This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/81C5BFF8192811EA9B88D87DC4F9AE02.roa
File:                     81C5BFF8192811EA9B88D87DC4F9AE02.roa (raw, json)
Hash identifier:          jIAkh1NUrc1iwr2RioDBv/ZhY+w3mLjpabVAWwXAW9M=
Subject key identifier:   85:CA:3C:47:68:1F:66:4B:B4:F3:42:F1:56:D9:E3:F2:25:37:DC:30
Certificate issuer:       /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Certificate serial:       0C44
Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/81C5BFF8192811EA9B88D87DC4F9AE02.roa
Signing time:             Thu 04 Dec 2025 18:29:40 +0000
ROA not before:           Thu 04 Dec 2025 18:29:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139771
IP address blocks:        103.145.28.0/24 maxlen: 24
                          103.145.29.0/24 maxlen: 24
                          2001:df1:f180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
                          rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3140 (0xc44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
        Validity
            Not Before: Dec  4 18:29:40 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6931d314-1b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:10:65:d4:8a:54:21:1b:79:38:d0:be:0b:3c:
                    b1:8a:f1:6c:83:8f:55:17:b2:bb:69:3d:7a:82:e9:
                    f9:c1:08:ae:9d:96:66:de:58:e9:3a:86:92:97:ce:
                    68:0a:0c:14:81:4c:86:c8:c9:d2:2c:66:61:63:4b:
                    42:f1:8f:8f:7c:92:fa:54:36:87:ef:1f:b9:52:95:
                    60:8b:c9:11:14:ec:f6:74:d0:56:a4:36:db:9a:39:
                    7b:9b:3d:27:86:61:97:01:d5:c8:ac:cf:b2:a2:39:
                    b4:91:e0:0a:4d:c0:e8:08:08:25:92:fa:1b:35:c5:
                    02:4c:48:67:ad:05:dd:34:24:d5:a9:ac:20:ee:20:
                    c8:fc:0a:14:5c:6e:f7:ae:05:55:3d:5b:97:bb:f6:
                    7b:06:bf:e0:ab:f3:a1:d2:e9:9b:2e:4f:6e:81:b4:
                    00:52:a3:0f:36:d0:6f:e4:55:62:36:c8:28:29:cb:
                    8d:5a:8f:c2:fb:c4:26:fb:0b:91:a0:39:bf:c3:30:
                    b9:87:f6:b2:ba:50:23:7b:8f:5b:55:f0:3e:90:4c:
                    7b:bb:1b:f4:1f:57:30:a1:de:a2:a3:ed:64:c2:b8:
                    41:e1:0e:fb:fa:90:28:52:c9:32:27:33:33:65:ab:
                    2b:f4:5c:49:68:42:a1:9c:ed:23:ee:1e:93:dd:1a:
                    8f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CA:3C:47:68:1F:66:4B:B4:F3:42:F1:56:D9:E3:F2:25:37:DC:30
            X509v3 Authority Key Identifier:
                keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/81C5BFF8192811EA9B88D87DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.28.0/23
                IPv6:
                  2001:df1:f180::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:62:fe:f2:26:af:b1:33:8c:fa:54:c0:a9:c0:9d:e7:e1:88:
         a3:83:45:58:c0:c9:65:10:b9:0f:9d:8a:29:30:bc:df:69:f3:
         1c:ab:88:b4:8f:68:aa:f0:03:07:17:3c:e7:29:1e:56:f7:c8:
         78:be:c5:9f:74:1e:f6:5b:37:24:2b:4e:a5:95:7e:d5:9e:f8:
         e9:a9:b9:05:d5:10:ee:d0:8b:17:b6:19:5f:fc:34:2a:32:6a:
         38:7d:5d:6f:b5:4e:a5:a6:54:4e:5e:ee:3c:5f:41:ea:53:0e:
         3c:ec:46:64:9c:ed:e4:ca:18:fd:83:aa:29:88:55:23:94:f4:
         d6:47:61:cb:22:7f:55:c2:41:e8:1e:3b:0b:2e:1a:44:36:aa:
         48:09:29:97:b5:c7:8b:02:ca:e1:ec:71:c4:ae:34:8e:1f:07:
         b2:34:06:91:5b:60:48:01:5c:fe:21:33:74:b3:dc:f3:9e:32:
         bd:60:5b:ea:46:0a:ff:22:37:75:68:85:69:a9:fc:9b:c4:b5:
         86:41:43:4d:ec:b5:b2:96:74:fa:bd:5f:47:a3:5e:bd:3a:fd:
         d5:13:ee:6e:21:f8:52:7b:94:a2:12:d1:17:50:d9:29:03:b0:
         30:d3:93:0f:47:d7:1e:c7:e6:47:ec:5e:cc:0e:fc:19:6a:e7:
         a5:00:65:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:09:58 2025 by rpki-client