This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/945375FAF69511EC90A47215C4F9AE02.roa
File:                     945375FAF69511EC90A47215C4F9AE02.roa (raw, json)
Hash identifier:          ZvBKfJ1ADA7aCUjrmjndruwHDHPG/7Dn7tC/SJj/AFU=
Subject key identifier:   0E:9D:FE:47:D0:90:75:74:D8:F1:64:E3:3B:30:77:EC:69:F7:04:BA
Certificate issuer:       /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737
Certificate serial:       042B
Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/945375FAF69511EC90A47215C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 23:07:08 +0000
ROA not before:           Thu 04 Dec 2025 23:07:08 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     140619
IP address blocks:        103.176.206.0/24 maxlen: 24
                          103.176.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
                          rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1067 (0x42b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737
        Validity
            Not Before: Dec  4 23:07:08 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6932141c-13db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:87:4d:3a:3a:13:87:3c:dc:d3:d4:a3:91:
                    24:38:ad:41:20:27:e1:8b:71:a1:44:c3:bf:e5:e8:
                    b9:1c:f9:5b:04:0a:be:9b:02:d3:bf:0e:9f:c8:8e:
                    94:9f:46:65:2d:df:c7:7c:2b:c8:51:3f:8d:f3:18:
                    d1:dd:e4:ab:d1:0b:f2:7a:46:2f:12:87:7e:f2:f5:
                    b5:04:e7:c6:b9:d8:66:40:a7:9d:0d:e2:d2:50:19:
                    cf:40:87:03:b4:7b:3a:75:24:74:4e:54:d3:c6:c2:
                    38:be:e2:4e:c1:69:25:3c:90:9d:8f:e5:cd:10:0d:
                    83:78:93:90:d3:f4:77:70:0e:84:8f:4b:77:da:3c:
                    36:96:2d:f4:c0:8d:d6:dc:2b:38:3b:4b:58:21:b7:
                    73:5f:a0:67:43:43:9f:41:bd:1e:83:25:bb:78:8f:
                    f2:cd:2b:b2:0d:c1:5c:fb:84:5a:d3:0a:b6:c1:77:
                    e6:04:0a:4e:45:b8:28:32:ef:0d:0e:f8:36:47:07:
                    b0:5a:d9:b6:00:c3:f2:88:82:b6:99:89:2f:28:01:
                    b4:ec:cd:e7:a3:c6:d2:8f:1d:26:a0:f0:1c:17:c1:
                    2b:5a:a2:c2:a1:c4:f4:72:7f:b1:77:e8:cf:18:7e:
                    e4:01:5f:9c:d8:a2:4b:72:b2:4e:88:19:44:55:9c:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9D:FE:47:D0:90:75:74:D8:F1:64:E3:3B:30:77:EC:69:F7:04:BA
            X509v3 Authority Key Identifier:
                keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/945375FAF69511EC90A47215C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:ee:b9:ab:8d:ef:b4:1f:a4:63:a9:70:d6:96:d9:1c:b2:9f:
         a7:61:79:5f:e5:1c:13:64:d7:a8:c8:cd:94:6a:7f:81:19:c8:
         70:a9:b9:da:28:b5:1b:b3:8f:d3:42:b8:33:79:e6:30:09:40:
         db:9c:f3:f1:8b:b1:3c:ff:b1:ff:7e:c8:40:e7:d4:19:9f:7e:
         b5:c1:b2:ee:bc:af:ec:7c:fd:93:3c:ff:a1:e3:c3:a0:0c:b0:
         e8:52:31:c1:b4:1d:0a:f3:b8:67:e3:18:9c:c6:bd:70:db:58:
         c1:42:ef:75:d0:60:e2:2f:1c:a0:28:60:03:ed:e9:d4:0b:ed:
         29:2e:73:56:ba:61:dc:d4:ce:fc:a3:7e:20:95:33:23:cf:90:
         81:41:a9:e5:24:b1:7e:d3:ff:87:eb:1b:1e:ab:01:ef:7e:85:
         7d:e7:bc:12:8f:e4:9c:5a:ca:1b:cb:1e:1c:3f:a2:4c:f3:23:
         21:06:32:83:47:ae:30:42:dd:c6:7a:06:fe:80:70:33:4b:d0:
         c3:9d:f3:5e:9b:a2:5e:9f:e7:41:2a:0a:04:c8:06:33:22:d8:
         53:ed:5f:cd:85:55:2d:7c:7b:93:1d:a0:b3:50:54:39:06:4a:
         07:52:8b:29:2a:80:12:ea:1a:9b:d9:40:fb:c5:44:c7:ce:21:
         2d:5c:c1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:57:51 2025 by rpki-client