This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
File:                     98657342132E11F0B588DB49C4F9AE02.roa (raw, json)
Hash identifier:          yE5QiFArJSL1Y0Qe8DEzoUlqJzCWh7uwKPdYksWgVL8=
Subject key identifier:   2D:10:24:86:18:66:A2:AB:36:73:1C:01:1C:27:2F:3B:25:04:CA:DA
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       0803
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
Signing time:             Mon 08 Dec 2025 20:32:02 +0000
ROA not before:           Mon 08 Dec 2025 20:32:02 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     141023
IP address blocks:        103.156.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
                          rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 20:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2051 (0x803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: Dec  8 20:32:02 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=693735c2-2ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:65:b1:dd:2f:cd:dd:ea:8b:98:23:a6:76:a0:
                    97:28:ce:bc:ee:0c:bc:b2:05:fe:2f:3f:21:f7:b7:
                    03:12:77:0a:37:86:e3:81:73:9e:81:81:f4:9c:10:
                    81:e8:48:8d:4d:24:46:3f:2f:b9:d9:3b:13:0b:ba:
                    0a:a4:ff:92:8a:d2:6d:a9:9c:dc:e6:15:ca:08:3e:
                    58:36:06:91:e3:7f:1e:92:6b:82:a5:e8:4c:62:dc:
                    15:2a:91:5c:d1:3b:8c:eb:7f:88:e3:f0:b7:bc:33:
                    16:cf:b7:60:00:95:5d:1d:2b:bf:75:01:a4:b6:11:
                    63:59:1d:f1:b8:a3:b6:08:a9:1b:b9:1b:01:b0:cb:
                    88:91:55:61:a3:bc:53:6e:01:5a:e7:c5:19:ef:7f:
                    37:5b:93:f1:6a:f4:88:65:65:f6:31:59:f4:29:b9:
                    e6:52:28:c8:f6:a3:7f:c9:ff:35:1d:60:67:99:80:
                    92:ce:0c:b9:78:4e:ca:69:8e:7d:0a:69:e8:60:07:
                    bf:b6:15:d2:6a:39:bb:22:30:98:53:d0:c2:5c:69:
                    fb:13:a6:49:b6:0a:e8:ab:fe:27:a8:1f:02:33:d6:
                    b6:62:c3:ac:cf:e0:2a:f9:d4:bc:7c:e7:7c:9a:b9:
                    e8:14:4d:51:f7:5e:fd:b3:89:c3:cb:ac:e4:04:90:
                    fa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:10:24:86:18:66:A2:AB:36:73:1C:01:1C:27:2F:3B:25:04:CA:DA
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:37:48:07:fd:a2:e1:99:f1:94:f7:c3:a2:ea:fc:cc:8b:e2:
         78:0c:00:21:6a:75:61:c8:ae:83:c2:85:bf:28:69:18:f7:d7:
         fa:db:cd:20:2c:e7:41:d3:d5:b9:d4:92:9b:a7:07:40:cb:29:
         a8:31:1a:b7:19:36:65:eb:96:3b:20:74:8f:b1:c5:4f:7b:58:
         af:5b:08:7e:0b:9f:7f:31:76:0a:eb:ae:f8:90:c6:63:4c:5b:
         52:8f:c9:6a:88:e4:6f:15:78:d7:3e:1e:df:dc:70:88:30:91:
         8b:cb:e5:9f:4e:72:05:78:08:4d:8e:4f:5a:85:7a:69:d4:be:
         12:68:39:a1:dd:22:68:6d:cd:86:ae:2a:3b:0c:31:2b:44:2a:
         45:ad:dd:e4:4e:b2:24:30:88:de:a4:49:86:70:b3:26:8d:22:
         f7:af:37:2f:96:34:eb:92:5a:1b:d0:65:1f:5f:c9:8e:83:cd:
         a9:4b:b5:71:92:70:7d:86:cf:26:b3:a9:fe:04:3f:ba:32:f0:
         db:d2:b2:7e:cd:bd:ab:79:e7:b8:54:1a:2a:d4:9b:26:7b:4f:
         74:a5:86:ad:ed:8a:02:65:94:46:da:fc:ed:f0:18:76:d6:97:
         bf:84:34:2f:b5:75:42:24:da:67:e5:71:c2:9c:c1:ba:00:98:
         a5:bd:59:26
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgwN0UxMTAvBgNVBAUTKDcwQTQ1Q0NDMDU5M0M0NzEyMzYzNTA1QTBBNjRERDNC
NzM1NzZFOEEwHhcNMjUxMjA4MjAzMjAyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTM3MzVjMi0yYWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAymWx3S/N3eqLmCOmdqCXKM687gy8sgX+Lz8h97cDEncKN4bjgXOegYH0nBCB
6EiNTSRGPy+52TsTC7oKpP+SitJtqZzc5hXKCD5YNgaR438ekmuCpehMYtwVKpFc
0TuM63+I4/C3vDMWz7dgAJVdHSu/dQGkthFjWR3xuKO2CKkbuRsBsMuIkVVho7xT
bgFa58UZ7383W5PxavSIZWX2MVn0KbnmUijI9qN/yf81HWBnmYCSzgy5eE7KaY59
CmnoYAe/thXSajm7IjCYU9DCXGn7E6ZJtgroq/4nqB8CM9a2YsOsz+Aq+dS8fOd8
mrnoFE1R9179s4nDy6zkBJD66wIDAQABo4IClTCCApEwHQYDVR0OBBYEFC0QJIYY
ZqKrNnMcARwnLzslBMraMB8GA1UdIwQYMBaAFHCkXMwFk8RxI2NQWgpk3TtzV26K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODA3RS9DNEI0RTJDNjE3
OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhIRWpZMUJhQ21UZE8zTlhi
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NLUmN6QVdUeEhFalkxQmFDbVRkTzNOWGJvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTgwN0UvQzRCNEUyQzYxNzkyMTFFQjkwQkZBMDg0QzRGOUFFMDIvOTg2NTczNDIx
MzJFMTFGMEI1ODhEQjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnnPUwDQYJKoZIhvcNAQELBQADggEBAHI3SAf9ouGZ8ZT3
w6Lq/MyL4ngMACFqdWHIroPChb8oaRj31/rbzSAs50HT1bnUkpunB0DLKagxGrcZ
NmXrljsgdI+xxU97WK9bCH4Ln38xdgrrrviQxmNMW1KPyWqI5G8VeNc+Ht/ccIgw
kYvL5Z9OcgV4CE2OT1qFemnUvhJoOaHdImhtzYauKjsMMStEKkWt3eROsiQwiN6k
SYZwsyaNIvevNy+WNOuSWhvQZR9fyY6DzalLtXGScH2Gzyazqf4EP7oy8NvSsn7N
vat557hUGirUmyZ7T3Slhq3tigJllEba/O3wGHbWl7+ENC+1dUIk2mflccKcwboA
mKW9WSY=
-----END CERTIFICATE-----
Generated at Sun Dec 21 10:38:16 2025 by rpki-client