This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/99551366132E11F0B588DB49C4F9AE02.roa
File:                     99551366132E11F0B588DB49C4F9AE02.roa (raw, json)
Hash identifier:          ChslEov62Qa1I3Lz18znObEUFcN2HJhfNEJB+3L6dvA=
Subject key identifier:   E9:90:70:36:55:31:23:64:B1:A8:25:6E:C8:9D:6C:E7:86:2C:D1:B8
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       0804
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/99551366132E11F0B588DB49C4F9AE02.roa
Signing time:             Mon 08 Dec 2025 20:32:03 +0000
ROA not before:           Mon 08 Dec 2025 20:32:03 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     141234
IP address blocks:        103.156.244.0/24 maxlen: 24
                          103.156.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
                          rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 20:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2052 (0x804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: Dec  8 20:32:03 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=693735c3-90e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:d4:68:a8:93:c9:ba:da:94:1a:ce:69:97:
                    09:ff:ce:33:b9:da:ed:a6:91:5b:09:c8:42:e9:61:
                    92:71:19:ac:07:a3:42:2d:9e:58:61:25:70:b5:22:
                    87:92:a9:46:b0:29:d0:1a:57:e0:ca:be:63:70:32:
                    ba:e2:f5:b9:75:12:c5:b2:cd:70:6c:f5:0e:1a:f1:
                    eb:c2:50:83:69:cb:7b:5f:2c:09:9a:9d:64:02:78:
                    72:97:fa:01:4e:03:e8:c5:46:1b:c6:a1:0e:e2:db:
                    ec:5a:45:bb:e2:18:0c:f3:01:7a:8a:2c:9a:1c:4b:
                    1f:9e:c4:44:ff:35:81:b7:49:b1:6e:05:c5:2d:e1:
                    58:1f:4a:01:8e:66:df:e4:00:17:f9:9e:82:12:f9:
                    76:60:68:a8:0f:d4:3d:42:90:fc:bd:5a:36:51:44:
                    ee:1d:6c:a8:40:f7:d1:b5:b6:70:b2:28:9e:46:46:
                    5f:b2:81:87:9d:3a:14:a6:03:85:2b:07:7b:c3:14:
                    e1:38:56:62:d8:18:b0:b9:e3:f1:03:d3:1f:b8:13:
                    e9:a5:7d:2f:af:0b:87:56:3c:44:ac:a9:c0:d0:ed:
                    b6:02:ae:a0:3d:12:4c:f9:78:dd:eb:e0:c3:24:0a:
                    f5:c8:6e:b9:c4:14:51:5d:d4:9a:d6:86:72:43:6d:
                    d4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:90:70:36:55:31:23:64:B1:A8:25:6E:C8:9D:6C:E7:86:2C:D1:B8
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/99551366132E11F0B588DB49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:3a:c3:9d:da:a8:2e:24:ff:70:f9:5d:a1:02:8e:0b:c2:ed:
         5f:86:0d:b8:7c:ff:98:a8:bb:69:b1:23:cb:0a:fc:42:83:f4:
         8a:d3:66:98:2e:c5:d7:59:7d:ea:a1:2b:ef:4f:bf:73:b4:da:
         cc:73:c4:5d:5b:54:9f:10:09:20:16:6f:2a:99:0e:38:ba:24:
         cc:95:9f:1b:b6:23:77:14:b2:02:45:ea:6d:f6:90:20:43:19:
         4a:61:66:3f:80:6b:17:d7:6a:7b:b7:58:ce:4c:5b:02:eb:f9:
         4a:f1:f8:eb:0f:7a:01:50:8d:5a:d0:76:0a:50:10:1a:b5:ff:
         db:ec:e5:6c:20:81:fb:da:57:46:b6:1a:28:94:4f:de:d3:07:
         f1:7c:03:de:db:6c:22:48:4a:f6:e4:dd:fa:66:32:f1:c6:7e:
         06:b9:fb:b2:03:1b:ba:7f:07:55:8e:19:6d:89:83:22:4a:07:
         e3:93:18:6a:cb:ac:aa:ae:93:1a:4e:d0:c3:67:8c:d0:05:ff:
         69:4a:a7:8d:ad:02:ca:80:ef:62:5b:ae:77:cc:d3:31:9e:6f:
         bf:58:7e:ad:76:66:6d:5b:d3:2f:b9:bb:03:5d:37:ef:60:4c:
         d3:e3:26:66:71:07:6b:7e:35:00:23:c4:6d:67:4e:2f:04:f4:
         b4:3c:29:e6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgwN0UxMTAvBgNVBAUTKDcwQTQ1Q0NDMDU5M0M0NzEyMzYzNTA1QTBBNjRERDNC
NzM1NzZFOEEwHhcNMjUxMjA4MjAzMjAzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTM3MzVjMy05MGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy+XUaKiTybralBrOaZcJ/84zudrtppFbCchC6WGScRmsB6NCLZ5YYSVwtSKH
kqlGsCnQGlfgyr5jcDK64vW5dRLFss1wbPUOGvHrwlCDact7XywJmp1kAnhyl/oB
TgPoxUYbxqEO4tvsWkW74hgM8wF6iiyaHEsfnsRE/zWBt0mxbgXFLeFYH0oBjmbf
5AAX+Z6CEvl2YGioD9Q9QpD8vVo2UUTuHWyoQPfRtbZwsiieRkZfsoGHnToUpgOF
Kwd7wxThOFZi2BiwuePxA9MfuBPppX0vrwuHVjxErKnA0O22Aq6gPRJM+Xjd6+DD
JAr1yG65xBRRXdSa1oZyQ23UnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOmQcDZV
MSNksaglbsidbOeGLNG4MB8GA1UdIwQYMBaAFHCkXMwFk8RxI2NQWgpk3TtzV26K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODA3RS9DNEI0RTJDNjE3
OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhIRWpZMUJhQ21UZE8zTlhi
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NLUmN6QVdUeEhFalkxQmFDbVRkTzNOWGJvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTgwN0UvQzRCNEUyQzYxNzkyMTFFQjkwQkZBMDg0QzRGOUFFMDIvOTk1NTEzNjYx
MzJFMTFGMEI1ODhEQjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnnPQwDQYJKoZIhvcNAQELBQADggEBACE6w53aqC4k/3D5
XaECjgvC7V+GDbh8/5iou2mxI8sK/EKD9IrTZpguxddZfeqhK+9Pv3O02sxzxF1b
VJ8QCSAWbyqZDji6JMyVnxu2I3cUsgJF6m32kCBDGUphZj+AaxfXanu3WM5MWwLr
+Urx+OsPegFQjVrQdgpQEBq1/9vs5WwggfvaV0a2GiiUT97TB/F8A97bbCJISvbk
3fpmMvHGfga5+7IDG7p/B1WOGW2JgyJKB+OTGGrLrKqukxpO0MNnjNAF/2lKp42t
AsqA72JbrnfM0zGeb79Yfq12Zm1b0y+5uwNdN+9gTNPjJmZxB2t+NQAjxG1nTi8E
9LQ8KeY=
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:45:13 2025 by rpki-client