This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/3AB3F80E578611EA8CC3B124C4F9AE02.roa
File:                     3AB3F80E578611EA8CC3B124C4F9AE02.roa (raw, json)
Hash identifier:          +ZyQQGFIwSCC6VT4fz54onGJD2TWUXYlo5cENSQQkP8=
Subject key identifier:   20:88:50:E9:2F:0D:37:51:F4:76:2F:29:63:C8:3D:F0:3E:18:44:9C
Certificate issuer:       /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial:       2974
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/3AB3F80E578611EA8CC3B124C4F9AE02.roa
Signing time:             Sat 20 Dec 2025 16:12:54 +0000
ROA not before:           Sat 20 Dec 2025 16:12:54 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.43.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
                          rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 16:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10612 (0x2974)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
        Validity
            Not Before: Dec 20 16:12:54 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6946cb06-b66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7b:73:11:25:45:11:83:a3:5e:c6:fb:02:03:
                    22:8f:e9:f9:02:3c:2e:c7:50:e0:41:99:ca:c4:15:
                    f2:3a:49:55:e4:02:74:d0:14:43:60:b4:bc:bc:ef:
                    4a:4c:60:f0:77:c4:11:34:61:1a:87:76:00:f9:bc:
                    a2:5c:44:7c:b8:da:a5:09:3f:35:89:52:65:ca:e2:
                    26:70:44:12:b0:5e:d9:14:9b:02:ae:26:c3:58:92:
                    af:c0:57:46:3d:1c:91:1d:1a:20:d1:bb:ca:bb:42:
                    c2:3c:e4:ed:41:43:3c:84:d4:ae:c8:ab:cb:11:6f:
                    6d:c9:0b:e3:83:eb:d6:d3:f1:ff:ea:dc:63:4f:b8:
                    b2:3a:7e:b4:aa:d6:76:b3:cd:3d:0e:41:41:1c:d3:
                    7a:88:90:5c:b1:a5:d7:e8:b2:de:6d:9c:b2:7c:71:
                    70:36:da:5e:82:05:8e:7e:76:32:f0:8b:bb:11:84:
                    41:a1:9f:46:61:ea:dd:21:e8:6c:cb:74:87:bb:4f:
                    2a:a5:27:a6:6f:d4:41:56:cc:51:af:74:1f:d9:96:
                    57:b3:61:4e:62:01:1c:65:bc:d8:1c:bc:e7:77:30:
                    e5:c6:71:60:31:96:76:e0:3d:3d:6b:e3:24:2c:c0:
                    67:ae:8e:25:26:41:b5:d6:10:55:34:79:c6:5a:35:
                    c1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:88:50:E9:2F:0D:37:51:F4:76:2F:29:63:C8:3D:F0:3E:18:44:9C
            X509v3 Authority Key Identifier:
                keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/3AB3F80E578611EA8CC3B124C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:1f:a3:d5:8c:7a:6f:b2:2e:eb:11:43:0b:f5:fd:f1:50:fe:
         c7:19:ac:70:06:b0:21:f7:7b:67:c8:63:85:54:fd:8c:cd:8c:
         2d:79:3f:84:ea:30:13:2c:7b:fe:56:8b:72:5c:0e:16:e2:e7:
         a6:bc:61:9c:5c:d0:f5:ec:71:1a:e9:bc:27:f1:15:e5:23:e1:
         e6:29:7c:1c:2d:04:2a:8b:11:6c:92:65:4b:51:27:9f:c2:5c:
         e8:a0:f1:af:b6:f8:08:4f:2e:73:0f:e3:29:b2:e0:4a:1c:2f:
         b6:76:6d:5f:7a:e1:8f:47:42:bb:ff:4f:14:ba:b9:ef:0a:14:
         e1:ee:1f:f1:b7:3b:21:be:5c:03:e6:52:61:c6:ed:ad:9b:65:
         31:8c:bb:8f:42:6c:59:3c:66:49:0a:64:25:f4:e5:04:2d:97:
         8b:87:c2:39:f5:4f:31:27:9e:88:61:f8:d4:fd:24:c5:5e:72:
         6f:16:0f:0a:3f:8e:29:c5:33:a8:e4:0b:a4:67:5e:9e:d9:c5:
         f5:25:c8:b3:fe:93:ef:34:ed:fa:24:72:f7:f1:4e:1c:51:6f:
         79:3d:57:a9:c3:cb:48:63:3b:d2:5a:73:ec:dd:1d:00:74:c7:
         c4:36:e9:0d:cf:65:91:99:24:00:c2:f3:23:54:51:b3:fd:07:
         ad:b1:e6:e1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICKXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MTI3MDcxMTAvBgNVBAUTKEMxRTIyNzY1MUFEQTNCRkJDMTg3NzFBRUM4QjYwMDI2
NzIzQjYwQUQwHhcNMjUxMjIwMTYxMjU0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQ2Y2IwNi1iNjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5HtzESVFEYOjXsb7AgMij+n5Ajwux1DgQZnKxBXyOklV5AJ00BRDYLS8vO9K
TGDwd8QRNGEah3YA+byiXER8uNqlCT81iVJlyuImcEQSsF7ZFJsCribDWJKvwFdG
PRyRHRog0bvKu0LCPOTtQUM8hNSuyKvLEW9tyQvjg+vW0/H/6txjT7iyOn60qtZ2
s809DkFBHNN6iJBcsaXX6LLebZyyfHFwNtpeggWOfnYy8Iu7EYRBoZ9GYerdIehs
y3SHu08qpSemb9RBVsxRr3Qf2ZZXs2FOYgEcZbzYHLzndzDlxnFgMZZ24D09a+Mk
LMBnro4lJkG11hBVNHnGWjXBywIDAQABo4IClTCCApEwHQYDVR0OBBYEFCCIUOkv
DTdR9HYvKWPIPfA+GEScMB8GA1UdIwQYMBaAFMHiJ2Ua2jv7wYdxrsi2ACZyO2Ct
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwNy9CNEFDRTE2NDcw
QjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9fdkJoM0d1eUxZQUpuSTdZ
SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dlSW5aUnJhT192QmgzR3V5TFlBSm5JN1lLMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTI3MDcvQjRBQ0UxNjQ3MEI2MTFFNDlDQ0FGMTZGQzRGOUFFMDIvM0FCM0Y4MEU1
Nzg2MTFFQThDQzNCMTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnKyYwDQYJKoZIhvcNAQELBQADggEBADkfo9WMem+yLusR
Qwv1/fFQ/scZrHAGsCH3e2fIY4VU/YzNjC15P4TqMBMse/5Wi3JcDhbi56a8YZxc
0PXscRrpvCfxFeUj4eYpfBwtBCqLEWySZUtRJ5/CXOig8a+2+AhPLnMP4ymy4Eoc
L7Z2bV964Y9HQrv/TxS6ue8KFOHuH/G3OyG+XAPmUmHG7a2bZTGMu49CbFk8ZkkK
ZCX05QQtl4uHwjn1TzEnnohh+NT9JMVecm8WDwo/jinFM6jkC6RnXp7ZxfUlyLP+
k+807fokcvfxThxRb3k9V6nDy0hjO9Jac+zdHQB0x8Q26Q3PZZGZJADC8yNUUbP9
B62x5uE=
-----END CERTIFICATE-----
Generated at Sun Dec 21 09:22:26 2025 by rpki-client