This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/FC03153ADBDD11F0AA14A9C858641951.roa
File:                     FC03153ADBDD11F0AA14A9C858641951.roa (raw, json)
Hash identifier:          2ObjOZ1YyUBkTC8vQFB/t8Q/pgar6Imnt7CP85pUwOo=
Subject key identifier:   5E:2B:4A:4E:AD:A3:DF:BA:55:81:E6:08:D4:DF:93:0C:95:DB:5A:76
Certificate issuer:       /CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
Certificate serial:       0598
Authority key identifier: 9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/FC03153ADBDD11F0AA14A9C858641951.roa
Signing time:             Thu 18 Dec 2025 12:33:32 +0000
ROA not before:           Thu 18 Dec 2025 12:33:32 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     138926
IP address blocks:        103.170.178.0/24 maxlen: 24
                          103.170.179.0/24 maxlen: 24
                          2402:41a0::/32 maxlen: 32
                          2402:41a0::/48 maxlen: 48
                          2402:41a0:170::/48 maxlen: 48
                          2402:41a0:171::/48 maxlen: 48
                          2402:41a0:172::/48 maxlen: 48
                          2402:41a0:173::/48 maxlen: 48
                          2402:41a0:174::/48 maxlen: 48
                          2402:41a0:175::/48 maxlen: 48
                          2402:41a0:176::/48 maxlen: 48
                          2402:41a0:177::/48 maxlen: 48
                          2402:41a0:178::/48 maxlen: 48
                          2402:41a0:179::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl
                          rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1432 (0x598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EFAB, serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
        Validity
            Not Before: Dec 18 12:33:32 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6943f49c-53a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:fc:30:c3:0b:03:28:28:ac:ca:2d:05:ed:
                    55:d1:f0:68:25:6e:00:90:5b:33:64:e1:e4:0d:c3:
                    fd:47:7e:45:79:c8:cf:2b:1c:20:b6:71:97:da:4a:
                    c4:36:d7:28:67:7a:28:d5:51:f7:ec:54:67:6a:44:
                    6c:b1:58:97:fd:77:29:fb:a0:09:e6:2f:6e:09:81:
                    ab:bc:a0:5e:6e:7d:da:e3:ad:d3:4b:82:be:32:a8:
                    fc:70:9d:fd:f2:6c:b7:30:37:c0:81:ff:fd:3c:e9:
                    b9:be:d6:51:01:77:17:51:12:8a:fa:1e:d0:6b:93:
                    58:4d:9f:2c:48:16:2f:4d:8b:58:d1:01:70:17:bf:
                    aa:37:2d:e7:cb:8b:2a:16:a5:a6:c6:80:61:40:16:
                    70:a3:12:ea:09:79:10:51:55:dd:15:9c:bd:31:57:
                    2f:ff:f2:f5:b7:bd:d0:ba:63:70:5a:29:4a:86:02:
                    57:2e:ba:55:c3:2b:fb:c4:2a:81:93:1c:26:a6:da:
                    ed:2f:21:13:bd:c3:0e:54:40:e0:84:aa:6f:f8:92:
                    d8:d3:1f:9e:ef:9d:31:2a:cf:1d:69:29:8a:4a:f2:
                    f8:aa:06:55:47:d1:48:9a:3a:89:14:67:7c:fb:d2:
                    73:31:6d:00:cf:3d:73:f8:28:f7:da:df:64:97:13:
