This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/06BD1FD4D76F11F0A9A4AAFE78D3641D.roa
File:                     06BD1FD4D76F11F0A9A4AAFE78D3641D.roa (raw, json)
Hash identifier:          ewWeev4YUI3dE6otxnE32uUrvsrjdS3y026oghavMGU=
Subject key identifier:   D9:6A:A0:46:FB:F1:8F:67:0E:0A:C8:F1:7C:CE:F2:41:83:98:08:29
Certificate issuer:       /CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
Certificate serial:       01A1
Authority key identifier: 25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/06BD1FD4D76F11F0A9A4AAFE78D3641D.roa
Signing time:             Fri 12 Dec 2025 15:27:10 +0000
ROA not before:           Fri 12 Dec 2025 15:27:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     4765
IP address blocks:        103.87.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl
                          rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 02:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175911, serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
        Validity
            Not Before: Dec 12 15:27:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=693c344e-73b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:70:49:6e:95:84:c3:39:1c:01:49:63:84:
                    c5:82:b1:d3:c1:48:80:8e:d0:f7:40:6d:5e:ce:25:
                    09:d9:db:65:e0:0c:22:61:8b:10:d3:b5:51:d0:c7:
                    01:80:4d:34:bf:b9:dc:70:19:d7:d3:f0:97:03:05:
                    b4:cc:6e:ef:6b:0f:b5:f7:7d:7b:07:91:11:6a:78:
                    5e:68:1c:3b:c5:c2:a7:d8:2e:fd:77:04:c0:08:a9:
                    1e:bd:d8:8c:dd:1c:27:55:14:fb:51:f0:80:7f:c9:
                    5f:76:a0:62:cc:cc:ff:39:3b:8a:4c:b3:b3:f0:ab:
                    cd:b8:97:95:e8:50:f9:c7:57:cd:51:33:99:78:ce:
                    1e:fc:66:26:96:10:ca:db:57:a2:ba:7e:c7:22:e4:
                    e3:28:63:74:33:02:ac:ae:d3:68:c1:ce:35:18:d8:
                    5c:ed:89:7c:f2:99:61:89:1d:b3:76:16:42:2b:21:
                    9e:ea:3d:e5:f9:6f:89:6c:e1:1e:e1:d5:0f:a2:f4:
                    5e:a6:29:28:31:07:6b:a7:32:6f:20:fb:a9:4d:8e:
                    4e:de:e6:9f:10:43:4a:8b:31:c7:9c:eb:43:e9:42:
                    be:6a:cb:1f:e5:10:f2:3f:87:a2:73:c9:1f:ff:62:
                    87:55:2a:b4:9b:61:45:e0:f0:da:fe:0c:6f:f8:12:
                    16:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6A:A0:46:FB:F1:8F:67:0E:0A:C8:F1:7C:CE:F2:41:83:98:08:29
            X509v3 Authority Key Identifier:
                keyid:25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/06BD1FD4D76F11F0A9A4AAFE78D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:4b:7c:e9:b1:f6:59:e7:79:cc:f4:4e:9c:59:86:10:eb:ba:
         43:64:fb:37:61:39:4b:fd:28:b4:32:0c:16:b9:28:e9:a8:fb:
         4a:9f:d5:af:3b:28:ce:53:2e:07:a6:3d:3f:e0:9c:42:7f:c4:
         d6:46:8b:16:a3:33:16:c9:0f:d2:94:e4:25:c3:8f:ce:21:7c:
         be:64:d9:98:db:8d:17:43:17:92:c7:55:38:91:c4:f3:78:4f:
         d4:2c:49:6b:3f:58:23:75:1c:41:b4:82:82:6c:5e:b6:43:90:
         25:04:75:0a:d5:f7:71:c2:79:e0:34:5a:ee:1b:c0:2e:43:ee:
         22:c1:57:b9:91:5b:dc:18:b3:50:14:ed:72:ea:c8:8d:be:c5:
         c2:13:32:81:57:22:f4:0e:a8:9a:ef:a8:e7:70:82:85:19:41:
         fb:52:3b:38:11:ae:e0:41:e1:5f:58:0f:71:31:75:fb:ca:56:
         b6:11:4b:98:88:98:d6:80:c9:6e:ef:4b:e6:50:ee:6a:ac:9d:
         c5:c3:98:22:57:9d:8c:ab:5a:37:05:45:ce:3e:05:a6:33:a2:
         00:a8:f1:ff:19:98:25:ba:10:85:a3:25:e8:bc:9d:ba:27:f5:
         85:ac:05:b7:6c:a5:d7:8b:69:7d:d1:c9:ef:be:e3:78:dd:18:
         66:2e:d8:d1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU5MTExMTAvBgNVBAUTKDI1OTY5RTczQTk4RDk5RjQyRUFDODk0MjZDNkI5NDkz
Qzg1RDMzMUEwHhcNMjUxMjEyMTUyNzEwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTNjMzQ0ZS03M2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuqdwSW6VhMM5HAFJY4TFgrHTwUiAjtD3QG1eziUJ2dtl4AwiYYsQ07VR0McB
gE00v7nccBnX0/CXAwW0zG7vaw+19317B5ERanheaBw7xcKn2C79dwTACKkevdiM
3RwnVRT7UfCAf8lfdqBizMz/OTuKTLOz8KvNuJeV6FD5x1fNUTOZeM4e/GYmlhDK
21eiun7HIuTjKGN0MwKsrtNowc41GNhc7Yl88plhiR2zdhZCKyGe6j3l+W+JbOEe
4dUPovRepikoMQdrpzJvIPupTY5O3uafEENKizHHnOtD6UK+assf5RDyP4eic8kf
/2KHVSq0m2FF4PDa/gxv+BIW5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFNlqoEb7
8Y9nDgrI8XzO8kGDmAgpMB8GA1UdIwQYMBaAFCWWnnOpjZn0LqyJQmxrlJPIXTMa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTkxMS9CQzA5NTNBNjU5
NkYxMUVFOUIxQUFFMjhDNEY5QUUwMi9KWmFlYzZtTm1mUXVySWxDYkd1VWs4aGRN
eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0paYWVjNm1ObWZRdXJJbENiR3VVazhoZE14by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzU5MTEvQkMwOTUzQTY1OTZGMTFFRTlCMUFBRTI4QzRGOUFFMDIvMDZCRDFGRDRE
NzZGMTFGMEE5QTRBQUZFNzhEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnV9kwDQYJKoZIhvcNAQELBQADggEBAEFLfOmx9lnnecz0
TpxZhhDrukNk+zdhOUv9KLQyDBa5KOmo+0qf1a87KM5TLgemPT/gnEJ/xNZGixaj
MxbJD9KU5CXDj84hfL5k2ZjbjRdDF5LHVTiRxPN4T9QsSWs/WCN1HEG0goJsXrZD
kCUEdQrV93HCeeA0Wu4bwC5D7iLBV7mRW9wYs1AU7XLqyI2+xcITMoFXIvQOqJrv
qOdwgoUZQftSOzgRruBB4V9YD3ExdfvKVrYRS5iImNaAyW7vS+ZQ7mqsncXDmCJX
nYyrWjcFRc4+BaYzogCo8f8ZmCW6EIWjJei8nbon9YWsBbdspdeLaX3Rye++43jd
GGYu2NE=
-----END CERTIFICATE-----
Generated at Wed Dec 17 18:07:44 2025 by rpki-client