This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/73261D50DBF311F0B2CAB720556F56BC.roa
File:                     73261D50DBF311F0B2CAB720556F56BC.roa (raw, json)
Hash identifier:          ywJMDcoKtldr4HOdsn13LtO6Zc7isr0wzrZeQ+VLd08=
Subject key identifier:   28:E2:50:7B:ED:C5:33:7F:37:13:C8:64:93:EF:6C:E3:E6:FE:50:36
Certificate issuer:       /CN=A918C425/serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Certificate serial:       09
Authority key identifier: 3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/73261D50DBF311F0B2CAB720556F56BC.roa
Signing time:             Thu 18 Dec 2025 09:25:10 +0000
ROA not before:           Thu 18 Dec 2025 09:25:10 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     24409
IP address blocks:        103.245.23.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
                          rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 07:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C425, serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
        Validity
            Not Before: Dec 18 09:25:10 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6943c876-0377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a2:8c:9f:3d:bf:ab:63:b2:aa:c1:0b:6e:fd:
                    50:98:d0:9b:bd:1d:6e:37:5d:ab:59:4d:cb:9e:0e:
                    a7:9d:56:cd:3a:22:ef:ad:bb:20:48:01:b1:21:9b:
                    60:83:95:59:9a:4f:89:78:a3:0f:04:2f:45:12:23:
                    cd:24:37:25:9d:60:dd:c8:7a:f9:ee:02:69:e8:d1:
                    98:e0:16:cc:b4:f5:88:53:56:bb:01:ab:66:c2:b0:
                    5c:9b:4b:ea:02:75:6c:11:78:7b:0d:32:10:5f:9c:
                    ca:26:d7:c0:b2:a8:75:55:ca:58:52:a2:f1:a3:90:
                    52:f9:8e:67:70:34:77:41:8b:5a:e5:71:bd:e2:09:
                    a6:31:b7:8e:15:47:d6:32:b7:70:b3:a6:9e:87:26:
                    69:ef:c5:58:cc:8c:8b:7b:bd:42:56:e7:39:eb:17:
                    a3:19:7a:d3:81:e7:fe:28:9c:ba:96:31:73:14:10:
                    a8:af:aa:6d:d3:56:52:76:f7:1d:33:5a:1a:03:e6:
                    39:37:f0:ff:e4:90:03:ae:02:9b:73:d2:0b:08:29:
                    03:f4:18:26:40:25:ea:29:c3:d6:9f:c9:c0:0f:43:
                    1d:89:2e:3b:4a:72:33:0b:ba:b4:5a:38:d7:b4:13:
                    ed:b4:a0:45:16:1c:c9:92:00:3c:e9:75:8e:05:b4:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E2:50:7B:ED:C5:33:7F:37:13:C8:64:93:EF:6C:E3:E6:FE:50:36
            X509v3 Authority Key Identifier:
                keyid:3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/73261D50DBF311F0B2CAB720556F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:17:c5:6f:47:6d:48:fc:7b:96:8e:49:cb:ff:66:96:2d:7c:
         26:98:6a:ed:52:cb:40:16:f5:c7:08:2f:86:ba:fa:f8:2b:ca:
         d5:ed:72:02:d5:dc:70:1d:ea:79:42:8d:1b:a4:2e:5c:d9:de:
         c2:92:73:57:15:88:6c:bf:a1:42:6b:5a:b8:92:30:59:8b:53:
         88:40:2b:59:01:99:f4:97:85:af:66:15:1c:2e:26:02:90:04:
         d6:73:92:1b:63:ba:14:10:b2:64:0e:74:78:1f:ff:2b:c4:1b:
         c1:e5:e9:fd:99:e7:62:43:b7:90:71:5d:9f:96:33:25:42:c1:
         18:b8:e5:e2:da:f1:ba:00:37:76:a4:64:ac:f4:d5:60:0d:58:
         e7:9e:f6:21:f7:7b:af:51:0d:9b:96:34:6d:92:5d:6f:1d:04:
         9a:0e:bf:eb:91:f2:05:3f:6e:2b:03:6c:d6:9a:ff:ed:89:88:
         6b:4e:38:8b:e2:59:b9:04:3b:99:84:ec:d2:e6:7e:69:8a:19:
         53:74:14:26:8e:3d:c1:46:19:32:a1:df:ac:51:f2:18:3f:15:
         6c:49:f7:d4:19:86:ba:18:31:92:ca:4c:d7:20:9e:8d:9a:e8:
         18:a5:25:b8:02:71:89:30:2a:cd:02:d8:6e:2c:4e:76:15:f8:
         a3:e8:d7:4f
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE4
QzQyNTExMC8GA1UEBRMoM0ExQjA5NDE5MUZFMzQ3NTM3MTlDMUQ0ODFGMjA4ODVB
ODA4QzE2QjAeFw0yNTEyMTgwOTI1MTBaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NDNjODc2LTAzNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTooyfPb+rY7KqwQtu/VCY0Ju9HW43XatZTcueDqedVs06Iu+tuyBIAbEhm2CD
lVmaT4l4ow8EL0USI80kNyWdYN3IevnuAmno0ZjgFsy09YhTVrsBq2bCsFybS+oC
dWwReHsNMhBfnMom18CyqHVVylhSovGjkFL5jmdwNHdBi1rlcb3iCaYxt44VR9Yy
t3Czpp6HJmnvxVjMjIt7vUJW5znrF6MZetOB5/4onLqWMXMUEKivqm3TVlJ29x0z
WhoD5jk38P/kkAOuAptz0gsIKQP0GCZAJeopw9afycAPQx2JLjtKcjMLurRaONe0
E+20oEUWHMmSADzpdY4FtMyXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUKOJQe+3F
M383E8hkk+9s4+b+UDYwHwYDVR0jBBgwFoAUOhsJQZH+NHU3GcHUgfIIhagIwWsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDNDI1L0RGQkFFRTE0REJF
NDExRjBBOEI1QkY2NDM2NkY1NkJDL09oc0pRWkgtTkhVM0djSFVnZklJaGFnSXdX
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvT2hzSlFaSC1OSFUzR2NIVWdmSUloYWdJd1dzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzQyNS9ERkJBRUUxNERCRTQxMUYwQThCNUJGNjQzNjZGNTZCQy83MzI2MUQ1MERC
RjMxMUYwQjJDQUI3MjA1NTZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGf1FzANBgkqhkiG9w0BAQsFAAOCAQEAKhfFb0dtSPx7lo5J
y/9mli18Jphq7VLLQBb1xwgvhrr6+CvK1e1yAtXccB3qeUKNG6QuXNnewpJzVxWI
bL+hQmtauJIwWYtTiEArWQGZ9JeFr2YVHC4mApAE1nOSG2O6FBCyZA50eB//K8Qb
weXp/ZnnYkO3kHFdn5YzJULBGLjl4trxugA3dqRkrPTVYA1Y5572Ifd7r1ENm5Y0
bZJdbx0Emg6/65HyBT9uKwNs1pr/7YmIa044i+JZuQQ7mYTs0uZ+aYoZU3QUJo49
wUYZMqHfrFHyGD8VbEn31BmGuhgxkspM1yCejZroGKUluAJxiTAqzQLYbixOdhX4
o+jXTw==
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:08:43 2025 by rpki-client