This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa
File:                     1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa (raw, json)
Hash identifier:          H2kVJ1Qljol4RJT+WjYqTUcreshPKQd5F8/PLTtjDEU=
Subject key identifier:   80:0B:8B:4A:DB:CD:75:83:67:C6:3B:98:1F:C5:48:58:62:81:95:21
Certificate issuer:       /CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
Certificate serial:       17E1
Authority key identifier: FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa
Signing time:             Tue 09 Dec 2025 06:53:30 +0000
ROA not before:           Tue 09 Dec 2025 06:53:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58826
IP address blocks:        103.17.180.0/23 maxlen: 24
                          103.56.208.0/23 maxlen: 24
                          192.144.80.0/22 maxlen: 22
                          192.144.80.0/24 maxlen: 24
                          192.144.81.0/24 maxlen: 24
                          192.144.82.0/24 maxlen: 24
                          192.144.83.0/24 maxlen: 24
                          2402:1d40::/48 maxlen: 48
                          2402:1d40:1::/48 maxlen: 48
                          2402:1d40:2::/48 maxlen: 48
                          2402:1d40:3::/48 maxlen: 48
                          2402:1d40:4::/48 maxlen: 48
                          2402:1d40:5::/48 maxlen: 48
                          2402:1d40:6::/48 maxlen: 48
                          2402:1d40:7::/48 maxlen: 48
                          2402:1d40:8::/48 maxlen: 48
                          2402:1d40:9::/48 maxlen: 48
                          2402:1d40:a::/48 maxlen: 48
                          2402:1d40:b::/48 maxlen: 48
                          2402:1d40:c::/48 maxlen: 48
                          2402:1d40:d::/48 maxlen: 48
                          2402:1d40:e::/48 maxlen: 48
                          2402:1d40:f::/48 maxlen: 48
                          2402:1d40:10::/48 maxlen: 48
                          2402:1d40:11::/48 maxlen: 48
                          2402:1d40:12::/48 maxlen: 48
                          2402:1d40:13::/48 maxlen: 48
                          2402:1d40:14::/48 maxlen: 48
                          2402:1d40:15::/48 maxlen: 48
                          2402:1d40:16::/48 maxlen: 48
                          2402:1d40:17::/48 maxlen: 48
                          2402:1d40:18::/48 maxlen: 48
                          2402:1d40:19::/48 maxlen: 48
                          2402:1d40:1a::/48 maxlen: 48
                          2402:1d40:1b::/48 maxlen: 48
                          2402:1d40:1c::/48 maxlen: 48
                          2402:1d40:1d::/48 maxlen: 48
                          2402:1d40:1e::/48 maxlen: 48
                          2402:1d40:1f::/48 maxlen: 48
                          2402:1d40:20::/48 maxlen: 48
                          2402:1d40:21::/48 maxlen: 48
                          2402:1d40:22::/48 maxlen: 48
                          2402:1d40:23::/48 maxlen: 48
                          2402:1d40:24::/48 maxlen: 48
                          2402:1d40:25::/48 maxlen: 48
                          2402:1d40:26::/48 maxlen: 48
                          2402:1d40:27::/48 maxlen: 48
                          2402:1d40:28::/48 maxlen: 48
                          2402:1d40:29::/48 maxlen: 48
                          2402:1d40:1000::/48 maxlen: 48
                          2402:1d40:1001::/48 maxlen: 48
                          2402:1d40:2000::/48 maxlen: 48
                          2402:1d40:2001::/48 maxlen: 48
                          2402:1d40:3000::/48 maxlen: 48
                          2402:1d40:3001::/48 maxlen: 48
                          2402:1d40:3002::/48 maxlen: 48