                    12:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2B:4A:4E:AD:A3:DF:BA:55:81:E6:08:D4:DF:93:0C:95:DB:5A:76
            X509v3 Authority Key Identifier:
                keyid:9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/FC03153ADBDD11F0AA14A9C858641951.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.178.0/23
                IPv6:
                  2402:41a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:c0:97:5d:2e:3f:af:ef:9e:18:44:d8:cd:ac:74:c8:b2:3a:
         b7:c1:9e:6d:30:5e:2c:14:fe:c4:12:21:f1:2e:f5:4a:14:a7:
         88:8c:76:ef:1c:bd:23:6b:1a:bf:dc:fb:3e:a2:81:0b:a7:70:
         c1:26:19:8b:2c:39:89:23:ae:58:06:aa:3c:3d:b8:9a:21:2e:
         28:01:e7:b3:b8:f2:ac:14:a7:b4:02:22:52:d4:ce:97:7a:bc:
         d9:7d:2d:c4:be:32:8f:6a:0d:9e:b2:39:18:23:bd:40:fa:ca:
         51:06:af:45:31:95:84:d3:ea:ea:bc:87:23:9d:29:5f:7a:7b:
         bf:d5:25:af:8b:22:e7:b3:34:da:8b:bf:48:26:64:c2:47:b3:
         f3:38:8f:fc:44:1c:9c:fc:b2:c3:42:46:65:7b:a5:8c:c2:87:
         74:03:56:3b:3f:5c:7d:59:40:a1:62:a6:4a:39:40:82:c9:3e:
         38:79:e3:a4:71:c7:57:f3:5c:f1:4c:9a:cf:fa:f7:85:cc:8f:
         ce:f6:95:bb:d3:4f:c4:80:60:1e:79:c0:f5:9a:02:01:17:02:
         30:a7:0f:33:dd:15:82:36:85:6f:e8:de:3e:08:1b:fa:ce:d0:
         69:0d:38:d4:e3:54:ce:a5:f4:75:7b:d9:79:ad:cc:89:c5:1e:
         b9:97:66:27
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
M0VGQUIxMTAvBgNVBAUTKDlGMkJGRDdEODAwQ0ZBMTNFOTA0OEFFMTAwQjQ4NTE0
MzAxMjZGRDMwHhcNMjUxMjE4MTIzMzMyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQzZjQ5Yy01M2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuhT8MMMLAygorMotBe1V0fBoJW4AkFszZOHkDcP9R35FecjPKxwgtnGX2krE
NtcoZ3oo1VH37FRnakRssViX/Xcp+6AJ5i9uCYGrvKBebn3a463TS4K+Mqj8cJ39
8my3MDfAgf/9POm5vtZRAXcXURKK+h7Qa5NYTZ8sSBYvTYtY0QFwF7+qNy3ny4sq
FqWmxoBhQBZwoxLqCXkQUVXdFZy9MVcv//L1t73QumNwWilKhgJXLrpVwyv7xCqB
kxwmptrtLyETvcMOVEDghKpv+JLY0x+e750xKs8daSmKSvL4qgZVR9FImjqJFGd8
+9JzMW0Azz1z+Cj32t9klxMSLwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFF4rSk6t
o9+6VYHmCNTfkwyV21p2MB8GA1UdIwQYMBaAFJ8r/X2ADPoT6QSK4QC0hRQwEm/T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUZBQi9FODJEMDZGRTA1
NzQxMUVDQTI0MkM1N0ZDNEY5QUUwMi9ueXY5ZllBTS1oUHBCSXJoQUxTRkZEQVNi
OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL255djlmWUFNLWhQcEJJcmhBTFNGRkRBU2I5TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0VGQUIvRTgyRDA2RkUwNTc0MTFFQ0EyNDJDNTdGQzRGOUFFMDIvRkMwMzE1M0FE
QkREMTFGMEFBMTRBOUM4NTg2NDE5NTEucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnqrIwDQQCAAIwBwMFACQCQaAwDQYJKoZIhvcNAQELBQAD
ggEBAKbAl10uP6/vnhhE2M2sdMiyOrfBnm0wXiwU/sQSIfEu9UoUp4iMdu8cvSNr
Gr/c+z6igQuncMEmGYssOYkjrlgGqjw9uJohLigB57O48qwUp7QCIlLUzpd6vNl9
LcS+Mo9qDZ6yORgjvUD6ylEGr0UxlYTT6uq8hyOdKV96e7/VJa+LIuezNNqLv0gm
ZMJHs/M4j/xEHJz8ssNCRmV7pYzCh3QDVjs/XH1ZQKFipko5QILJPjh546Rxx1fz
XPFMms/694XMj872lbvTT8SAYB55wPWaAgEXAjCnDzPdFYI2hW/o3j4IG/rO0GkN
ONTjVM6l9HV72XmtzInFHrmXZic=
-----END CERTIFICATE-----
Generated at Sat Dec 20 01:38:25 2025 by rpki-client