This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/CB6BD978592811E9AD7CEF21C4F9AE02.roa
File:                     CB6BD978592811E9AD7CEF21C4F9AE02.roa (raw, json)
Hash identifier:          D47QTdzNWgdfvH96mRa4FAbQH77rng3qxruPOGhtKDc=
Subject key identifier:   16:05:15:B8:16:3E:50:22:CA:21:2B:5C:C7:F6:A1:B0:89:82:56:1B
Certificate issuer:       /CN=A919F46B/serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946
Certificate serial:       1020
Authority key identifier: 14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/CB6BD978592811E9AD7CEF21C4F9AE02.roa
Signing time:             Wed 03 Dec 2025 07:45:48 +0000
ROA not before:           Wed 03 Dec 2025 07:45:48 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     138601
IP address blocks:        103.134.88.0/22 maxlen: 24
                          103.244.247.0/24 maxlen: 24
                          123.176.56.0/24 maxlen: 24
                          123.176.58.0/24 maxlen: 24
                          202.129.193.0/24 maxlen: 24
                          2404:61c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl
                          rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4128 (0x1020)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F46B, serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946
        Validity
            Not Before: Dec  3 07:45:48 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=692feaac-8f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d9:eb:6c:e7:24:a7:35:e2:0f:73:77:79:3f:
                    dd:a4:40:c5:6e:0b:2c:0c:97:9d:88:f3:fc:da:b2:
                    eb:14:60:db:d9:6d:72:ce:08:2a:b4:6e:65:3a:04:
                    09:35:ab:d6:7c:c8:4d:2f:76:dd:3e:a6:d6:d2:47:
                    93:0f:09:8a:f9:6d:25:aa:52:77:e8:14:33:c8:23:
                    85:40:59:2e:8c:39:ad:9d:a0:bf:64:af:3e:87:f1:
                    73:9f:40:1c:29:2f:8d:79:90:fb:ed:74:86:cc:26:
                    b1:d2:02:48:a1:bb:0e:07:77:40:55:fa:6c:9b:f0:
                    74:86:03:2a:ec:8f:10:7f:ad:27:86:f4:3e:d7:d2:
                    ae:5e:44:d2:46:04:3d:7f:eb:ea:70:bf:58:e5:bb:
                    73:b9:54:6f:7b:c8:bf:7a:49:3d:1b:02:18:5b:79:
                    b8:f9:c8:af:4c:c2:95:c4:2b:bd:47:c5:97:22:5d:
                    e8:7d:8c:3b:02:53:73:ce:f1:31:66:6a:b6:85:2a:
                    0c:65:5a:c1:b7:fa:74:76:06:8f:a4:ac:25:b7:8a:
                    61:48:c7:f5:e6:cc:cb:45:47:d2:65:b0:bf:f8:79:
                    dd:bc:a4:c0:c6:0c:2a:c9:e3:81:ed:a7:bc:12:e6:
                    24:7d:c2:c2:80:e8:50:f1:4e:64:b9:85:72:6d:17:
                    14:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:05:15:B8:16:3E:50:22:CA:21:2B:5C:C7:F6:A1:B0:89:82:56:1B
            X509v3 Authority Key Identifier:
                keyid:14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/CB6BD978592811E9AD7CEF21C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.88.0/22
