This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/64720824EF6611EB9A7EFE0EC4F9AE02.roa
File:                     64720824EF6611EB9A7EFE0EC4F9AE02.roa (raw, json)
Hash identifier:          7yL6U8ud5pLwixKeXetRxZPEaqHv1CH+VsXl+F/+77I=
Subject key identifier:   B0:0B:01:E0:DD:9B:E6:32:CC:1E:F3:06:03:D7:6F:01:B9:2F:B4:7E
Certificate issuer:       /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Certificate serial:       05AD
Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/64720824EF6611EB9A7EFE0EC4F9AE02.roa
Signing time:             Fri 14 Nov 2025 22:13:43 +0000
ROA not before:           Fri 14 Nov 2025 22:13:43 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     9790
IP address blocks:        103.252.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
                          rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1453 (0x5ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
        Validity
            Not Before: Nov 14 22:13:43 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6917a997-5936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:73:df:93:dc:eb:64:7a:ef:1d:f0:9c:d6:
                    39:9c:b5:22:9b:8b:ef:24:ac:13:c3:53:d2:50:8e:
                    0d:a0:f7:ca:2a:ac:58:5c:c3:67:17:1c:cc:01:aa:
                    4c:3d:60:86:ec:e5:a8:a7:9a:2b:13:33:b2:7d:95:
                    55:09:4f:34:d3:a4:21:89:5a:4d:ce:d9:94:e4:83:
                    6d:cf:6b:21:34:47:e7:f7:46:5f:ac:a3:f3:00:b5:
                    05:60:27:e1:eb:b7:3a:01:28:e4:75:1a:09:1d:b4:
                    02:d1:08:c2:75:7a:57:1d:09:5f:bf:76:e7:4d:fc:
                    0e:71:fa:4e:c4:51:aa:0a:20:a7:cf:ec:9a:3f:29:
                    5c:83:c3:0e:b7:8a:15:bc:52:d2:cf:2a:bb:d4:bb:
                    3a:e9:cc:52:de:95:62:a8:e9:a0:65:56:ac:4a:17:
                    29:0c:06:dd:17:75:1e:fb:c4:b1:d6:97:f0:a8:89:
                    f7:41:80:e4:a8:20:b3:58:ed:8d:30:fa:5f:23:00:
                    3f:73:c7:26:63:ad:90:54:ea:12:d6:15:21:3a:18:
                    c5:80:f9:76:61:31:be:e1:ec:23:f2:1c:fb:5e:03:
                    b7:b8:a1:f7:8d:52:b4:4d:18:28:16:41:ac:7a:b6:
                    ee:5c:4c:64:a8:8c:4c:0a:d1:bc:f1:9d:bf:07:13:
                    0a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0B:01:E0:DD:9B:E6:32:CC:1E:F3:06:03:D7:6F:01:B9:2F:B4:7E
            X509v3 Authority Key Identifier:
                keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/64720824EF6611EB9A7EFE0EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:1c:93:73:6c:19:f3:19:48:41:ea:96:3e:42:d0:80:62:4a:
         68:09:81:03:d7:b9:42:d3:80:62:c5:80:24:a0:f4:96:f0:f5:
         a6:9f:5d:c0:a7:57:31:40:6f:54:5c:d8:42:a1:80:5b:b2:3a:
         09:47:1d:3a:2a:7d:48:7f:58:7c:28:ab:8d:1d:b9:6f:ea:57:
         92:75:98:c6:6f:06:82:a8:c9:01:06:07:97:e9:c6:42:34:ee:
         8f:f9:72:9f:5a:94:b3:ee:cb:96:78:85:3b:0d:4e:d0:fc:e7:
         2d:ad:b4:4e:d1:1d:0c:60:87:93:86:9e:7d:c6:66:15:7e:55:
         da:e8:c3:73:b6:ed:9d:f9:ee:02:2d:fa:a8:1b:27:06:2a:7c:
         65:29:29:75:fc:e8:ca:81:94:fc:41:a9:3f:b5:44:33:ea:b2:
         e5:7f:4c:d5:23:c2:95:25:ec:be:d0:80:ab:ef:14:51:77:7e:
         70:8c:7c:18:26:e6:0f:bf:bd:78:29:91:b1:14:fa:58:b1:ed:
         38:37:bb:0d:43:0b:49:81:78:33:64:9f:4f:41:5a:fc:36:23:
         94:ce:f0:b9:ee:e5:2a:0f:84:74:75:f0:f3:ac:e4:7c:2e:7f:
         af:0a:10:36:7d:65:3d:b1:c8:6e:0d:bf:e0:ec:97:cd:34:63:
         3f:d5:2a:f6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFCMjY1MzFBM0U3
MDlCRjY1OUEwHhcNMjUxMTE0MjIxMzQzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTE3YTk5Ny01OTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuS1z35Pc62R67x3wnNY5nLUim4vvJKwTw1PSUI4NoPfKKqxYXMNnFxzMAapM
PWCG7OWop5orEzOyfZVVCU8006QhiVpNztmU5INtz2shNEfn90ZfrKPzALUFYCfh
67c6ASjkdRoJHbQC0QjCdXpXHQlfv3bnTfwOcfpOxFGqCiCnz+yaPylcg8MOt4oV
vFLSzyq71Ls66cxS3pViqOmgZVasShcpDAbdF3Ue+8Sx1pfwqIn3QYDkqCCzWO2N
MPpfIwA/c8cmY62QVOoS1hUhOhjFgPl2YTG+4ewj8hz7XgO3uKH3jVK0TRgoFkGs
erbuXExkqIxMCtG88Z2/BxMK4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLALAeDd
m+YyzB7zBgPXbwG5L7R+MB8GA1UdIwQYMBaAFAs+uojxraGhtQiRsmUxo+cJv2Wa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTBCMi82NzA0MkMxOEVG
NjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9hRzFDSkd5WlRHajV3bV9a
Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N6NjZpUEd0b2FHMUNKR3laVEdqNXdtX1paby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEUwQjIvNjcwNDJDMThFRjY0MTFFQjgzM0ZDODBEQzRGOUFFMDIvNjQ3MjA4MjRF
RjY2MTFFQjlBN0VGRTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn/PcwDQYJKoZIhvcNAQELBQADggEBAE0ck3NsGfMZSEHq
lj5C0IBiSmgJgQPXuULTgGLFgCSg9Jbw9aafXcCnVzFAb1Rc2EKhgFuyOglHHToq
fUh/WHwoq40duW/qV5J1mMZvBoKoyQEGB5fpxkI07o/5cp9alLPuy5Z4hTsNTtD8
5y2ttE7RHQxgh5OGnn3GZhV+Vdrow3O27Z357gIt+qgbJwYqfGUpKXX86MqBlPxB
qT+1RDPqsuV/TNUjwpUl7L7QgKvvFFF3fnCMfBgm5g+/vXgpkbEU+lix7Tg3uw1D
C0mBeDNkn09BWvw2I5TO8Lnu5SoPhHR18POs5Hwuf68KEDZ9ZT2xyG4Nv+Dsl800
Yz/VKvY=
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:31 2025 by rpki-client