This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/38F69014325B11ED8403A325C4F9AE02.roa
File:                     38F69014325B11ED8403A325C4F9AE02.roa (raw, json)
Hash identifier:          FZIeDc9fr9Vk3VF/3NkVllxgVFZLM9kYFOVZSgfzDWg=
Subject key identifier:   03:81:5C:C2:AF:00:19:20:15:CA:6D:96:E2:75:61:90:21:34:30:06
Certificate issuer:       /CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
Certificate serial:       0271
Authority key identifier: 9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/38F69014325B11ED8403A325C4F9AE02.roa
Signing time:             Thu 13 Nov 2025 00:17:26 +0000
ROA not before:           Thu 13 Nov 2025 00:17:26 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137953
IP address blocks:        103.243.244.0/23 maxlen: 23
                          103.243.244.0/24 maxlen: 24
                          103.243.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl
                          rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B393, serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
        Validity
            Not Before: Nov 13 00:17:26 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69152395-8c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:bf:4d:3f:9b:97:11:8a:7b:7e:d0:e0:78:
                    7d:a4:55:a4:ee:16:11:5d:be:64:e4:2b:60:cb:f7:
                    1b:65:b6:6e:a0:aa:cd:b6:fb:dc:0b:df:db:b9:3a:
                    23:c5:21:1c:68:53:98:a4:31:1e:cc:a3:86:e9:bf:
                    f5:dc:3e:41:63:89:b2:31:4b:bc:a4:de:d4:c1:71:
                    a9:18:97:ab:75:e3:2f:f4:21:76:bb:2e:ef:9b:62:
                    f1:17:f3:78:4e:3c:ac:43:f5:be:64:b4:57:1b:08:
                    65:ff:43:39:fa:a2:29:ed:b1:8a:97:05:41:c5:47:
                    b4:87:bb:41:50:fc:55:86:c1:ef:70:5a:2e:6c:7b:
                    c4:68:fe:b0:c2:e4:1e:6b:d8:9c:64:cb:4f:c0:25:
                    58:1d:6c:e0:0c:d3:d5:54:b9:65:1d:ae:91:3a:c1:
                    d5:a6:c2:3f:4d:8b:1e:68:05:5d:7f:8d:3e:30:21:
                    e7:c5:a1:a7:76:90:3d:19:a1:54:31:5e:78:55:2e:
                    7e:c3:9c:8d:50:b3:43:0a:78:e6:4a:da:f3:18:fb:
                    61:06:6c:d9:77:c4:c1:b8:10:a2:b5:7e:1c:73:4a:
                    d5:14:8c:ba:d3:5a:e5:71:c3:16:86:5f:80:c6:e1:
                    35:1c:fb:54:a8:fb:90:1d:16:29:5b:7c:cb:22:04:
                    f1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:81:5C:C2:AF:00:19:20:15:CA:6D:96:E2:75:61:90:21:34:30:06
            X509v3 Authority Key Identifier:
                keyid:9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/38F69014325B11ED8403A325C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:d8:0b:0a:01:31:de:54:b4:63:10:47:b1:91:bf:ce:13:ee:
         c2:4f:1f:6f:7e:f8:91:be:0d:36:00:5b:da:10:2a:4b:d7:cd:
         f7:b7:97:f8:66:c1:9f:fa:4a:c9:21:0c:40:d6:93:00:98:77:
         4c:d2:4a:56:71:9c:dd:90:4c:1b:9b:ef:b7:0c:ad:84:9c:48:
         eb:c7:d1:c2:45:eb:71:01:3e:13:c6:f9:16:9e:a3:f1:ef:62:
         d2:96:67:9b:f2:44:5d:57:08:95:3f:1a:a1:7b:03:a3:e9:5e:
         2d:3d:c8:8d:fd:b5:27:61:3e:5a:3a:31:b8:3d:56:3e:a8:89:
         5d:98:eb:0c:3c:2e:da:7b:75:f9:b7:00:81:b9:a7:29:a1:d9:
         23:bd:1e:a2:79:79:94:46:7d:2b:02:ee:14:58:d6:35:d2:53:
         20:cd:d4:a9:8b:00:af:98:e7:63:3d:51:c5:86:17:4e:88:98:
         9a:0d:63:39:f1:f8:0b:51:5c:0e:e0:d0:d8:25:59:f6:0f:03:
         06:30:27:66:f4:ad:f4:67:18:18:ca:44:16:6c:21:5d:b1:b6:
         bb:3f:9f:6d:9b:24:4a:ed:57:54:a7:c2:12:1c:4b:0c:33:5c:
         35:72:43:20:b4:f2:25:ef:9d:a2:20:62:02:c9:44:96:56:9c:
         dd:c2:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:37:27 2025 by rpki-client