                  103.244.247.0/24
                  123.176.56.0/24
                  123.176.58.0/24
                  202.129.193.0/24
                IPv6:
                  2404:61c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:83:32:7c:39:40:24:99:95:d0:e6:5a:ae:45:eb:62:9f:55:
         1d:27:84:80:b9:b6:0a:a5:c6:13:7a:bd:c6:33:b5:ae:a7:15:
         13:a7:75:f8:fb:72:53:70:de:00:ae:39:39:2b:99:96:3c:6d:
         43:ad:4c:1d:9d:0b:85:ca:ac:89:a5:f3:66:a2:99:79:00:a7:
         75:0c:6f:c5:31:b2:cc:46:df:bd:25:36:91:db:8f:36:c2:9b:
         2b:43:db:cc:82:a7:05:e3:13:34:fb:0c:ff:3d:bb:9e:cb:69:
         db:9a:e5:79:ae:7d:4d:a7:3e:5f:02:c3:ff:fe:76:87:7c:d4:
         d4:0e:0c:a7:07:b9:8d:c9:b4:6e:35:49:35:30:7a:53:5e:0c:
         62:f0:7a:a9:aa:41:25:dd:28:19:15:db:76:56:1a:0b:b6:81:
         06:0c:67:63:d9:42:a3:a2:35:e2:ee:26:d0:ec:d4:de:d5:92:
         7e:1a:47:c5:a0:76:65:07:89:73:bd:e5:c5:20:6b:73:93:e0:
         9f:d0:72:53:1d:6e:35:52:57:52:91:4a:71:20:b8:d8:80:32:
         75:e3:10:b3:c5:9d:25:9b:a3:7e:5f:eb:0b:e3:f7:51:17:21:
         c1:43:ac:00:61:b2:d6:cf:15:45:a2:a1:5f:a8:d5:b7:95:a7:
         56:cd:b0:b5
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICECAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY0NkIxMTAvBgNVBAUTKDE0QkZBQjc5NDI2RTNEMjJCRUMzRkM2MUVFNDMyRkVB
MDgyNzI5NDYwHhcNMjUxMjAzMDc0NTQ4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJmZWFhYy04ZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx9nrbOckpzXiD3N3eT/dpEDFbgssDJediPP82rLrFGDb2W1yzggqtG5lOgQJ
NavWfMhNL3bdPqbW0keTDwmK+W0lqlJ36BQzyCOFQFkujDmtnaC/ZK8+h/Fzn0Ac
KS+NeZD77XSGzCax0gJIobsOB3dAVfpsm/B0hgMq7I8Qf60nhvQ+19KuXkTSRgQ9
f+vqcL9Y5btzuVRve8i/ekk9GwIYW3m4+civTMKVxCu9R8WXIl3ofYw7AlNzzvEx
Zmq2hSoMZVrBt/p0dgaPpKwlt4phSMf15szLRUfSZbC/+HndvKTAxgwqyeOB7ae8
EuYkfcLCgOhQ8U5kuYVybRcUAwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFBYFFbgW
PlAiyiErXMf2obCJglYbMB8GA1UdIwQYMBaAFBS/q3lCbj0ivsP8Ye5DL+oIJylG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjQ2Qi81NkVFQkFFODU5
MjgxMUU5OUZGRjdBMjFDNEY5QUUwMi9GTC1yZVVKdVBTSy13X3hoN2tNdjZnZ25L
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZMLXJlVUp1UFNLLXdfeGg3a012NmdnbktVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUY0NkIvNTZFRUJBRTg1OTI4MTFFOTlGRkY3QTIxQzRGOUFFMDIvQ0I2QkQ5Nzg1
OTI4MTFFOUFEN0NFRjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E
NzA1MCQEAgABMB4DBAJnhlgDBABn9PcDBAB7sDgDBAB7sDoDBADKgcEwDQQCAAIw
BwMFACQEYcAwDQYJKoZIhvcNAQELBQADggEBACyDMnw5QCSZldDmWq5F62KfVR0n
hIC5tgqlxhN6vcYzta6nFROndfj7clNw3gCuOTkrmZY8bUOtTB2dC4XKrIml82ai
mXkAp3UMb8UxssxG370lNpHbjzbCmytD28yCpwXjEzT7DP89u57Ladua5XmufU2n
Pl8Cw//+dod81NQODKcHuY3JtG41STUwelNeDGLweqmqQSXdKBkV23ZWGgu2gQYM
Z2PZQqOiNeLuJtDs1N7Vkn4aR8WgdmUHiXO95cUga3OT4J/QclMdbjVSV1KRSnEg
uNiAMnXjELPFnSWbo35f6wvj91EXIcFDrABhstbPFUWioV+o1beVp1bNsLU=
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:24:23 2025 by rpki-client