This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa
File:                     718673B6BB7F11EC9E187F19C4F9AE02.roa (raw, json)
Hash identifier:          KmnsOS39j0MPrTWgpn3voqhWquulmymnEQE5J4qAsAE=
Subject key identifier:   1F:C8:15:12:A8:71:77:F8:3C:07:70:8A:0F:E8:93:56:5B:AC:82:B1
Certificate issuer:       /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504
Certificate serial:       03B8
Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 23:38:04 +0000
ROA not before:           Thu 04 Dec 2025 23:38:04 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     45809
IP address blocks:        103.70.24.0/22 maxlen: 24
                          2001:dce:7::/48 maxlen: 48
                          2001:dce:8::/48 maxlen: 48
                          2001:dce:9::/48 maxlen: 48
                          2001:dce:a::/48 maxlen: 48
                          2001:dce:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl
                          rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952 (0x3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916593B, serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504
        Validity
            Not Before: Dec  4 23:38:04 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69321b5c-23ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:db:87:a7:b6:5c:83:bf:74:cf:9d:79:0f:
                    3e:de:08:94:be:3c:0e:c0:64:c6:b2:cf:a7:c9:f2:
                    b5:7f:e1:de:3e:68:40:a8:bd:d4:3f:4c:25:34:fa:
                    23:21:58:86:90:c4:f6:08:9f:83:1c:13:55:f6:1c:
                    07:3c:3b:d9:06:a9:f6:11:5c:ef:81:4a:df:4d:fc:
                    bf:ac:fd:9c:63:b2:e0:5e:ca:f2:1a:53:b5:dd:19:
                    06:aa:4d:ad:41:5b:50:ad:6c:9c:f6:14:4a:a7:5c:
                    6f:91:46:8c:fe:81:f4:5f:e5:0b:90:2b:b1:89:12:
                    8d:c5:b5:8a:08:ba:cc:b7:37:4e:14:cd:79:c1:93:
                    e1:85:b4:12:45:56:c5:90:29:51:ee:6c:ed:3b:eb:
                    fc:78:10:d3:91:86:7f:da:46:fb:9a:cd:03:c8:e6:
                    85:68:cd:e0:52:62:1a:58:32:54:ad:63:4e:67:49:
                    76:e7:d6:a8:46:72:e8:68:29:2d:77:29:07:9d:a2:
                    a6:d6:38:db:29:19:27:cb:94:5b:1f:80:db:ef:6a:
                    13:0c:d3:2f:75:69:81:b0:6c:8f:90:7b:2d:7a:ee:
                    b6:d6:df:a1:98:32:76:64:ea:6c:a2:a9:83:9f:73:
                    45:d3:2a:63:3b:9f:3c:8d:db:6b:58:1a:8e:75:4c:
                    81:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C8:15:12:A8:71:77:F8:3C:07:70:8A:0F:E8:93:56:5B:AC:82:B1
            X509v3 Authority Key Identifier:
                keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.24.0/22
                IPv6:
                  2001:dce:7::-2001:dce:a:ffff:ffff:ffff:ffff:ffff
                  2001:dce:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:94:f9:97:93:53:1c:8f:68:31:fb:01:7c:ce:be:67:68:5d:
         20:f3:6e:b6:72:6c:12:89:a7:f0:3f:67:17:1d:69:28:02:8d:
         83:64:17:86:96:a3:f1:1c:a6:68:60:86:87:52:1f:9a:1f:5d:
         dd:f1:34:51:d6:53:ba:a7:e2:81:86:b8:c2:6d:6b:d7:93:31:
         14:fb:14:2e:58:c9:b2:93:ee:87:79:1b:14:b1:47:0d:70:4f:
         6b:2a:03:1b:1d:9e:4e:03:dd:1d:22:b4:2b:d4:8d:e8:dc:f5:
         3b:a9:89:4f:14:d0:80:7d:ce:8e:60:64:29:fe:56:61:a9:bb:
         dc:cb:b1:4a:02:fa:22:6c:86:da:13:d5:a6:75:25:70:99:23:
         01:6c:a5:07:89:da:6a:30:4e:44:88:30:96:4b:c5:43:9a:36:
         4d:b8:09:4b:8f:31:15:e2:ed:d8:f9:84:93:ff:25:02:fb:8d:
         d7:65:c4:88:9c:f6:00:88:f8:fb:00:f6:e0:77:09:e0:ae:b0:
         4e:10:9a:49:17:0c:4d:e2:12:4e:c1:29:f8:88:16:e4:ab:cc:
         9d:cc:ab:c5:0c:d5:29:bd:07:a5:49:07:2b:9c:62:34:24:f0:
         8f:6f:0a:2c:5f:83:d9:75:80:6f:59:e3:1d:99:fb:0e:bc:46:
         0f:97:ac:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:57:39 2025 by rpki-client