This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/415B7AF8173B11ECA6FAAE38C4F9AE02.roa
File:                     415B7AF8173B11ECA6FAAE38C4F9AE02.roa (raw, json)
Hash identifier:          xzAJnj25CiIQaSBd90yDZsPXjfOFJFdiEM/PrU8QfVQ=
Subject key identifier:   07:CC:B9:CB:2F:D8:2F:B3:90:4E:1D:76:92:B2:42:FB:E3:FA:6A:37
Certificate issuer:       /CN=A9179D2B/serialNumber=3EDFC612EE9F215C92002038E0BFB78DF9A422DD
Certificate serial:       0560
Authority key identifier: 3E:DF:C6:12:EE:9F:21:5C:92:00:20:38:E0:BF:B7:8D:F9:A4:22:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/415B7AF8173B11ECA6FAAE38C4F9AE02.roa
Signing time:             Thu 18 Dec 2025 23:19:25 +0000
ROA not before:           Thu 18 Dec 2025 23:19:25 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     38800
IP address blocks:        103.131.62.0/24 maxlen: 24
                          103.131.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.crl
                          rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 22:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1376 (0x560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179D2B, serialNumber=3EDFC612EE9F215C92002038E0BFB78DF9A422DD
        Validity
            Not Before: Dec 18 23:19:25 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69448bfd-bc21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:98:26:be:94:a4:bf:cb:86:a6:e4:4d:fc:b4:
                    bd:e3:eb:00:88:cf:7a:48:b8:be:21:03:b2:98:6f:
                    b6:be:05:6f:8c:2a:31:9a:31:64:49:11:81:b6:5d:
                    41:6a:50:42:f9:cf:73:d6:82:b3:e5:f9:46:d7:45:
                    a5:b0:72:7b:2d:b0:06:33:25:4c:a2:68:7c:df:76:
                    68:dd:6e:78:45:f0:fb:84:e6:73:57:be:e5:03:6a:
                    6e:7c:ca:b9:d7:b8:00:0e:ba:cf:7f:cc:e8:60:08:
                    b6:a1:06:4a:57:6c:b3:f1:f9:d6:9c:dd:a3:39:b7:
                    26:42:2b:55:82:af:17:d8:88:f8:9f:66:c6:75:74:
                    cf:92:3a:d6:16:24:91:21:89:85:eb:35:fa:0f:4a:
                    5f:ec:4e:52:bd:6b:71:73:28:5a:70:4d:7c:20:0d:
                    4d:57:f1:9c:6b:0f:37:34:c1:a7:f4:35:f0:9c:67:
                    65:0b:3d:27:b8:57:9c:ad:0d:aa:c0:e5:56:0e:eb:
                    4d:70:e4:28:b4:2e:26:7b:91:3b:c6:70:3a:94:73:
                    cc:84:1c:1b:d7:a2:10:d9:59:20:a5:f3:f6:11:a4:
                    d9:e4:1a:a3:00:42:4c:4a:2f:78:db:84:cc:42:46:
                    77:f7:53:5b:16:7c:f6:2f:83:1c:ec:72:24:39:21:
                    e0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CC:B9:CB:2F:D8:2F:B3:90:4E:1D:76:92:B2:42:FB:E3:FA:6A:37
            X509v3 Authority Key Identifier:
                keyid:3E:DF:C6:12:EE:9F:21:5C:92:00:20:38:E0:BF:B7:8D:F9:A4:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/415B7AF8173B11ECA6FAAE38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:5c:37:82:01:67:48:20:7e:dc:aa:eb:d1:6d:6e:e4:61:81:
         63:14:f5:5c:4a:bd:b3:83:86:b9:9c:e0:21:95:26:cf:d6:50:
         a7:56:95:ba:21:b6:0c:8f:6d:b1:c3:10:68:a2:93:63:5f:7b:
         12:e0:f6:9f:cd:2f:3e:17:36:ee:da:11:e2:7f:c0:d2:15:39:
         01:43:c5:ef:85:e8:47:7a:62:b1:df:fb:7e:fc:52:15:02:b1:
         d9:dd:61:c5:b8:28:bf:d9:a6:2a:a8:13:89:3b:f9:5f:06:76:
         35:3e:0e:e7:9a:a5:b4:03:da:97:82:15:59:9c:db:9e:8a:7f:
         9f:7b:ce:d0:fd:3b:2b:bb:5d:52:66:5b:41:89:51:b8:36:ce:
         51:78:60:30:39:46:a0:55:24:b1:17:47:d1:5f:3e:de:b7:0a:
         9a:90:e9:37:e7:ad:f2:5f:70:40:3e:37:0c:d9:8f:87:c8:b3:
         93:94:ff:a6:83:45:af:9b:f3:6d:ba:da:8f:04:f3:81:49:88:
         a1:d6:5d:29:30:33:10:aa:db:f9:db:22:59:32:35:9e:8b:f3:
         e1:c8:29:34:f9:df:29:ce:99:0b:f2:65:1e:5d:cd:68:66:c7:
         4d:f7:d8:c4:db:ce:b6:59:99:d4:18:08:e7:2d:d5:3e:ec:98:
         28:09:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:40:35 2025 by rpki-client