This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/C51F34AAC46711F09831793EC4F9AE02.roa
File:                     C51F34AAC46711F09831793EC4F9AE02.roa (raw, json)
Hash identifier:          m5fQia28aN0SeiS47PeAtdpG/HWjYs+FsWqbdr95Tkg=
Subject key identifier:   02:FD:4C:B4:26:61:F5:99:F7:7F:92:D1:19:56:C8:F5:5D:52:01:FD
Certificate issuer:       /CN=A919AAA0/serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753
Certificate serial:       06C6
Authority key identifier: 2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/C51F34AAC46711F09831793EC4F9AE02.roa
Signing time:             Thu 04 Dec 2025 21:34:50 +0000
ROA not before:           Thu 04 Dec 2025 21:34:50 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     42960
IP address blocks:        103.145.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl
                          rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1734 (0x6c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AAA0, serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753
        Validity
            Not Before: Dec  4 21:34:50 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6931fe7a-19cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2c:f3:8a:20:aa:8e:a3:64:a6:e5:db:4e:b9:
                    b6:2f:74:eb:20:06:3b:cb:10:ee:f8:45:50:a5:83:
                    d2:5c:df:87:92:07:1e:8e:82:f2:cc:1e:ea:9a:1f:
                    6f:8d:75:b7:7c:ff:e6:17:0f:85:d6:f3:a7:42:44:
                    3f:2c:c3:31:6c:78:6a:63:f5:a5:ac:b4:28:85:6d:
                    a2:3d:0f:f2:36:e2:9b:db:37:f4:b1:62:46:53:77:
                    d2:8c:4e:b7:fc:09:d3:6c:c4:71:ec:04:22:16:3a:
                    17:c9:38:15:ca:b3:a9:bb:ac:11:a1:cb:8b:6f:87:
                    ac:ed:dd:69:28:24:eb:b3:55:94:2d:ae:c0:d4:0b:
                    23:13:37:3c:5c:fd:87:db:c0:a8:d0:a1:df:03:4e:
                    cd:47:95:7e:16:96:0c:a2:6e:70:27:95:7e:8d:b2:
                    aa:ea:c6:58:1b:c1:be:bb:e2:f8:e4:02:d7:96:32:
                    69:98:6d:ea:ae:6e:ab:bb:7a:cf:45:20:9d:50:45:
                    c5:1c:12:bd:9c:31:c9:d0:83:d5:5a:cd:ee:1c:2d:
                    79:46:a3:fb:24:64:6b:b7:ca:6c:a0:1e:51:d6:e0:
                    05:14:77:5b:1e:67:71:d5:0a:14:fd:ee:c1:8a:b3:
                    6c:b5:4c:3d:7a:92:45:9f:d4:02:f9:09:fe:d6:5b:
                    d3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FD:4C:B4:26:61:F5:99:F7:7F:92:D1:19:56:C8:F5:5D:52:01:FD
            X509v3 Authority Key Identifier:
                keyid:2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/C51F34AAC46711F09831793EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:48:49:6d:0a:f8:bd:41:3a:8c:1a:6d:3a:0b:90:a3:55:4f:
         85:67:78:4a:e0:11:ed:16:e7:db:19:fd:e0:cd:c3:bb:90:d8:
         ea:25:47:b7:37:87:16:27:85:af:e8:94:6b:e8:ea:f7:c7:0c:
         db:47:b2:b6:17:41:d3:24:69:84:65:84:b8:dc:62:df:4f:ae:
         55:d4:e2:01:7b:07:ee:de:45:c9:75:d7:43:d7:97:44:32:32:
         a1:e5:05:6f:61:c1:f2:28:b3:bd:38:2e:3e:66:4c:89:8e:8d:
         a6:96:89:bc:f8:8b:bb:62:07:61:3a:bd:73:05:4e:cf:e1:c8:
         7b:fe:6f:b2:68:c7:5f:63:f6:f9:bf:99:b6:30:89:27:bd:27:
         22:35:d8:ba:c4:6f:25:e5:bb:4f:e5:24:b5:0d:4f:e3:e9:99:
         6b:bd:51:c8:d1:aa:16:e0:9b:2c:d2:46:85:dc:f6:0a:d6:96:
         ef:27:73:2f:24:36:51:e8:3f:65:fe:a8:f7:dd:64:75:12:5f:
         81:5d:29:89:2e:62:92:6d:eb:c1:b0:77:b0:63:ee:cd:d0:92:
         ce:97:79:4b:f0:d4:e3:05:a9:51:84:0d:63:5f:07:54:dd:07:
         65:5e:ff:8f:77:b7:2d:92:a8:0f:91:e4:9d:bf:16:98:95:6f:
         76:d9:91:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:44:34 2025 by rpki-client