This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/13BC244C61A311F0A6E3910CC4F9AE02.roa
File:                     13BC244C61A311F0A6E3910CC4F9AE02.roa (raw, json)
Hash identifier:          cmIsiXCeMh5FUiNImxM9ojuFd48TEH6riW+prVWP34U=
Subject key identifier:   23:B7:27:3F:A6:65:A4:A8:26:94:D0:36:05:4A:55:0F:D4:DD:F9:00
Certificate issuer:       /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Certificate serial:       0250
Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/13BC244C61A311F0A6E3910CC4F9AE02.roa
Signing time:             Sat 13 Dec 2025 01:21:25 +0000
ROA not before:           Sat 13 Dec 2025 01:21:25 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150661
IP address blocks:        103.48.162.0/23 maxlen: 23
                          103.48.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
                          rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
        Validity
            Not Before: Dec 13 01:21:25 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=693cbf95-7584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:5e:7e:eb:3c:18:71:bf:e1:a8:81:40:a1:
                    18:3b:af:bb:f9:18:12:62:22:28:af:23:17:c8:b8:
                    58:88:75:19:7d:51:93:7f:fc:9a:c5:dc:a1:a1:df:
                    9f:66:2d:b1:79:f4:13:ed:da:16:54:85:fb:70:f0:
                    d1:a8:db:a4:ec:15:97:4e:f2:8a:1f:e4:9b:8c:f3:
                    91:49:5e:7f:96:b3:27:bd:bf:57:b5:d4:c0:af:44:
                    7e:f3:0d:19:46:dc:0c:da:ce:d6:08:49:2a:aa:b1:
                    bc:26:9c:eb:87:26:b8:6e:d2:ab:77:36:f7:9c:8c:
                    e0:ef:11:bd:83:1d:45:81:65:19:84:93:3b:0a:2f:
                    f4:d9:2e:58:19:4f:bb:78:7f:77:39:ca:f0:92:21:
                    5a:f7:3b:04:49:27:5f:fd:4a:cb:50:4d:f7:22:5a:
                    a4:11:2c:c9:44:61:a0:af:9b:69:bf:02:71:e2:77:
                    92:4c:4e:cb:14:4f:36:fa:5d:e3:43:65:df:0c:ee:
                    06:1b:73:f3:34:f2:ff:63:3c:d3:61:5d:a2:c8:56:
                    70:6a:e7:b3:2d:5d:9f:2a:53:b1:3b:c2:53:d8:1b:
                    c3:d0:b2:0e:10:ae:46:7a:38:79:7d:69:6f:dc:af:
                    3c:65:a4:3b:eb:4e:33:71:31:d4:57:fa:bf:a2:24:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B7:27:3F:A6:65:A4:A8:26:94:D0:36:05:4A:55:0F:D4:DD:F9:00
            X509v3 Authority Key Identifier:
                keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/13BC244C61A311F0A6E3910CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:57:78:a3:37:dc:08:91:dc:4e:35:df:1c:88:db:ac:57:43:
         36:95:86:ce:50:c8:fe:a6:f9:5e:0d:a9:26:92:9c:03:28:a1:
         f2:1d:f4:a7:ce:1f:3e:2d:64:4d:d3:de:1a:04:f8:9e:ab:a6:
         c7:0f:2d:97:c6:ac:10:d7:3a:a3:c9:80:e2:3b:ff:6f:ef:35:
         d0:4e:a6:74:8b:84:02:d8:32:54:28:d9:a0:e2:2a:fc:e5:c7:
         53:47:d8:fb:76:8d:86:ba:1a:40:89:cc:01:e5:25:2c:64:71:
         98:98:50:8d:87:b4:59:04:d1:0f:c3:9f:f7:d9:61:bf:bf:e6:
         b4:f2:9f:c5:7e:3d:3f:a6:39:cf:5c:07:82:00:3c:2f:ee:20:
         71:34:a9:6b:32:f3:c6:45:a6:73:34:2c:7a:3c:a3:30:59:14:
         29:d6:12:52:7a:7f:db:bc:43:66:fa:db:a2:bb:a4:0a:41:81:
         ec:23:95:5b:7c:84:0f:88:90:bd:30:a3:b8:75:da:3a:d4:55:
         7e:55:7a:e1:0b:53:9e:b1:89:22:5c:b5:61:26:17:1c:a2:61:
         89:10:06:0d:4a:34:51:ed:3d:ee:8a:d9:66:8e:2d:57:27:f4:
         60:f4:3d:d7:e4:92:8e:0a:11:6c:1b:2a:f3:c2:a6:d5:bc:95:
         09:68:cc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:50:54 2025 by rpki-client