This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/FC11F400240611EFA8F45A54C4F9AE02.roa
File:                     FC11F400240611EFA8F45A54C4F9AE02.roa (raw, json)
Hash identifier:          hgdL5UTkf8oZABpJrnOGmK5k+01vc9XVo1jTsrlgdWk=
Subject key identifier:   7A:D2:83:E6:8B:9F:0C:D9:65:14:6C:F7:05:E3:BE:C2:C3:76:05:4D
Certificate issuer:       /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
Certificate serial:       0412
Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/FC11F400240611EFA8F45A54C4F9AE02.roa
Signing time:             Sat 13 Dec 2025 09:43:23 +0000
ROA not before:           Sat 13 Dec 2025 09:43:23 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     150735
IP address blocks:        103.122.122.0/24 maxlen: 24
                          103.182.219.0/24 maxlen: 24
                          2001:df0:80c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl
                          rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042 (0x412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BD1A, serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
        Validity
            Not Before: Dec 13 09:43:23 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=693d353a-8dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:c6:db:f1:97:4b:83:bb:bb:fb:7b:4c:3c:32:
                    73:02:7f:f5:a1:06:2e:29:ea:8d:fd:2c:54:69:49:
                    e9:63:3a:9e:46:e2:51:94:8e:5c:42:2b:eb:2d:85:
                    7c:2c:72:40:0b:8b:aa:34:d2:c5:e5:e9:9d:8a:05:
                    a7:29:49:b8:07:83:c8:77:a8:12:66:44:11:a5:56:
                    e1:9a:1b:bc:88:12:b5:4c:4c:7a:6d:fd:67:4b:1f:
                    67:30:72:a2:5d:59:23:d5:4f:c6:81:7f:11:17:e3:
                    c8:61:43:2c:ab:80:23:a3:05:ff:0f:09:0c:a6:bd:
                    17:34:a7:43:02:0d:b5:25:83:61:8f:ef:e5:64:df:
                    b0:8e:56:dd:f2:32:70:a5:34:8c:62:16:d8:0e:08:
                    e5:cb:81:63:3a:b3:a5:4f:7b:3e:56:51:e5:21:a4:
                    eb:df:68:01:89:d1:ec:af:eb:e6:48:5a:29:d8:6f:
                    4d:2b:5e:88:3a:2b:16:7d:e4:92:e3:66:21:b2:8c:
                    48:8e:b4:78:e3:8d:4c:67:fe:d8:6c:85:60:3a:8e:
                    44:bb:f6:35:26:4b:19:2e:e8:80:be:d4:1a:61:8b:
                    3f:e4:6f:8d:27:36:f7:0e:b0:ab:66:6f:0b:4c:94:
                    46:0e:7d:57:9e:c5:21:1a:82:7e:fc:4a:f8:77:87:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D2:83:E6:8B:9F:0C:D9:65:14:6C:F7:05:E3:BE:C2:C3:76:05:4D
            X509v3 Authority Key Identifier:
                keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/FC11F400240611EFA8F45A54C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.122.0/24
                  103.182.219.0/24
                IPv6:
                  2001:df0:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:ba:2c:45:7e:8d:72:0f:45:e5:b8:f0:d6:27:d8:40:d0:08:
         81:23:9e:7c:bc:0e:bc:29:cd:ac:b1:2a:48:07:42:23:e4:56:
         f2:b6:a7:fb:c4:5d:f6:e1:31:96:fd:ba:5a:1b:cd:4a:b0:78:
         75:73:f6:53:dd:4b:1a:b5:96:77:15:36:d8:3d:98:10:af:80:
         64:bd:2b:4d:ee:38:49:0d:8a:fd:cf:80:a6:eb:f6:be:c0:e7:
         f4:0e:ad:a3:a3:80:0c:b0:f7:d3:9b:2f:70:2a:a5:1e:6d:57:
         dc:14:f5:c7:ff:ab:60:1b:9f:7b:37:c2:0b:63:f5:d5:8d:8f:
         72:ba:99:c1:c0:4c:87:71:4e:ba:8c:4c:d3:d4:b8:23:2b:2a:
         b6:f9:4c:f3:0b:3f:c9:13:cf:39:b4:1a:07:04:55:a9:0f:88:
         d3:ba:ce:30:ae:4c:ad:17:24:48:fd:e8:d5:1b:63:4b:5a:ae:
         a8:4e:3b:0e:4f:2d:e1:f7:df:b7:5e:2f:0f:6b:b6:bf:f6:e1:
         59:f6:87:96:ff:95:0b:7d:56:95:50:01:fe:ba:43:fd:d0:12:
         b2:15:77:0e:1f:c1:18:d5:ff:2c:bc:f4:35:2c:fc:f0:00:3b:
         3a:34:79:3f:08:8d:46:1b:c1:b7:53:1b:7a:f4:6c:4e:fe:ae:
         3a:bb:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:14:51 2025 by rpki-client