This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/8186EA3008A211EA83441161C4F9AE02.roa
File:                     8186EA3008A211EA83441161C4F9AE02.roa (raw, json)
Hash identifier:          d6//197VwKUEGCCi57OGEoYRH4hCYPE3ASRgotgi1ck=
Subject key identifier:   D6:3A:31:FA:98:55:F5:A1:94:6E:4A:BF:80:92:8C:77:8A:60:C7:02
Certificate issuer:       /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7
Certificate serial:       0CD1
Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/8186EA3008A211EA83441161C4F9AE02.roa
Signing time:             Fri 19 Dec 2025 06:53:13 +0000
ROA not before:           Fri 19 Dec 2025 06:53:13 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     137385
IP address blocks:        103.106.240.0/22 maxlen: 24
                          2402:49c0::/32 maxlen: 32
                          2402:49c0::/48 maxlen: 48
                          2402:49c0:1::/48 maxlen: 48
                          2402:49c0:2::/48 maxlen: 48
                          2402:49c0:3::/48 maxlen: 48
                          2402:49c0:4::/48 maxlen: 48
                          2402:49c0:5::/48 maxlen: 48
                          2402:49c0:6::/48 maxlen: 48
                          2402:49c0:7::/48 maxlen: 48
                          2402:49c0:8::/48 maxlen: 48
                          2402:49c0:9::/48 maxlen: 48
                          2402:49c0:a::/48 maxlen: 48
                          2402:49c0:b::/48 maxlen: 48
                          2402:49c0:c::/48 maxlen: 48
                          2402:49c0:d::/48 maxlen: 48
                          2402:49c0:e::/48 maxlen: 48
                          2402:49c0:f::/48 maxlen: 48
                          2402:49c0:10::/48 maxlen: 48
                          2402:49c0:11::/48 maxlen: 48
                          2402:49c0:12::/48 maxlen: 48
                          2402:49c0:13::/48 maxlen: 48
                          2402:49c0:14::/48 maxlen: 48
                          2402:49c0:15::/48 maxlen: 48
                          2402:49c0:16::/48 maxlen: 48
                          2402:49c0:17::/48 maxlen: 48
                          2402:49c0:18::/48 maxlen: 48
                          2402:49c0:19::/48 maxlen: 48
                          2402:49c0:1a::/48 maxlen: 48
                          2402:49c0:1b::/48 maxlen: 48
                          2402:49c0:1c::/48 maxlen: 48
                          2402:49c0:1d::/48 maxlen: 48
                          2402:49c0:1e::/48 maxlen: 48
                          2402:49c0:1f::/48 maxlen: 48
                          2402:49c0:20::/48 maxlen: 48
                          2402:49c0:21::/48 maxlen: 48
                          2402:49c0:22::/48 maxlen: 48
                          2402:49c0:23::/48 maxlen: 48
                          2402:49c0:24::/48 maxlen: 48
                          2402:49c0:25::/48 maxlen: 48
                          2402:49c0:26::/48 maxlen: 48
                          2402:49c0:27::/48 maxlen: 48
                          2402:49c0:28::/48 maxlen: 48
                          2402:49c0:29::/48 maxlen: 48
                          2402:49c0:2a::/48 maxlen: 48
                          2402:49c0:2b::/48 maxlen: 48
                          2402:49c0:2c::/48 maxlen: 48
                          2402:49c0:2d::/48 maxlen: 48
                          2402:49c0:2e::/48 maxlen: 48
                          2402:49c0:2f::/48 maxlen: 48
                          2402:49c0:30::/48 maxlen: 48
                          2402:49c0:31::/48 maxlen: 48
                          2402:49c0:32::/48 maxlen: 48
                          2402:49c0:33::/48 maxlen: 48
                          2402:49c0:34::/48 maxlen: 48
                          2402:49c0:35::/48 maxlen: 48
                          2402:49c0:36::/48 maxlen: 48
                          2402:49c0:37::/48 maxlen: 48
                          2402:49c0:38::/48 maxlen: 48
                          2402:49c0:39::/48 maxlen: 48
                          2402:49c0:3a::/48 maxlen: 48
                          2402:49c0:3b::/48 maxlen: 48
