This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/9398F508619611EBA485B448C4F9AE02.roa
File:                     9398F508619611EBA485B448C4F9AE02.roa (raw, json)
Hash identifier:          CFEUDF+dG6qKnpU1eHBX9Jqx9Z184q8fTNLy6tKeF1E=
Subject key identifier:   10:5E:A7:E5:CA:F9:D5:A0:87:60:DE:C6:4B:EF:99:E9:41:80:60:C9
Certificate issuer:       /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Certificate serial:       0710
Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/9398F508619611EBA485B448C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 21:12:24 +0000
ROA not before:           Sat 08 Nov 2025 21:12:24 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141187
IP address blocks:        103.155.244.0/24 maxlen: 24
                          103.155.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
                          rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
        Validity
            Not Before: Nov  8 21:12:24 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690fb238-8151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a7:4e:fb:11:f4:95:2f:8e:cd:61:44:e9:12:
                    90:9d:76:25:fa:94:84:a4:71:9b:e7:a8:ec:b7:51:
                    ab:65:60:4d:cb:d3:f4:bd:10:33:f5:b1:16:6c:49:
                    1d:62:6b:f6:55:b1:2e:f6:4f:c6:c9:e9:7e:2d:fd:
                    1f:c9:bb:02:3f:83:1e:7c:25:21:6a:d4:c4:a3:74:
                    b2:8a:d9:2c:ac:70:c6:0a:8d:52:b0:49:7c:ef:f6:
                    34:e7:15:4b:e3:2e:ce:fb:b1:94:f5:75:de:c5:f0:
                    5b:20:ec:16:0b:0a:a7:f3:58:22:38:52:6e:5a:ee:
                    99:c7:9a:9c:9d:bd:ea:e8:dd:19:60:a0:28:f7:c5:
                    0f:24:07:18:7e:1a:93:7d:d5:25:11:b5:b9:79:33:
                    5a:a0:60:c5:18:fc:ba:36:fd:1d:b3:f8:e1:71:6a:
                    79:a4:92:70:a0:a1:e5:66:1e:3c:25:c5:98:34:8e:
                    12:44:d2:17:5f:64:ed:37:16:18:47:97:aa:0c:b5:
                    f5:da:16:77:46:9a:fd:a7:0b:3d:4d:be:0b:74:c6:
                    da:61:fc:15:0b:23:65:f2:d5:9e:25:72:7a:c1:95:
                    17:77:3d:56:36:14:31:a4:8c:f5:86:b4:60:91:15:
                    df:1e:79:77:dd:c0:51:be:05:00:aa:64:7c:d2:5b:
                    75:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5E:A7:E5:CA:F9:D5:A0:87:60:DE:C6:4B:EF:99:E9:41:80:60:C9
            X509v3 Authority Key Identifier:
                keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/9398F508619611EBA485B448C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:94:f0:4b:2b:df:f8:9d:4b:fc:24:51:ae:e7:a4:bd:84:3e:
         9b:00:22:d7:a1:5a:a5:0f:92:2c:00:e6:64:60:59:8a:c8:38:
         8f:75:8f:9a:65:90:6d:33:0d:e0:29:24:1e:dc:2b:ab:f5:1b:
         de:51:0e:9f:f7:b0:eb:58:e1:74:28:e5:f6:a9:4a:4b:64:d8:
         12:5c:5c:8b:71:22:0f:ab:12:f2:7d:f8:f9:a0:3b:39:21:54:
         f6:36:3b:4e:8e:34:90:81:5c:26:28:92:12:fa:6e:80:47:99:
         6f:6f:37:59:93:35:9d:7c:fb:1d:1d:83:65:82:93:88:19:bb:
         08:66:35:ef:98:4b:bc:17:06:81:a6:76:9f:a9:d8:53:0f:4c:
         ab:f6:8b:52:8c:3a:08:bc:3c:d2:9f:69:fd:9f:8b:86:38:76:
         ee:6f:62:b4:72:bc:19:88:59:bf:6e:d1:bc:d7:79:2d:b3:77:
         63:c8:1e:2c:c6:88:68:81:e0:c1:24:63:63:47:11:f0:46:72:
         21:b6:81:ce:a4:73:d2:6d:57:59:d4:ef:f2:a4:06:55:b7:4b:
         0d:ef:f2:92:43:7a:03:90:54:3e:dd:6c:fa:8d:05:a9:44:02:
         7c:f3:20:51:f6:c4:e9:56:57:6c:00:b5:c7:99:7d:a1:33:b3:
         47:e7:28:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:42:10 2025 by rpki-client