This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/EF2EEFEEFE6711EBB771CF1BC4F9AE02.roa
File:                     EF2EEFEEFE6711EBB771CF1BC4F9AE02.roa (raw, json)
Hash identifier:          iLxuZyquXt8RcQHj0uV0XwpQfbXkj20+gLlJ0mrg0MQ=
Subject key identifier:   C7:33:80:A8:8F:26:27:3D:9D:5E:89:5C:3D:EF:99:EF:61:4C:31:DC
Certificate issuer:       /CN=A913F13A/serialNumber=93A4C96D6298169AE055D4EA26682B1072FB9502
Certificate serial:       0C95
Authority key identifier: 93:A4:C9:6D:62:98:16:9A:E0:55:D4:EA:26:68:2B:10:72:FB:95:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/EF2EEFEEFE6711EBB771CF1BC4F9AE02.roa
Signing time:             Tue 16 Dec 2025 19:15:31 +0000
ROA not before:           Tue 16 Dec 2025 19:15:31 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137059
IP address blocks:        103.103.88.0/23 maxlen: 24
                          103.132.185.0/24 maxlen: 24
                          2400:8fa0::/48 maxlen: 48
                          2400:8fa0:1::/48 maxlen: 48
                          2400:8fa0:10::/48 maxlen: 48
                          2400:8fa0:11::/48 maxlen: 48
                          2400:8fa0:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.crl
                          rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 18:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3221 (0xc95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F13A, serialNumber=93A4C96D6298169AE055D4EA26682B1072FB9502
        Validity
            Not Before: Dec 16 19:15:31 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6941afd3-9fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:08:df:c2:99:a0:88:53:a4:60:fd:cb:c7:
                    b5:96:b0:ed:d1:b5:bf:17:39:be:06:43:70:ed:75:
                    6d:bb:58:2a:66:4e:16:5a:48:a9:19:c5:66:63:95:
                    5a:b5:09:18:bc:06:38:5b:36:c3:f6:53:68:86:ba:
                    da:c6:37:2f:9a:be:7a:24:c2:35:de:45:27:72:de:
                    6e:09:f8:e7:12:b8:91:3c:f8:f8:fe:9e:6b:b4:f1:
                    68:17:ce:3c:ca:5e:e2:d1:aa:70:a1:4d:de:42:a6:
                    e0:8f:6a:07:1d:aa:1e:48:e6:e5:9a:80:a3:ab:76:
                    6a:4c:06:be:c5:a2:31:ec:19:59:58:95:1f:69:69:
                    0e:22:98:08:4d:4b:54:e5:fe:83:11:45:30:c9:0d:
                    49:c9:be:76:50:66:b9:69:2d:fd:08:60:af:e2:3b:
                    e7:aa:6c:4b:22:f2:6c:84:6a:8f:aa:05:d9:a8:66:
                    61:a1:66:fd:99:9e:07:bd:d2:b6:4a:84:29:4b:01:
                    63:8d:7d:9c:69:a5:91:6a:9a:d9:ca:e5:ad:14:a6:
                    05:7b:a3:bc:d8:f3:c0:a6:32:4a:6b:7f:c0:65:ff:
                    2e:14:81:46:da:d6:21:55:e3:88:a4:80:9f:81:6b:
                    58:8a:36:1b:69:8a:d5:fb:b5:90:1a:40:0f:39:97:
                    71:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:33:80:A8:8F:26:27:3D:9D:5E:89:5C:3D:EF:99:EF:61:4C:31:DC
            X509v3 Authority Key Identifier:
