This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/554FA970134B11F086B29E87C4F9AE02.roa
File:                     554FA970134B11F086B29E87C4F9AE02.roa (raw, json)
Hash identifier:          lElr8UuU72HaGdKc4l83MtravhdES9u5a7CA+J7QNtM=
Subject key identifier:   05:98:A3:9D:1D:2C:F8:41:2C:C3:C6:79:F1:35:2E:14:EF:2D:39:C6
Certificate issuer:       /CN=A9119010/serialNumber=751A8B3D5B62E81F46A4C7BD4695BF3A8069CA3E
Certificate serial:       02
Authority key identifier: 75:1A:8B:3D:5B:62:E8:1F:46:A4:C7:BD:46:95:BF:3A:80:69:CA:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/554FA970134B11F086B29E87C4F9AE02.roa
Signing time:             Mon 07 Apr 2025 00:57:52 +0000
ROA not before:           Mon 07 Apr 2025 00:57:52 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     139806
IP address blocks:        103.145.74.0/23 maxlen: 24
                          2001:df5:4680::/48 maxlen: 48
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119010, serialNumber=751A8B3D5B62E81F46A4C7BD4695BF3A8069CA3E
        Validity
            Not Before: Apr  7 00:57:52 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67f32310-80f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:39:07:d8:e1:87:13:33:5b:28:e5:81:15:98:
                    21:c4:9f:86:e9:9c:cf:39:52:82:50:20:76:ba:c6:
                    de:78:71:c7:94:90:97:0e:bd:f5:c9:9f:22:c6:7b:
                    96:ce:7b:0e:53:e1:02:8d:3c:fe:9d:1b:d3:62:f8:
                    8b:7e:80:83:b3:30:d4:13:c3:22:08:1c:4d:13:36:
                    a8:58:0a:7a:a4:ca:c2:2e:8b:81:2a:3d:fa:4f:60:
                    b3:67:9c:b7:7c:52:6d:4d:c6:bd:56:93:2a:fe:a5:
                    16:97:b1:04:c2:59:da:6e:dd:7f:1b:5c:fe:9f:50:
                    aa:a0:9a:d9:92:5f:64:c9:99:0a:27:a3:fe:85:da:
                    7e:97:31:46:54:e4:8e:f4:44:de:2e:8c:7c:b4:a2:
                    a9:b3:b6:ce:e5:fa:e7:60:08:4a:71:6b:3f:99:38:
                    15:a1:83:00:12:57:99:3a:0a:8b:ee:79:3a:2b:15:
                    9b:63:89:51:ba:72:1b:7e:3d:1b:f6:5d:f1:82:b8:
                    0f:f5:5c:19:d0:39:1a:bf:46:10:83:0a:3d:54:4d:
                    62:f8:f1:a7:2a:51:d3:26:a2:f3:88:0d:ff:00:94:
                    76:c5:4e:3d:d3:eb:0f:3f:ee:00:f2:bb:ed:a9:75:
                    52:16:41:b9:11:3e:64:97:7d:52:20:5f:c5:b5:f7:
                    dd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:98:A3:9D:1D:2C:F8:41:2C:C3:C6:79:F1:35:2E:14:EF:2D:39:C6
            X509v3 Authority Key Identifier:
                keyid:75:1A:8B:3D:5B:62:E8:1F:46:A4:C7:BD:46:95:BF:3A:80:69:CA:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/554FA970134B11F086B29E87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.74.0/23
                IPv6:
                  2001:df5:4680::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:f6:81:1e:3c:53:97:24:0a:a3:ce:17:82:7c:1b:47:ba:a9:
         51:b0:86:26:52:60:99:7d:f4:1f:53:b0:d4:56:13:00:42:84:
         a8:14:61:b2:3f:bc:19:28:b2:a8:93:1d:62:ed:d4:58:b1:98:
         43:d6:63:e4:e8:9b:af:bc:30:8d:0a:1e:04:a7:cd:ee:84:cd:
         53:05:d9:2c:f2:47:41:28:71:5f:6e:db:3a:b5:19:76:cb:98:
         9f:e5:b4:0c:98:33:07:d3:c1:c9:1b:ed:89:84:86:6b:45:11:
         5d:97:dc:fe:76:c6:a2:93:af:79:23:15:0d:52:38:2a:7d:e2:
         1b:e6:b7:7d:93:17:05:a5:ea:57:52:9f:f2:b9:70:77:86:45:
         6b:c1:17:4d:14:46:c5:db:59:72:c5:04:1a:86:b5:05:d1:ca:
         30:be:74:bd:25:f7:69:68:74:95:ba:81:2b:53:f8:86:30:8a:
         bf:31:63:9c:8a:a3:55:9a:8b:a3:ec:55:ed:6e:b7:1e:b3:50:
         ca:f0:a6:ba:18:a8:0d:4d:58:49:ac:c4:4d:a0:62:d4:75:dd:
         70:b5:82:ab:53:12:60:ba:e0:f7:53:93:70:d4:6d:bf:fb:19:
         62:c1:f8:ed:d7:38:9e:3f:a5:7c:ad:42:04:f7:5c:b7:d3:67:
         48:84:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----