This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/F5089566D57F11F0A4C3FF52C4F9AE02.roa
File:                     F5089566D57F11F0A4C3FF52C4F9AE02.roa (raw, json)
Hash identifier:          hBZhwYqI4BbJ2uD7fXaf33uSY1cj5kmeUotdnskELFM=
Subject key identifier:   93:E0:52:6F:F7:C0:08:C9:EC:91:39:1F:1C:E4:65:5D:63:5F:E6:83
Certificate issuer:       /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial:       08CA
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/F5089566D57F11F0A4C3FF52C4F9AE02.roa
Signing time:             Wed 10 Dec 2025 04:23:20 +0000
ROA not before:           Wed 10 Dec 2025 04:23:20 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154408
IP address blocks:        103.72.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
                          rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250 (0x8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
        Validity
            Not Before: Dec 10 04:23:20 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6938f5b7-827e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:3b:da:50:13:25:69:11:a9:38:56:ab:c0:
                    9b:cf:ab:a1:25:f8:c9:ea:9a:4c:bd:52:f2:6a:20:
                    2a:ef:3e:04:97:75:fd:d3:a5:e7:a1:ff:85:a5:85:
                    e4:bf:a1:4d:2b:c3:e9:a7:f2:e9:7c:20:1b:44:c4:
                    64:b5:03:8c:e8:ab:24:f7:d6:55:2f:d8:50:8f:97:
                    9f:1a:b7:1b:34:a9:e5:31:f7:a7:fb:98:cf:00:49:
                    2f:65:dd:b0:5e:ef:bb:5a:ad:56:23:c3:7c:e3:4c:
                    51:38:78:7a:3e:db:2b:62:e9:50:d4:15:cf:08:a3:
                    57:56:86:d4:dd:69:e6:b2:03:37:3a:1e:54:34:1c:
                    00:7f:30:35:d6:4f:3a:57:8b:ff:f2:bf:5f:52:0d:
                    cc:33:ee:a0:88:ac:35:8e:86:ab:e9:b6:d5:9b:17:
                    b0:68:94:4c:86:58:cf:90:0a:d7:6e:46:da:0a:5d:
                    3c:6c:f7:11:9a:bf:f2:49:14:7b:df:46:f9:c1:4f:
                    6b:59:9d:ea:d3:78:1b:da:58:ae:ff:ad:7c:a6:bf:
                    58:97:94:8a:d4:30:7a:bd:c9:c7:16:b3:2b:33:e3:
                    96:be:e6:67:ba:e9:8d:bc:e3:3b:17:06:77:cf:db:
                    a5:b1:e6:9f:9a:13:8a:71:a1:44:ea:11:af:b8:59:
                    75:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E0:52:6F:F7:C0:08:C9:EC:91:39:1F:1C:E4:65:5D:63:5F:E6:83
            X509v3 Authority Key Identifier:
                keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/F5089566D57F11F0A4C3FF52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:5e:5f:55:73:f1:69:cd:6e:6b:70:c8:52:c4:c1:0c:9a:ad:
         4b:2d:f1:f9:2b:71:39:4b:dd:3d:32:a8:60:db:76:40:91:61:
         ba:56:e7:f0:6b:83:d8:55:aa:44:11:c4:04:81:ad:ff:56:60:
         19:2b:b3:81:12:a5:f2:fb:16:4b:41:6a:b8:f0:27:d7:a3:4b:
         f1:d6:89:e2:94:a2:99:41:fd:5e:6a:f7:b1:4a:20:51:0f:89:
         67:dd:57:c0:c5:86:51:e5:08:e6:5a:ba:d1:91:1f:eb:7c:f0:
         4d:38:0c:25:b0:f9:5a:e2:36:4e:26:4d:53:5e:aa:b9:9e:fe:
         71:f2:09:8b:75:f4:2f:b9:f7:00:6d:21:b6:20:34:ce:4b:c1:
         e8:d5:1f:16:af:7b:fe:29:a1:87:0c:ea:8a:97:5b:0d:f7:d1:
         e6:15:f2:9e:a1:c7:66:aa:b8:4f:6e:fd:21:5b:a9:0f:c0:f4:
         16:07:a1:38:8a:18:9c:e9:c2:af:7a:23:ee:99:4a:b8:e4:d5:
         dd:10:3f:f2:a1:21:c1:1b:06:d1:26:7c:d8:aa:96:37:d9:89:
         51:10:f1:7c:d1:49:26:69:56:86:a9:07:d6:83:a0:41:7d:2b:
         38:26:27:59:a8:ee:3b:ad:8c:54:1e:21:ae:a7:1b:94:16:39:
         cc:18:ad:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:49:48 2025 by rpki-client