                keyid:93:A4:C9:6D:62:98:16:9A:E0:55:D4:EA:26:68:2B:10:72:FB:95:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/EF2EEFEEFE6711EBB771CF1BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.88.0/23
                  103.132.185.0/24
                IPv6:
                  2400:8fa0::/47
                  2400:8fa0:10::-2400:8fa0:12:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         c4:08:1e:56:cd:63:14:c8:67:4f:d2:e3:9f:2b:37:48:10:d0:
         47:34:a8:a8:b7:42:7d:4b:38:24:46:15:bf:04:73:a9:d9:65:
         bd:39:ff:15:05:c8:7c:44:4e:39:12:01:d4:15:4c:e3:15:22:
         c7:fc:04:a7:a1:d5:8b:74:02:1c:a7:1e:b3:f3:dd:63:49:b5:
         a7:c9:c9:69:ee:1d:59:e3:9b:5c:3a:7a:ff:6c:0c:04:18:98:
         bb:a2:93:d6:35:d3:39:96:f3:63:fb:5b:63:2b:0d:15:6c:6c:
         df:94:a9:c3:ed:d0:96:de:b3:85:4c:56:f9:00:97:93:cf:2d:
         1b:bb:ca:05:25:cf:c3:66:be:f6:e0:98:8f:22:77:30:7e:7c:
         d6:1b:ce:ac:c3:65:2f:eb:15:89:fc:1d:0e:be:59:63:58:16:
         75:88:84:4e:e9:bb:78:56:94:b4:56:f2:13:9c:f3:d2:d4:4d:
         14:19:ca:b8:fa:a8:5b:10:27:4b:54:01:bc:6b:ab:b8:76:be:
         fe:4d:ab:c6:82:20:d7:56:bc:60:0f:26:76:b7:1e:5e:b6:e7:
         f3:2e:5b:9f:b7:ab:93:6b:ef:92:14:da:44:c4:54:77:66:c5:
         cf:4e:56:29:64:a6:33:6a:c7:e1:7e:0d:fb:8e:2e:46:b5:e0:
         31:02:6c:d1
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YxM0ExMTAvBgNVBAUTKDkzQTRDOTZENjI5ODE2OUFFMDU1RDRFQTI2NjgyQjEw
NzJGQjk1MDIwHhcNMjUxMjE2MTkxNTMxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQxYWZkMy05ZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArLYI38KZoIhTpGD9y8e1lrDt0bW/Fzm+BkNw7XVtu1gqZk4WWkipGcVmY5Va
tQkYvAY4WzbD9lNohrraxjcvmr56JMI13kUnct5uCfjnEriRPPj4/p5rtPFoF848
yl7i0apwoU3eQqbgj2oHHaoeSOblmoCjq3ZqTAa+xaIx7BlZWJUfaWkOIpgITUtU
5f6DEUUwyQ1Jyb52UGa5aS39CGCv4jvnqmxLIvJshGqPqgXZqGZhoWb9mZ4HvdK2
SoQpSwFjjX2caaWRaprZyuWtFKYFe6O82PPApjJKa3/AZf8uFIFG2tYhVeOIpICf
gWtYijYbaYrV+7WQGkAPOZdxawIDAQABo4ICwDCCArwwHQYDVR0OBBYEFMczgKiP
Jic9nV6JXD3vme9hTDHcMB8GA1UdIwQYMBaAFJOkyW1imBaa4FXU6iZoKxBy+5UC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEzQS9GM0U0RDJDRTBD
MUYxMUVBQUZEQUUwMkFDNEY5QUUwMi9rNlRKYldLWUZwcmdWZFRxSm1nckVITDds
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s2VEpiV0tZRnByZ1ZkVHFKbWdyRUhMN2xRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0YxM0EvRjNFNEQyQ0UwQzFGMTFFQUFGREFFMDJBQzRGOUFFMDIvRUYyRUVGRUVG
RTY3MTFFQkI3NzFDRjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E
OzA5MBIEAgABMAwDBAFnZ1gDBABnhLkwIwQCAAIwHQMHASQAj6AAADASAwcEJACP
oAAQAwcAJACPoAASMA0GCSqGSIb3DQEBCwUAA4IBAQDECB5WzWMUyGdP0uOfKzdI
ENBHNKiot0J9SzgkRhW/BHOp2WW9Of8VBch8RE45EgHUFUzjFSLH/ASnodWLdAIc
px6z891jSbWnyclp7h1Z45tcOnr/bAwEGJi7opPWNdM5lvNj+1tjKw0VbGzflKnD
7dCW3rOFTFb5AJeTzy0bu8oFJc/DZr724JiPIncwfnzWG86sw2Uv6xWJ/B0Ovllj
WBZ1iIRO6bt4VpS0VvITnPPS1E0UGcq4+qhbECdLVAG8a6u4dr7+TavGgiDXVrxg
DyZ2tx5etufzLluft6uTa++SFNpExFR3ZsXPTlYpZKYzasfhfg37ji5GteAxAmzR
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:25:49 2025 by rpki-client