                          2402:49c0:3c::/48 maxlen: 48
                          2402:49c0:3d::/48 maxlen: 48
                          2402:49c0:3e::/48 maxlen: 48
                          2402:49c0:3f::/48 maxlen: 48
                          2402:49c0:40::/48 maxlen: 48
                          2402:49c0:41::/48 maxlen: 48
                          2402:49c0:42::/48 maxlen: 48
                          2402:49c0:43::/48 maxlen: 48
                          2402:49c0:44::/48 maxlen: 48
                          2402:49c0:45::/48 maxlen: 48
                          2402:49c0:46::/48 maxlen: 48
                          2402:49c0:47::/48 maxlen: 48
                          2402:49c0:48::/48 maxlen: 48
                          2402:49c0:49::/48 maxlen: 48
                          2402:49c0:4a::/48 maxlen: 48
                          2402:49c0:4b::/48 maxlen: 48
                          2402:49c0:4c::/48 maxlen: 48
                          2402:49c0:4d::/48 maxlen: 48
                          2402:49c0:4e::/48 maxlen: 48
                          2402:49c0:4f::/48 maxlen: 48
                          2402:49c0:50::/48 maxlen: 48
                          2402:49c0:51::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl
                          rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 18:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3281 (0xcd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7
        Validity
            Not Before: Dec 19 06:53:13 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6944f659-48e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4a:b6:66:2a:4d:9b:a3:2f:86:16:e1:54:86:
                    73:61:1e:ed:66:e5:ff:e8:cd:49:3f:2a:7f:7b:ac:
                    99:0b:8f:29:5d:ee:a5:b2:a5:c7:d4:c5:dc:94:f5:
                    f2:7e:ce:93:21:d9:6f:93:a8:a2:f2:ad:f7:bf:57:
                    d8:7b:4d:07:42:72:6b:bb:2e:86:86:f4:e9:8f:d7:
                    80:52:40:5f:01:ff:d1:e5:ad:ef:60:23:38:d4:15:
                    fc:a8:7f:ff:5e:f6:83:2f:b6:10:eb:e1:3e:67:d6:
                    fe:d7:a3:3e:5d:3e:36:92:f5:a2:f5:87:f4:0a:1a:
                    72:c2:e8:34:ed:b0:98:99:42:94:01:00:18:54:31:
                    15:f8:bc:8d:08:1b:c3:43:5e:28:12:36:f4:36:3e:
                    d9:a0:98:53:38:3f:81:50:e1:fb:08:c9:8d:35:54:
                    99:fa:ee:b1:ea:fa:9a:70:69:f4:e1:b6:6b:72:dc:
                    9d:49:10:a6:09:b0:22:8a:3a:38:7e:51:3c:aa:66:
                    48:66:4a:b4:f9:8a:03:25:ee:a6:3a:99:24:ee:53:
                    cc:53:ee:00:5a:03:06:82:d3:9a:31:62:c3:22:b1:
                    7d:e7:38:91:fd:45:4a:8c:cb:57:15:f7:cd:1d:c6:
                    71:e0:4d:4d:75:ae:c6:ae:76:06:f1:8d:b7:4e:78:
                    5d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3A:31:FA:98:55:F5:A1:94:6E:4A:BF:80:92:8C:77:8A:60:C7:02
            X509v3 Authority Key Identifier:
                keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/8186EA3008A211EA83441161C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.240.0/22
                IPv6:
                  2402:49c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:24:f4:0c:1d:0c:5f:6e:82:de:c8:d7:36:20:f7:b4:17:ca:
         f1:ba:98:7b:65:f7:57:31:cb:b3:dc:17:29:e4:a4:3e:a4:3e:
         31:0e:ca:5a:cf:75:48:b4:2b:04:de:e0:c7:f0:94:a8:7f:4b:
         0e:a4:14:1b:b3:7b:61:11:c8:c6:b2:62:11:46:4b:a9:97:1b:
         18:d3:9b:18:a7:30:bc:de:fa:a4:4c:ee:af:14:55:95:37:85:
         52:8f:a4:5d:0c:46:a6:38:4b:bf:73:1c:ef:9c:68:e5:1e:4a:
         18:99:14:5d:9b:13:00:12:33:63:b3:85:05:8d:a7:47:a2:36:
         b6:91:26:29:98:1c:ce:36:ad:e6:aa:74:12:23:62:25:72:d3:
         47:63:10:c6:1e:4b:8f:2d:05:9c:fd:52:cc:9e:1a:fe:fa:29:
         e3:eb:86:37:db:dd:8e:01:69:1a:c2:d0:fc:38:90:1d:61:6f:
         3f:54:fd:03:f2:74:94:72:88:0f:1a:ad:d8:2d:81:21:16:13:
         ed:ad:a4:a6:b2:94:ff:7d:5a:4e:7c:ca:c2:d1:28:ca:bb:61:
         e8:b9:5e:e7:d2:fe:57:f1:4a:b1:31:96:39:7f:7d:65:aa:93:
         d3:19:32:d8:6c:b9:75:29:ab:7e:eb:70:cc:03:ac:95:9f:6a:
         75:34:0a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:09:12 2025 by rpki-client