This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/74637BD8AB5911F0A8E57D4AC4F9AE02.roa
File:                     74637BD8AB5911F0A8E57D4AC4F9AE02.roa (raw, json)
Hash identifier:          80PaCFFuMnuRM+D3EQkPjurblzfq2cyz9MfOJnMFwd4=
Subject key identifier:   0D:C3:AB:2C:F8:D5:EA:8B:02:5B:49:D4:1F:F2:EE:EA:BC:6E:D7:C4
Certificate issuer:       /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Certificate serial:       0A9E
Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/74637BD8AB5911F0A8E57D4AC4F9AE02.roa
Signing time:             Sun 30 Nov 2025 19:19:15 +0000
ROA not before:           Sun 30 Nov 2025 19:19:15 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     134204
IP address blocks:        103.122.46.0/24 maxlen: 24
                          103.122.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl
                          rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2718 (0xa9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186537, serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
        Validity
            Not Before: Nov 30 19:19:15 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=692c98b2-77c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:e2:36:61:1f:ed:b0:22:8d:fe:a7:db:e2:
                    4e:a6:5d:3d:85:e3:01:f1:09:a6:69:d3:88:ad:43:
                    95:77:09:d5:7d:ef:f5:d7:31:f8:71:bb:b9:95:2c:
                    86:6b:10:b1:da:92:1f:cc:5d:35:98:54:81:e3:a5:
                    30:c6:d5:61:fb:f2:a0:e4:36:8b:d0:b3:33:39:90:
                    22:01:e3:ce:ad:fb:d1:2d:b6:ce:40:fc:1f:1d:98:
                    73:3e:0b:f2:f9:06:4d:69:22:71:8d:c2:5a:d7:f1:
                    d4:45:1b:ff:e0:de:d0:4d:cd:4a:08:51:f1:5b:54:
                    50:cf:fd:c0:47:c3:89:f5:aa:99:33:05:24:0d:ee:
                    67:f8:a8:8b:53:44:46:a5:21:64:17:c9:38:d7:33:
                    01:c2:97:fb:d4:bc:d3:45:33:4b:d3:83:3e:c2:02:
                    89:54:47:bd:b9:a8:ac:61:b9:3f:81:ed:df:b9:28:
                    e7:90:50:f6:c6:eb:18:7d:fe:9e:3a:75:b1:9a:70:
                    31:5f:a4:90:21:44:aa:cd:20:65:b3:82:a7:28:51:
                    dd:26:d4:d4:65:cb:cf:25:96:e5:0e:63:eb:a5:1c:
                    0b:dc:bd:7f:bf:d4:07:e8:a7:27:7e:89:e7:b7:8f:
                    47:cf:5d:f9:44:62:73:57:1a:cd:ea:68:dd:67:44:
                    f4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C3:AB:2C:F8:D5:EA:8B:02:5B:49:D4:1F:F2:EE:EA:BC:6E:D7:C4
            X509v3 Authority Key Identifier:
                keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/74637BD8AB5911F0A8E57D4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:00:e6:84:20:da:0b:ad:e9:fa:9f:ea:43:94:23:4d:53:f4:
         81:6e:14:ea:42:43:32:6f:89:ec:96:bd:b9:12:29:cf:d2:04:
         ac:3f:cd:f6:d7:36:95:3b:a2:56:5b:92:b4:18:84:57:97:b7:
         59:ed:52:79:58:c5:27:7c:3e:c9:fc:e2:98:b6:cf:6c:2e:96:
         9c:f8:22:c0:b0:43:0d:c7:a9:52:bd:2c:5b:6b:15:c4:df:e4:
         70:4a:70:7d:d9:1f:d9:63:97:59:d9:f8:a9:12:bc:f1:35:92:
         8c:33:9c:2c:a5:4c:fc:45:6f:06:4a:e3:dc:74:80:15:94:e6:
         bf:51:db:8f:53:ea:dd:b7:c4:49:46:a2:91:e0:6c:1b:e8:4d:
         26:dc:47:0f:52:06:89:6b:ea:45:e4:66:1b:da:b9:19:b7:f4:
         c1:52:1f:80:23:43:f6:82:29:10:84:ee:ca:ea:74:8c:6f:73:
         d4:7c:15:d2:ee:13:2c:a0:99:37:bb:6a:ad:16:bc:3b:c0:7b:
         41:b5:8b:3f:31:27:27:bd:3f:ee:4b:94:d9:30:62:48:f0:9f:
         c2:29:4b:5a:c6:6b:57:b9:d0:d5:74:a4:59:ff:93:bb:9b:7d:
         d2:54:d6:be:ae:b9:10:7f:6a:ba:22:7b:02:a7:10:52:e6:09:
         f5:4d:d4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:18:03 2025 by rpki-client