:b0:6e:
                    ee:09:bd:d5:b6:61:d9:c0:bd:a5:01:64:d0:57:da:
                    33:0b:71:ed:17:8d:2a:ec:a1:f0:84:6e:62:b0:e5:
                    43:f2:75:bc:0e:ac:b0:02:8b:5b:ba:e4:9f:fc:e3:
                    df:41:91:c3:1e:cd:c1:f4:81:6a:20:8d:26:4c:2f:
                    7a:fb:60:92:fd:51:c7:84:f9:a9:38:be:cd:a8:fb:
                    47:71:1c:1c:e3:26:74:83:a0:5a:31:bc:b5:0e:0b:
                    bf:68:b8:b6:7e:36:e8:94:af:c9:86:60:4d:6b:4f:
                    5a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A1:89:88:7A:67:23:BB:B8:1A:A4:EC:2A:BE:47:88:AF:C5:63:2E
            X509v3 Authority Key Identifier:
                keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/B9003CC84EE811EA8C045D52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.50.0/24
                  103.21.230.0/23
                  103.115.80.0/23
                IPv6:
                  2405:c0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:fd:6b:1d:a0:87:76:a9:f3:41:18:ea:7a:87:7a:84:9d:4d:
         78:70:2c:c0:c6:33:79:c7:10:75:7a:29:ab:a4:02:d4:df:07:
         f7:17:64:13:9f:fc:71:24:5e:5f:13:22:bf:34:4c:36:37:29:
         58:3a:1c:9e:d4:0b:79:9b:e1:6e:e1:ba:c0:f3:9e:d4:66:5e:
         e4:99:7e:28:d3:15:75:0d:97:2f:d0:16:68:70:b0:dd:7b:2b:
         f4:a3:18:ef:d5:ac:5c:94:22:2f:70:d5:d6:0c:24:b7:63:a2:
         b9:4c:0b:7b:6b:34:47:e1:f5:c8:08:7d:a9:1f:ea:5a:2f:66:
         ac:ec:88:b2:8b:92:a0:cc:5f:91:2b:b1:67:19:5e:1c:3f:65:
         0a:ef:35:c9:14:54:88:ce:63:3d:fe:aa:e1:dc:dc:64:8e:c9:
         36:c9:f4:15:92:10:09:7b:b3:f9:e6:25:df:55:b8:5e:99:ad:
         44:50:4d:ec:07:2d:35:54:3a:a5:32:0d:ca:7e:08:8b:7d:63:
         e9:0f:c1:09:c5:c2:b0:0d:9c:91:c6:53:d7:97:50:33:27:3b:
         e6:6c:bb:43:68:db:48:06:28:17:e4:ac:02:7b:aa:22:64:48:
         67:db:83:1c:ca:52:a3:ed:9a:0f:e6:53:e0:af:3b:2f:57:bb:
         e0:9f:17:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:01:34 2025 by rpki-client