This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/9888A21221DA11EBAA441F75C4F9AE02.roa
File:                     9888A21221DA11EBAA441F75C4F9AE02.roa (raw, json)
Hash identifier:          CiplbP69nLWhaIJnxbxQlD1qt7Ne1cRHDlbujv/TJdo=
Subject key identifier:   36:F5:1F:5F:AB:76:84:85:84:43:8E:A8:CE:18:F7:D2:65:D3:C6:25
Certificate issuer:       /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Certificate serial:       0CA8
Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/9888A21221DA11EBAA441F75C4F9AE02.roa
Signing time:             Wed 31 Dec 2025 18:16:14 +0000
ROA not before:           Wed 31 Dec 2025 18:16:14 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     18013
IP address blocks:        103.145.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
                          rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 18:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3240 (0xca8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
        Validity
            Not Before: Dec 31 18:16:14 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6955686e-ba1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5a:b5:7e:7a:31:f2:51:bd:2f:a4:17:32:59:
                    ab:1c:7d:85:26:02:a8:8b:c6:32:b7:f3:b4:16:3b:
                    f0:39:41:4f:52:9f:5a:a1:b2:94:3a:55:3c:94:bc:
                    f6:e1:39:47:37:ab:8a:2f:2a:fe:d4:23:7e:cf:5f:
                    ae:be:4f:2a:3a:11:18:4b:68:a7:d3:c0:4f:aa:8b:
                    fb:16:e9:aa:df:5c:ee:9e:47:90:79:b8:e0:4e:c8:
                    f8:88:fd:25:3f:f8:5a:d3:c2:99:76:a1:4e:7f:c6:
                    95:33:c1:57:77:8e:b3:57:a1:be:12:fc:f2:45:9e:
                    d8:89:69:65:3d:72:45:17:b3:c4:f4:c5:29:6f:3f:
                    e7:d4:16:ae:2c:3e:36:8b:b0:cf:f3:66:3d:6f:0a:
                    f9:fd:1f:57:e8:3f:c9:d8:65:3b:03:1c:6b:a1:61:
                    79:1a:b8:29:37:87:9b:62:a7:ea:1d:f3:a5:a4:91:
                    2f:24:fa:28:5e:c0:0d:31:63:08:d1:4c:47:74:e6:
                    4d:7b:b4:1a:3e:a7:12:f5:74:2d:65:aa:bf:59:d2:
                    18:1b:65:d9:4e:30:90:3c:47:54:f9:d6:e8:98:6c:
                    81:2f:d1:01:25:0c:18:af:b8:46:c3:cc:e3:39:35:
                    ff:bd:db:45:10:c9:03:f3:c4:b6:db:89:7f:72:d0:
                    0b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F5:1F:5F:AB:76:84:85:84:43:8E:A8:CE:18:F7:D2:65:D3:C6:25
            X509v3 Authority Key Identifier:
                keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/9888A21221DA11EBAA441F75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:ef:26:ae:42:02:39:a3:d8:22:0d:e8:54:f7:8c:35:d0:29:
         e3:ab:ec:3b:0c:f6:50:04:41:ea:d4:fc:64:0c:05:ab:44:8a:
         c0:df:45:83:14:b5:10:8e:3b:33:a7:43:1f:16:42:e4:48:1a:
         d0:eb:0a:ac:ed:90:52:64:f1:7d:7a:f2:07:08:16:3b:8e:06:
         b7:0d:f8:1c:33:d9:b4:fa:9f:b0:f5:8a:93:22:45:94:59:83:
         db:3e:46:38:c0:b8:6d:c1:71:a0:55:ec:bd:91:97:3c:4e:7c:
         b4:4d:a5:9b:fc:7b:c7:0d:5b:4b:e2:53:92:b5:99:f2:75:b4:
         00:67:a2:c2:4b:b0:1b:9d:6b:af:37:f5:3e:f7:5d:be:a6:cb:
         85:62:87:74:b4:f7:db:9b:b5:f3:59:65:5e:73:85:f9:50:7c:
         d9:7e:08:e0:f8:01:54:ca:ad:7a:01:7b:db:5d:0c:1c:29:e8:
         b6:f7:a6:88:a2:9a:c5:9a:e0:de:81:89:23:0d:a0:46:22:be:
         f8:d0:fd:0d:9c:09:58:26:27:96:1e:d2:7d:99:97:ed:ab:a4:
         30:fc:a3:c8:bd:39:40:3f:5c:38:18:ec:30:fd:ee:1e:ac:e5:
         38:01:b6:17:36:3c:84:5d:ca:e1:30:61:97:6d:56:2d:51:86:
         28:7f:7a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 14:44:23 2026 by rpki-client