This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/560C8B5ED75811F0AE10201E71D3641D.roa
File:                     560C8B5ED75811F0AE10201E71D3641D.roa (raw, json)
Hash identifier:          QWzXJVN/FAjVDLxBUaoHzGpzqouCbkMg7XE2fsMyww8=
Subject key identifier:   1E:87:D8:84:3D:05:34:F6:6A:8F:7A:8A:1C:19:05:B6:FB:34:13:81
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3A1B
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/560C8B5ED75811F0AE10201E71D3641D.roa
Signing time:             Tue 16 Dec 2025 06:12:16 +0000
ROA not before:           Tue 16 Dec 2025 06:12:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        111.88.96.0/19 maxlen: 24
                          111.88.132.0/23 maxlen: 24
                          111.88.168.0/24 maxlen: 24
                          111.88.169.0/24 maxlen: 24
                          111.88.224.0/21 maxlen: 24
                          115.186.44.0/23 maxlen: 23
                          115.186.46.0/24 maxlen: 24
                          115.186.52.0/22 maxlen: 24
                          115.186.104.0/24 maxlen: 24
                          203.81.224.0/22 maxlen: 24
                          203.81.228.0/24 maxlen: 24
                          203.81.229.0/24 maxlen: 24
                          203.81.231.0/24 maxlen: 24
                          203.81.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14875 (0x3a1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Dec 16 06:12:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6940f840-449f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:00:0e:7a:c0:6d:f4:fe:3b:92:d3:72:d8:
                    3c:df:79:63:81:99:73:6b:83:cc:76:71:4e:9c:19:
                    61:33:65:e0:33:a2:75:80:97:5f:5f:34:e6:a1:a8:
                    55:e1:dd:5b:42:02:89:48:69:32:7d:46:41:df:5a:
                    f1:c0:de:f1:96:96:d8:12:87:24:c3:ea:67:b3:45:
                    13:16:10:53:f3:0d:a3:25:01:5d:b3:a2:ad:26:a4:
                    17:65:50:74:4b:18:2c:72:c4:91:78:86:0f:3d:2c:
                    31:cb:e5:4a:5e:3e:83:f6:55:67:37:f9:78:e1:e1:
                    aa:58:8e:46:c4:f8:f3:a0:27:d8:8f:30:0f:44:b8:
                    ce:da:d9:49:cf:4b:7a:75:eb:96:9c:41:ae:18:a8:
                    7c:70:d8:cf:a0:b6:28:0b:c1:a6:4f:a0:42:2a:35:
                    20:8a:51:82:db:01:97:65:7b:40:58:40:de:5b:25:
                    2a:18:b4:b5:85:29:90:24:3f:22:aa:0e:02:0f:9e:
                    b3:8d:0a:f1:e2:b6:b9:41:63:b5:38:5c:3a:8e:ef:
                    04:a1:e0:9a:09:17:6c:2b:f8:4f:d4:4e:19:f4:6d:
                    e9:97:6d:56:76:68:93:5b:22:fd:2c:22:3c:54:60:
                    a1:28:95:e9:e5:45:7f:5d:c3:0b:7e:83:ca:6a:52:
                    ec:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:87:D8:84:3D:05:34:F6:6A:8F:7A:8A:1C:19:05:B6:FB:34:13:81
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/560C8B5ED75811F0AE10201E71D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.88.96.0/19
                  111.88.132.0/23
                  111.88.168.0/23
                  111.88.224.0/21
                  115.186.44.0-115.186.46.255
                  115.186.52.0/22
                  115.186.104.0/24
                  203.81.224.0-203.81.229.255
                  203.81.231.0/24
                  203.81.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:4c:d2:62:eb:28:06:87:90:83:a4:94:52:8b:03:33:6d:6c:
         6b:02:6c:5c:86:af:2e:da:71:a2:ec:68:05:c7:0b:07:08:50:
         82:b9:f1:e1:6a:d5:73:ae:fc:c9:58:2b:5d:d6:4a:1b:b5:fe:
         f9:2f:e5:2f:da:19:fa:4e:fd:01:99:6f:8a:e2:aa:7b:d3:40:
         b4:28:f5:b4:1a:8a:ad:60:b6:36:ff:15:2b:89:4c:f8:c7:b9:
         cf:1e:6e:72:07:d5:44:5e:c5:a7:de:b1:0f:d0:89:95:c5:71:
         b9:36:58:ac:80:c7:71:e3:75:94:e6:f7:c3:e1:09:bf:39:d1:
         42:be:d4:c0:76:2e:10:6b:b7:a5:20:73:a1:33:44:11:b5:91:
         57:b6:12:d0:d6:f9:0a:8f:9d:07:bd:f2:93:e7:36:53:03:58:
         1e:6f:f8:df:59:e7:fe:7f:d0:1f:98:5e:1d:b2:91:33:5f:fc:
         86:6a:bd:85:fa:1e:d1:3c:0a:98:b9:55:ae:98:04:a8:9b:8d:
         fc:85:ef:b7:43:50:97:9b:97:ef:84:6d:e8:81:98:67:a3:10:
         00:eb:e2:de:e8:03:ec:55:78:25:ed:43:60:ed:9f:f3:a1:00:
         a2:85:8d:66:9d:59:43:a4:95:88:03:e6:05:ba:60:ab:48:87:
         7e:b1:f2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:03:25 2025 by rpki-client