                          2402:1d40:3003::/48 maxlen: 48
                          2402:1d40:4000::/48 maxlen: 48
                          2402:1d40:4001::/48 maxlen: 48
                          2402:1d40:4002::/48 maxlen: 48
                          2402:1d40:4003::/48 maxlen: 48
                          2402:1d40:5000::/48 maxlen: 48
                          2402:1d40:5001::/48 maxlen: 48
                          2402:1d40:5002::/48 maxlen: 48
                          2402:1d40:5003::/48 maxlen: 48
                          2402:1d40:5004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl
                          rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6113 (0x17e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117E49, serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
        Validity
            Not Before: Dec  9 06:53:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6937c76a-c272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:c6:56:26:a7:ca:c9:41:5c:e1:2d:51:5c:
                    ce:72:4f:fa:05:c3:ed:7d:63:9f:5f:d5:1f:5e:7a:
                    89:21:df:9f:1e:d6:ca:36:aa:32:c2:fc:fd:af:2b:
                    65:62:92:8b:91:7b:ac:43:08:87:ce:2a:61:c3:32:
                    2f:d5:5c:97:a2:2f:96:01:e5:74:2b:3b:7f:7d:d3:
                    b2:7b:8f:0a:39:99:24:35:cf:85:dc:ef:94:69:7a:
                    a9:c3:0c:e9:b9:e7:cb:80:de:62:ac:e9:f2:8a:b9:
                    44:cd:21:4e:60:fe:30:58:92:b2:56:75:a1:44:fd:
                    5f:e3:eb:63:16:e1:96:0a:0c:75:60:0b:ab:a4:8f:
                    b4:4a:af:ac:04:72:8a:3c:14:74:3c:dd:51:44:d8:
                    70:25:bf:25:f8:91:62:72:9c:f0:e9:1e:bf:a2:72:
                    f8:0a:f5:2e:a6:55:0f:54:84:46:69:e5:cd:75:4b:
                    e1:49:12:93:6d:e4:e1:f4:ed:28:ac:90:d0:31:d9:
                    e5:27:be:a3:49:e5:2e:96:97:7c:04:ce:3d:8a:39:
                    3e:58:ea:ff:99:f7:91:3a:5e:9d:f9:9a:06:f9:35:
                    e9:54:14:98:84:1f:bf:f0:cc:04:2e:f8:fb:13:73:
                    5c:17:75:59:32:53:bd:bb:af:3a:6d:19:0e:08:f0:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0B:8B:4A:DB:CD:75:83:67:C6:3B:98:1F:C5:48:58:62:81:95:21
            X509v3 Authority Key Identifier:
                keyid:FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.180.0/23
                  103.56.208.0/23
                  192.144.80.0/22
                IPv6:
                  2402:1d40::-2402:1d40:29:ffff:ffff:ffff:ffff:ffff
                  2402:1d40:1000::/47
                  2402:1d40:2000::/47
                  2402:1d40:3000::/46
                  2402:1d40:4000::/46
                  2402:1d40:5000::-2402:1d40:5004:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         63:c2:e5:e7:89:a4:29:c2:7e:62:f6:36:5d:09:5a:07:44:52:
         b5:84:fd:d8:8f:32:19:b3:56:2b:ea:82:75:05:bb:f6:65:e5:
         3a:1d:16:30:37:18:8e:c6:7d:1b:31:06:c4:c5:1d:53:ea:80:
         e4:27:56:1c:d9:c6:5a:9f:d0:20:5c:0f:0f:5e:27:74:f6:80:
         c1:76:7b:f0:5a:94:13:54:46:2a:b0:12:bd:9f:b8:63:de:bd:
         a1:2a:68:6a:e3:3e:f9:83:84:ed:5e:00:22:9a:fe:23:5d:fd:
         5b:bc:5c:d8:3a:5d:46:92:ee:41:00:76:4f:37:d8:e7:ba:b1:
         a2:34:f3:00:6b:5b:e3:26:db:a0:e6:c5:4a:49:eb:b0:7e:05:
         65:f9:fb:b6:f7:94:ee:76:88:6e:7f:0e:17:92:07:d6:34:b7:
         cd:32:0c:a1:e7:61:38:61:1b:14:67:fe:95:71:f3:46:ca:a5:
         d7:8a:54:fd:90:ec:38:9e:36:4d:5f:1c:10:34:ee:20:9c:ce:
         e4:94:bc:17:1c:81:9b:87:bb:5b:ec:1d:b4:a6:df:4a:af:8f:
         4c:d5:a0:d1:15:d4:9d:a7:87:67:3d:47:b8:92:ab:e6:cb:43:
         46:aa:a6:fa:c3:4f:56:5d:f5:74:d6:93:a1:cc:aa:e9:d5:1b:
         5d:5b:36:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:54:49 2025 by rpki-client