This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/39932724578611EA8CC3B124C4F9AE02.roa
File:                     39932724578611EA8CC3B124C4F9AE02.roa (raw, json)
Hash identifier:          /e0Uxe/WEV1FppAI7dlPlXf91plYywNSj3O5JH2JadI=
Subject key identifier:   0C:29:97:C6:5E:48:04:3F:68:B7:7A:D7:49:42:CE:15:F0:AD:84:80
Certificate issuer:       /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial:       2973
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/39932724578611EA8CC3B124C4F9AE02.roa
Signing time:             Sat 20 Dec 2025 16:12:53 +0000
ROA not before:           Sat 20 Dec 2025 16:12:53 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.43.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
                          rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 16:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10611 (0x2973)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
        Validity
            Not Before: Dec 20 16:12:53 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6946cb05-cb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f8:6d:26:47:1d:a4:f9:ab:02:ac:b4:73:de:
                    b4:99:bf:fb:09:d9:fb:b0:63:05:1a:df:31:bd:75:
                    7d:95:d8:83:b5:98:47:d4:be:d7:c4:68:bc:81:db:
                    f4:0e:75:df:dc:bb:d3:70:c5:01:90:f1:8b:61:e9:
                    f9:39:86:da:70:12:11:4c:fe:14:82:2b:dc:94:d2:
                    04:d1:df:07:59:95:d1:d9:77:87:f8:b7:ca:8f:88:
                    06:4b:48:81:3f:a8:f6:e4:0b:57:59:8b:c7:52:e3:
                    48:0c:60:8f:4e:65:c7:18:4c:80:06:d3:d3:43:a6:
                    33:1d:4d:d8:3a:5d:29:a1:ba:e1:f2:b2:82:c3:06:
                    cd:ec:21:8e:da:ee:87:d1:f1:32:c4:1a:bf:9a:dc:
                    df:13:6a:a8:c2:bb:ed:85:21:77:63:4c:9b:22:49:
                    27:e1:ea:af:60:a1:d2:8d:64:ed:32:24:a6:bf:7f:
                    a8:bd:ff:d9:5c:2e:5e:9a:7a:3c:d7:fd:3a:66:05:
                    45:04:36:39:4c:05:2d:79:ba:c8:d0:28:31:3e:44:
                    1a:3c:5f:e3:14:ca:f9:aa:02:a2:a2:c4:bb:9f:1c:
                    4f:2c:15:10:b0:6c:fb:3b:7c:4d:c3:c9:e4:c3:e3:
                    b7:98:30:bb:9e:89:3c:94:e7:de:51:c5:80:d7:4b:
                    f4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:29:97:C6:5E:48:04:3F:68:B7:7A:D7:49:42:CE:15:F0:AD:84:80
            X509v3 Authority Key Identifier:
                keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/39932724578611EA8CC3B124C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:62:f2:15:30:97:6f:12:db:76:b9:35:c1:28:ea:e1:b8:aa:
         db:57:ea:fe:5f:03:f6:bf:a6:75:93:47:4c:85:e0:41:47:28:
         ad:ee:d3:b2:09:16:75:37:c6:ef:81:b2:dc:b7:b9:4f:f1:7f:
         65:5b:99:3f:87:21:90:79:c8:1f:e6:9e:d1:6c:8b:d6:5d:f3:
         99:d7:f3:2a:59:1e:36:67:c3:6c:24:50:1f:5b:fa:40:81:3b:
         73:f8:ed:2b:d1:f4:fb:54:64:f1:e2:0b:b6:95:59:45:fc:9c:
         c5:97:43:14:5d:3b:97:d6:9c:71:78:0b:95:1d:3b:4e:a9:14:
         a6:73:8e:fe:23:40:6d:74:25:f2:74:1d:f3:2b:49:e0:66:90:
         dc:62:bf:26:b2:b6:7d:4c:04:ad:8d:28:d2:8f:18:c6:5b:bc:
         4c:db:c7:e2:41:12:1f:d0:8e:85:81:3d:5c:04:bb:8c:ef:83:
         b3:be:45:ac:a6:d9:24:df:66:97:39:05:a8:e0:b6:e3:87:7f:
         29:be:ad:bc:a1:d7:b4:4d:47:cd:57:de:ba:b7:45:4c:2f:71:
         be:ba:ad:88:c4:d4:75:04:91:7b:95:6f:4d:e9:0b:7c:43:4b:
         91:56:9c:29:f5:3f:8b:c8:30:81:24:d1:97:00:61:1c:29:95:
         44:fc:35:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:47:28 2025 by rpki-client