This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/E52789DCE39E11EAAAE0622CC4F9AE02.roa
File:                     E52789DCE39E11EAAAE0622CC4F9AE02.roa (raw, json)
Hash identifier:          v93jb/bRSNr2Qe/1Fj0VaaM3RO4V5/dzcO4iXSsdfWI=
Subject key identifier:   00:43:48:CC:B7:F2:C5:58:42:4C:02:1E:22:71:20:B8:16:5D:2A:40
Certificate issuer:       /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial:       3571
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/E52789DCE39E11EAAAE0622CC4F9AE02.roa
Signing time:             Wed 20 Aug 2025 14:50:31 +0000
ROA not before:           Wed 20 Aug 2025 14:50:31 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136762
IP address blocks:        103.235.196.0/22 maxlen: 24
                          163.53.24.0/23 maxlen: 24
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13681 (0x3571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
        Validity
            Not Before: Aug 20 14:50:31 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68a5e0b6-5b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:16:f4:30:d4:5f:d5:a6:b0:ce:15:95:54:
                    30:a1:df:66:a5:8b:37:27:15:6e:e2:4e:b7:c5:41:
                    90:f3:37:c1:d9:8f:65:df:25:6f:8f:a9:9c:8a:63:
                    e3:57:91:c0:c6:f4:9f:05:a2:f1:7e:ea:48:6b:5d:
                    58:b5:ef:20:4c:e9:fe:16:25:e2:30:99:4d:d7:4e:
                    35:a5:6f:ef:f9:31:60:e0:b9:f4:97:ad:28:2f:07:
                    ad:12:b4:6c:a6:a1:f3:d0:f8:9c:e9:ea:15:fb:49:
                    45:d7:31:b2:8c:16:db:e4:c5:80:72:01:1b:15:93:
                    cd:da:73:6f:8e:83:36:c5:0a:76:e3:f4:c4:5b:a1:
                    d6:7c:18:85:46:8e:15:dd:59:aa:9b:de:3f:84:4f:
                    93:c1:c4:5c:a1:fe:6e:71:91:eb:92:42:6e:55:66:
                    67:16:37:94:ce:9e:24:1b:73:a5:80:55:8a:a3:ff:
                    b7:8b:22:f8:73:ba:df:a1:c5:9f:a0:9d:5e:79:b2:
                    c1:e2:21:fd:04:0d:5c:f0:52:e3:d9:bc:30:dc:f1:
                    83:54:61:4a:41:e3:fc:45:cf:f7:aa:ec:88:72:a0:
                    3a:d4:92:b6:0f:4b:98:2a:42:2c:33:e2:80:f6:ca:
                    09:b5:09:d9:11:5e:6a:8e:8b:89:1e:20:56:a2:d4:
                    9e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:43:48:CC:B7:F2:C5:58:42:4C:02:1E:22:71:20:B8:16:5D:2A:40
            X509v3 Authority Key Identifier:
                keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/E52789DCE39E11EAAAE0622CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.196.0/22
                  163.53.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:4c:60:c0:e6:92:d3:71:63:c3:2b:c8:24:23:c5:6a:0d:bf:
         20:f3:14:2f:da:66:c5:f2:8f:c2:72:fe:10:c5:26:a8:e7:08:
         68:9a:3b:6e:13:d8:99:aa:65:99:30:58:d9:0f:47:93:3a:56:
         6f:09:b5:b4:25:61:96:d4:49:9a:22:ad:b1:46:46:1b:a2:04:
         21:cd:32:17:8b:ce:0a:fd:23:45:f1:a1:83:b2:2e:9e:4f:ed:
         d1:f0:0d:65:28:62:15:89:b4:32:98:e4:0f:89:c6:bc:0a:fa:
         38:b9:1a:3c:08:79:f7:61:69:a9:62:0d:03:66:63:13:6e:e5:
         7b:9c:88:a4:61:24:6e:20:98:62:3f:e6:3f:10:53:8c:09:ba:
         f3:26:cb:86:d9:44:21:03:88:d7:49:3b:4f:8b:35:9e:2b:e6:
         a7:d7:df:45:3c:88:73:34:ee:d5:e5:8b:4d:71:7a:81:26:0d:
         3d:97:97:59:5f:f5:1b:04:54:e6:a9:6b:29:ac:d5:11:59:40:
         c3:9d:54:b7:8f:e6:ff:b6:0f:55:35:19:96:f2:f0:5f:98:f6:
         90:f6:fd:65:21:52:e3:0a:19:9a:91:83:e6:c2:33:61:c0:e9:
         0a:9f:ff:12:85:d9:7f:83:6b:fe:28:af:18:26:f9:bd:65:97:
         ed:bb:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----