This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/38B92F54E17D11EDBCAFC081C4F9AE02.roa
File:                     38B92F54E17D11EDBCAFC081C4F9AE02.roa (raw, json)
Hash identifier:          6L9/grM2XRH6xQ2g7G8uPevEIhezQ/ylsuLvLV8fdNw=
Subject key identifier:   C1:9E:E6:93:02:17:49:4C:98:39:39:7E:AE:C7:C9:26:90:9E:6A:83
Certificate issuer:       /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
Certificate serial:       090A
Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/38B92F54E17D11EDBCAFC081C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 19:32:35 +0000
ROA not before:           Thu 04 Dec 2025 19:32:35 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     21859
IP address blocks:        103.146.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl
                          rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314 (0x90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918753F, serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
        Validity
            Not Before: Dec  4 19:32:35 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6931e1d3-db41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:0e:ba:ae:1b:fd:95:ad:b6:dd:69:c9:39:
                    0e:b1:68:2f:43:f8:dc:db:43:a6:d8:68:28:c9:69:
                    83:3b:3c:08:ed:39:80:7c:73:d6:b1:9d:dc:9d:46:
                    fc:79:bc:18:23:67:fe:16:e3:38:d0:c3:a1:c1:54:
                    f5:6e:27:a2:3b:56:30:99:b5:66:b6:81:6a:03:6e:
                    ee:15:b2:a3:ce:76:c2:83:d8:d4:26:ad:fa:40:65:
                    fd:e4:37:68:b3:29:f7:42:86:f4:8d:48:a8:ec:8b:
                    86:6a:4b:b7:e3:ec:49:e7:13:2b:0d:59:ee:2d:cd:
                    40:ae:ea:0d:18:cf:e5:6d:08:0c:d9:04:7a:25:68:
                    ed:24:b9:ca:c2:00:81:24:d8:a4:1d:8f:e6:ac:02:
                    26:a6:28:23:83:c9:06:a0:15:8e:ea:bb:85:d8:37:
                    22:c2:5a:62:b1:71:a6:bb:b6:cf:97:dc:df:73:74:
                    67:81:b2:37:40:4b:20:a2:61:15:50:40:2d:59:04:
                    1d:ad:ba:e5:40:0e:19:34:39:fa:2b:65:b2:4a:6e:
                    16:7d:48:78:eb:38:9d:a5:cc:f3:ee:6f:25:44:21:
                    66:29:ea:be:f8:23:b7:31:15:b3:fd:5a:f2:80:42:
                    f1:ff:45:e8:24:3a:42:cc:e4:8c:e5:13:4a:6f:af:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9E:E6:93:02:17:49:4C:98:39:39:7E:AE:C7:C9:26:90:9E:6A:83
            X509v3 Authority Key Identifier:
                keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/38B92F54E17D11EDBCAFC081C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:cb:9d:f5:83:4b:3e:c6:a8:09:df:d5:92:ad:ef:82:1e:fa:
         45:3d:ab:6d:6a:a5:96:b9:01:0a:33:7b:2d:40:8d:b6:3b:77:
         13:e4:da:48:00:2a:11:37:20:74:0a:08:ba:54:19:9f:1e:de:
         05:8a:8d:74:c5:ae:f8:d9:fd:dc:5b:18:47:3c:bf:c9:8b:e3:
         05:3a:91:23:12:6a:5f:ab:f9:6d:93:ce:bf:69:c1:01:0c:98:
         bf:de:57:0e:08:c7:6b:7b:d2:b8:1f:c9:60:72:12:65:4b:2a:
         28:ae:f3:88:43:8f:c2:61:bb:c2:cc:ab:aa:83:16:6d:44:16:
         e2:78:b7:ed:d8:1d:12:f5:24:51:d1:ec:53:e7:76:09:d5:d7:
         3e:e3:04:24:69:2c:45:cc:86:4c:71:49:24:d1:71:b5:b3:e1:
         20:fd:20:07:bf:a7:de:a9:32:dc:63:67:8d:96:1e:f9:8f:cb:
         32:a0:96:18:52:a6:86:1d:8f:fd:ab:d9:10:41:dc:ad:4e:9f:
         ed:15:97:7a:ca:a0:7b:21:22:39:05:61:98:97:3c:8c:27:ef:
         25:09:e8:e2:3d:c4:2e:11:9f:d3:8a:d7:6d:de:1e:b7:42:99:
         4d:71:a1:ca:10:8a:04:12:40:8e:c1:f8:49:e3:96:57:a1:c8:
         8f:01:ce:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:14 2025 by rpki-client