This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/10A6E062B70A11EDB851464EC4F9AE02.roa
File:                     10A6E062B70A11EDB851464EC4F9AE02.roa (raw, json)
Hash identifier:          bZt6j0f9FnqO99C81njAPqo09zXuxWqDsE/MVQG1nLI=
Subject key identifier:   D4:F2:A0:1C:8B:81:AE:60:4A:E6:03:E1:4E:0C:02:77:B6:62:4B:03
Certificate issuer:       /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
Certificate serial:       0909
Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/10A6E062B70A11EDB851464EC4F9AE02.roa
Signing time:             Thu 04 Dec 2025 19:32:33 +0000
ROA not before:           Thu 04 Dec 2025 19:32:33 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     135391
IP address blocks:        103.146.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl
                          rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2313 (0x909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918753F, serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
        Validity
            Not Before: Dec  4 19:32:33 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6931e1d0-128a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:be:9f:0b:3f:8a:b0:e6:b6:56:ef:96:51:b8:
                    8e:5f:ff:fc:00:64:df:50:ba:ce:2d:58:b1:5d:70:
                    bd:6a:e6:f5:82:e8:0d:5c:91:87:f9:a1:fc:1d:a0:
                    df:54:35:86:cf:fb:bd:ff:53:64:71:5a:ab:ef:d1:
                    5b:af:29:d5:07:31:be:60:6f:5d:36:71:60:da:ee:
                    db:4c:b8:c9:8d:2b:03:4a:b6:31:03:23:b0:2d:25:
                    f2:f0:2d:8e:ea:83:51:4f:00:ca:fe:dc:88:75:e3:
                    f8:a9:ed:c9:67:e9:c1:c3:76:17:59:34:d3:6c:51:
                    bb:25:e6:b0:59:6a:b1:7a:ac:21:af:c0:0b:e1:15:
                    43:ff:06:6d:16:63:e9:f2:4a:fe:ce:29:1f:23:bd:
                    b2:4e:0d:26:ba:2e:a4:2e:3e:2a:c5:6b:ca:0a:db:
                    63:ae:3c:36:32:72:b1:ce:a0:30:ec:61:4c:df:ae:
                    cd:03:9b:b0:fe:58:96:32:77:ef:c1:90:21:49:98:
                    1d:c1:a5:f4:05:0b:a1:c6:61:65:0c:05:2d:51:e6:
                    21:d0:36:b9:20:4e:6d:47:27:a4:53:e8:ec:e3:8f:
                    90:d4:de:24:85:ab:9d:42:4d:36:b9:df:eb:be:c7:
                    d3:12:01:5e:ef:c8:04:b9:af:41:74:85:14:47:21:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F2:A0:1C:8B:81:AE:60:4A:E6:03:E1:4E:0C:02:77:B6:62:4B:03
            X509v3 Authority Key Identifier:
                keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/10A6E062B70A11EDB851464EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:a9:d9:06:74:76:c9:e9:e9:63:d8:2a:f6:8d:35:7a:cd:ec:
         e4:e0:bd:9a:b8:fd:38:a3:46:36:2d:50:40:45:58:3d:56:24:
         2e:05:6f:fa:c7:61:4c:b0:d6:3d:f2:dc:ff:27:bc:d9:2a:40:
         96:c3:bc:aa:f8:27:e4:bb:f2:8b:1c:50:82:da:96:74:42:91:
         76:e4:17:c1:15:9f:ad:c3:12:1b:25:da:27:72:5a:0d:33:e8:
         16:ac:8b:3c:12:bf:1a:6b:99:ff:cc:67:5a:f7:b3:d7:2a:a0:
         63:da:a0:af:58:c4:18:9a:5a:a3:a8:8b:4c:83:75:94:50:5b:
         87:5d:07:c6:f1:21:cd:a5:45:f4:fc:c6:b5:f8:9c:7c:ae:5f:
         cb:a9:f3:bd:bc:4d:8c:d4:2d:b3:00:ba:8d:30:9c:60:d4:b8:
         27:a2:24:b7:58:b1:cb:c8:4a:2e:ed:46:23:f9:25:c1:91:84:
         22:01:22:8b:b2:61:c3:58:f0:3a:0a:db:ae:21:9c:36:e5:23:
         5e:c9:80:64:63:3f:fc:6d:2c:e8:d4:1a:42:2d:3f:bd:d2:30:
         aa:7c:f2:e1:78:90:4e:86:36:b8:8d:5a:d0:6c:ce:ff:41:3f:
         33:99:05:23:85:3e:6c:04:54:f0:d9:a1:09:e9:9e:25:4e:b3:
         bc:39:a5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:34 2025 by rpki-client