This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/11446DBE5B2711F099D02552C4F9AE02.roa
File:                     11446DBE5B2711F099D02552C4F9AE02.roa (raw, json)
Hash identifier:          BoJyjxigFLGu5YRz5/vCzJ9ICgVocwtUOFiWeZEgPks=
Subject key identifier:   10:8D:8C:A7:85:F8:25:3C:32:65:BC:65:2F:0B:02:06:E3:E3:4E:58
Certificate issuer:       /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial:       081F
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/11446DBE5B2711F099D02552C4F9AE02.roa
Signing time:             Wed 10 Dec 2025 20:14:03 +0000
ROA not before:           Wed 10 Dec 2025 20:14:03 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     133448
IP address blocks:        103.229.226.0/24 maxlen: 24
                          103.229.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
                          rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 09:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079 (0x81f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
        Validity
            Not Before: Dec 10 20:14:03 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6939d48b-6adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6c:58:8e:9f:9e:63:ec:31:b1:d2:74:44:95:
                    5d:bd:0c:57:e0:14:2b:0e:83:87:4b:22:c8:dc:84:
                    f9:05:fb:b0:81:85:46:e3:c1:c6:4e:e2:1b:c9:71:
                    11:88:0d:b3:86:3f:95:8a:18:dd:cf:19:3f:48:11:
                    1d:67:d4:2b:4b:c2:ba:73:bc:0d:dd:0c:c4:a2:ff:
                    c5:10:c2:89:7c:c4:22:d1:23:b3:a3:c6:f3:2f:fb:
                    c9:e8:e3:84:bb:79:5f:29:92:15:ba:5c:4d:2a:72:
                    b7:c4:7c:76:ea:d7:6a:49:f4:ff:10:52:42:1f:b1:
                    02:67:fd:96:f2:4e:22:b9:9a:8b:8c:0d:5b:8d:92:
                    58:2b:1a:22:1c:b2:f1:1f:fd:0b:25:7d:36:dd:d7:
                    84:3e:38:59:04:0f:98:bd:1f:59:25:a9:9a:29:93:
                    fc:1f:d5:25:97:5c:c7:f2:44:57:f8:90:3e:02:a6:
                    a5:b6:89:99:51:9a:6c:d8:e5:67:d8:35:3f:31:e9:
                    e4:46:00:e0:2c:df:f3:a2:37:68:21:02:45:d7:57:
                    09:13:82:1e:66:a7:70:aa:3c:27:b3:6a:6c:2a:36:
                    72:43:86:56:ef:ac:27:d1:ef:3e:75:fa:bf:66:e8:
                    17:70:7e:89:bd:b4:bd:5a:bf:fa:eb:ef:bc:a0:58:
                    da:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8D:8C:A7:85:F8:25:3C:32:65:BC:65:2F:0B:02:06:E3:E3:4E:58
            X509v3 Authority Key Identifier:
                keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/11446DBE5B2711F099D02552C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:a5:06:60:dd:87:13:60:02:1f:f0:ef:f9:13:25:e5:ba:8a:
         8a:76:9e:46:4c:82:07:a6:24:07:4d:3e:c1:32:60:ea:dd:a9:
         5b:0b:f4:e8:ae:a0:30:43:24:44:04:1e:4e:91:8a:b8:0d:0a:
         a0:31:a4:f2:ba:2c:aa:ec:3f:2b:1d:af:1e:4e:be:6a:d6:2b:
         51:07:bd:60:0f:5f:f2:65:84:94:4d:af:5c:f5:9b:5b:8e:46:
         4f:aa:e9:09:b7:6a:4b:4d:9b:13:f5:56:b5:c9:75:dd:8c:10:
         5b:7a:03:4d:7f:83:81:c1:4e:55:02:d4:4b:97:9a:c2:a1:53:
         ed:f2:c1:58:a1:5d:85:91:c4:b5:91:8f:96:6b:25:26:57:42:
         c8:85:c3:3b:c1:1d:6d:ef:bd:4d:92:cf:40:6d:95:a7:b2:96:
         1a:11:1d:a7:0a:d4:33:32:11:51:97:10:ae:34:de:76:9c:6d:
         51:8a:c4:1e:4b:5f:b3:98:d4:0e:6f:1c:9b:34:85:e1:8f:38:
         e1:ba:5b:8d:9f:34:6c:54:f4:3a:08:04:7a:19:5c:28:55:71:
         cc:01:e1:7b:4c:a1:e8:0d:e8:47:4a:51:9b:69:7c:27:a5:f5:
         20:05:a3:a3:9c:4d:0b:57:ed:d8:2a:d3:41:22:20:ba:48:18:
         6f:9f:8a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:08:22 2025 by rpki-client