This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/96540A72CD0E11ED9A9CAE58C4F9AE02.roa
File:                     96540A72CD0E11ED9A9CAE58C4F9AE02.roa (raw, json)
Hash identifier:          gQgaVP6gsqEmtORlyD8C7NpCpWYfOsLgU2Aae4Tbg5g=
Subject key identifier:   7A:8F:EF:BA:3F:B8:D4:E1:F9:3D:E8:BD:73:AF:59:D3:A1:0C:19:8D
Certificate issuer:       /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
Certificate serial:       01FF
Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/96540A72CD0E11ED9A9CAE58C4F9AE02.roa
Signing time:             Fri 05 Dec 2025 01:10:30 +0000
ROA not before:           Fri 05 Dec 2025 01:10:30 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7647
IP address blocks:        203.18.78.0/24 maxlen: 24
                          203.21.83.0/24 maxlen: 24
                          203.22.196.0/24 maxlen: 24
                          203.22.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl
                          rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
        Validity
            Not Before: Dec  5 01:10:30 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69323105-4a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:10:c6:e0:36:76:ac:67:05:01:76:35:ac:
                    bd:5b:4e:7a:b0:33:b1:0b:8c:d5:11:f3:48:d7:e5:
                    e0:cb:7d:3f:1f:ab:26:74:49:7d:f1:08:fd:d3:89:
                    d4:dc:ce:a7:a2:ce:1d:b4:bd:2e:70:60:34:4b:b0:
                    bd:71:48:1d:94:c4:61:9d:5f:e2:68:8f:3d:7f:29:
                    52:f8:6b:30:62:6d:36:bb:5b:05:67:94:de:1c:82:
                    97:df:6f:e6:89:24:be:5b:58:cc:2d:32:8f:e3:94:
                    e8:78:99:74:b7:ff:5e:7e:25:9a:5b:8f:d5:66:0b:
                    97:2e:8e:11:b7:c6:28:16:37:da:bd:7b:22:35:f1:
                    44:83:d6:af:37:5b:ea:65:9c:f7:de:f8:d4:34:44:
                    87:77:21:9d:7f:61:10:75:0c:7f:b7:0e:42:03:cb:
                    04:2a:42:fb:08:ab:d4:87:3c:a6:cd:2a:b1:92:67:
                    c6:b2:aa:70:bf:bc:61:5f:7d:5e:43:83:43:6e:00:
                    2c:8c:8b:2f:3b:b9:28:25:b4:6e:dc:10:de:ff:e3:
                    2a:a5:b5:32:a0:2f:55:ce:4a:e7:a6:b9:35:c0:f6:
                    e6:3a:2c:ba:8c:e0:24:4d:d3:c8:be:b4:5a:84:4b:
                    92:4a:d0:31:29:13:07:f1:49:77:93:31:c4:cc:0d:
                    d8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8F:EF:BA:3F:B8:D4:E1:F9:3D:E8:BD:73:AF:59:D3:A1:0C:19:8D
            X509v3 Authority Key Identifier:
                keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/96540A72CD0E11ED9A9CAE58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.18.78.0/24
                  203.21.83.0/24
                  203.22.196.0/24
                  203.22.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:60:8e:63:1e:ff:bf:60:da:5a:b4:ab:9a:bc:4c:3b:cb:cd:
         8e:01:7a:14:be:b3:ec:41:1d:19:95:d9:8f:d1:11:7b:02:71:
         f0:a0:96:06:94:da:0f:1b:22:04:59:a5:30:d1:43:20:82:8e:
         ef:48:14:d9:82:8a:6f:40:0e:30:52:ce:7d:aa:85:d5:11:fc:
         b7:d0:6e:10:69:6a:9c:5f:83:dc:d4:15:90:a3:66:1a:41:b7:
         a3:b0:dd:9b:c4:f7:c7:3f:c8:ef:b6:de:d9:a9:c4:33:8f:5e:
         11:96:88:8c:4e:a5:5e:af:4b:1a:bc:f7:bf:6c:ee:6a:f4:4a:
         5f:07:f6:15:e1:8e:d1:82:d9:c1:b7:f8:b5:35:a9:8f:d9:b2:
         03:4e:e5:dd:68:0f:01:60:33:93:b4:ec:63:f5:31:9e:4f:9c:
         7e:2c:90:04:5c:02:be:6b:48:0b:fa:4c:4e:45:65:fa:04:eb:
         57:a8:7d:6e:00:12:7c:78:e4:2c:b4:ad:9e:49:af:ec:bd:0b:
         0c:48:e9:d7:4e:d5:4f:6f:9d:d5:07:4b:9c:c4:58:00:2b:be:
         b8:89:f6:b9:79:bc:f8:b0:7d:a4:8a:0d:38:7f:30:57:14:46:
         02:f2:53:e9:3e:76:71:3f:1d:0a:4c:7b:66:05:a4:59:c9:80:
         10:69:6d:93
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5OUUxMTAvBgNVBAUTKDQ4N0NCNjMzMTcxQTBEREYzOEFDQkI2QUQxRUQ4QUU2
OTY1NTg2MEEwHhcNMjUxMjA1MDExMDMwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMyMzEwNS00YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu6sQxuA2dqxnBQF2Nay9W056sDOxC4zVEfNI1+Xgy30/H6smdEl98Qj904nU
3M6nos4dtL0ucGA0S7C9cUgdlMRhnV/iaI89fylS+GswYm02u1sFZ5TeHIKX32/m
iSS+W1jMLTKP45ToeJl0t/9efiWaW4/VZguXLo4Rt8YoFjfavXsiNfFEg9avN1vq
ZZz33vjUNESHdyGdf2EQdQx/tw5CA8sEKkL7CKvUhzymzSqxkmfGsqpwv7xhX31e
Q4NDbgAsjIsvO7koJbRu3BDe/+MqpbUyoC9Vzkrnprk1wPbmOiy6jOAkTdPIvrRa
hEuSStAxKRMH8Ul3kzHEzA3YgwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFHqP77o/
uNTh+T3ovXOvWdOhDBmNMB8GA1UdIwQYMBaAFEh8tjMXGg3fOKy7atHtiuaWVYYK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk5RS82QzEzNTQzNEM5
RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURkODRyTHRxMGUySzVwWlZo
Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NIeTJNeGNhRGQ4NHJMdHEwZTJLNXBaVmhnby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njg5OUUvNkMxMzU0MzRDOUYzMTFFREE1ODQ5MjY5QzRGOUFFMDIvOTY1NDBBNzJD
RDBFMTFFRDlBOUNBRTU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBADLEk4DBADLFVMDBADLFsQDBADLFsowDQYJKoZIhvcNAQEL
BQADggEBAFJgjmMe/79g2lq0q5q8TDvLzY4BehS+s+xBHRmV2Y/REXsCcfCglgaU
2g8bIgRZpTDRQyCCju9IFNmCim9ADjBSzn2qhdUR/LfQbhBpapxfg9zUFZCjZhpB
t6Ow3ZvE98c/yO+23tmpxDOPXhGWiIxOpV6vSxq8979s7mr0Sl8H9hXhjtGC2cG3
+LU1qY/ZsgNO5d1oDwFgM5O07GP1MZ5PnH4skARcAr5rSAv6TE5FZfoE61eofW4A
Enx45Cy0rZ5Jr+y9CwxI6ddO1U9vndUHS5zEWAArvriJ9rl5vPiwfaSKDTh/MFcU
RgLyU+k+dnE/HQpMe2YFpFnJgBBpbZM=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:56:43 2025 by rpki-client