This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/405A719A173B11ECA6FAAE38C4F9AE02.roa
File:                     405A719A173B11ECA6FAAE38C4F9AE02.roa (raw, json)
Hash identifier:          FK+by3aFMqH0WrpOslTcoM2oisYwnityUAIvz0cZwTc=
Subject key identifier:   B7:15:7D:33:63:5E:F5:71:82:50:94:6B:59:4B:0C:59:37:79:F5:4B
Certificate issuer:       /CN=A9179D2B/serialNumber=3EDFC612EE9F215C92002038E0BFB78DF9A422DD
Certificate serial:       055F
Authority key identifier: 3E:DF:C6:12:EE:9F:21:5C:92:00:20:38:E0:BF:B7:8D:F9:A4:22:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/405A719A173B11ECA6FAAE38C4F9AE02.roa
Signing time:             Thu 18 Dec 2025 23:19:24 +0000
ROA not before:           Thu 18 Dec 2025 23:19:24 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     17993
IP address blocks:        103.131.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.crl
                          rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 22:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1375 (0x55f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179D2B, serialNumber=3EDFC612EE9F215C92002038E0BFB78DF9A422DD
        Validity
            Not Before: Dec 18 23:19:24 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69448bfc-0f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e7:c5:15:47:e5:54:9c:cd:d1:66:82:50:64:
                    14:80:bc:f8:d1:7d:bf:32:c2:1a:07:8e:39:a4:ed:
                    9f:8c:a3:9c:27:7d:4f:7d:49:7c:0d:4c:32:71:34:
                    15:f9:94:3a:1c:58:19:94:d6:e4:96:72:ef:0f:71:
                    fa:ad:0a:ba:12:f0:8d:1a:e3:fe:5b:2b:64:5c:08:
                    91:ae:32:1c:35:de:96:c5:f6:fe:3e:0c:07:59:db:
                    a1:0f:4b:97:42:71:04:f3:d0:62:b5:5c:d6:97:b9:
                    dc:fb:ac:47:f4:e0:94:db:5c:8a:e3:d7:9f:8d:8e:
                    36:55:0f:98:06:92:d4:5c:b0:ec:2b:29:cb:77:dd:
                    4b:7b:95:f2:96:b2:b2:fb:13:a7:4f:3f:0e:bf:66:
                    38:9c:25:5b:da:26:c7:83:fa:96:79:d0:f5:f2:00:
                    16:ff:c9:b0:6b:1e:3f:d0:c7:73:85:d7:08:27:92:
                    d3:c6:f2:31:8c:82:cf:06:ce:46:3b:1a:83:34:a9:
                    29:4c:2f:73:fa:d6:5b:86:4e:80:c4:1c:5d:b6:54:
                    bc:8b:22:e3:fc:7f:6c:2c:4d:6c:7e:f2:2d:33:61:
                    83:38:f3:c3:44:26:a1:bf:da:65:3e:d0:92:46:e6:
                    e1:87:0a:ed:69:43:59:94:ce:d0:dc:78:38:10:f5:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:15:7D:33:63:5E:F5:71:82:50:94:6B:59:4B:0C:59:37:79:F5:4B
            X509v3 Authority Key Identifier:
                keyid:3E:DF:C6:12:EE:9F:21:5C:92:00:20:38:E0:BF:B7:8D:F9:A4:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/405A719A173B11ECA6FAAE38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:c0:1b:d0:59:9e:22:00:ad:16:fd:d8:58:4e:ec:8a:4d:20:
         5b:b9:b3:e2:5a:b2:1d:2a:95:71:c1:f8:36:2a:59:67:81:25:
         0f:96:56:c9:c3:21:72:c7:35:ab:b7:cf:49:d6:0d:c1:9f:a5:
         77:f4:27:54:10:15:f6:d2:2f:33:e9:d0:46:9e:8a:24:2d:9b:
         32:7d:63:fb:a0:63:53:84:9f:39:54:36:3f:9c:72:af:02:1f:
         67:ac:e3:6c:5c:1c:64:43:e6:f2:21:e4:9b:89:da:0e:f3:37:
         ed:f1:f4:82:f2:cf:3b:f2:f0:34:a0:1c:a8:79:36:9e:4b:18:
         e7:27:b1:26:ab:42:7f:3f:3a:d2:1e:9d:d2:a0:39:63:93:c6:
         c3:b7:49:fb:2e:17:76:e5:53:2a:a6:2d:b7:17:a6:17:59:06:
         da:6e:62:fe:3f:b3:19:5b:40:24:2b:75:f1:c5:f7:db:ef:17:
         84:7d:6b:02:7b:80:f1:78:ea:36:20:ca:3a:b8:16:3a:1e:df:
         9f:31:36:a4:9c:6e:f1:e4:d5:d9:63:bb:ed:8d:31:d6:fc:e7:
         69:35:5d:38:96:3e:91:1a:bd:80:58:dd:01:3b:ff:40:a5:d1:
         77:1a:c6:2c:17:d4:c9:d8:71:2b:ac:6d:0b:93:a6:f7:2d:fb:
         9e:89:54:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:15:02 2025 by rpki-client