This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/FB1BF574E7E411EC84283679C4F9AE02.roa
File:                     FB1BF574E7E411EC84283679C4F9AE02.roa (raw, json)
Hash identifier:          m+WKn873Hl55Khy/g6RA/gEeVV9c4cRJl02WKXW/PsA=
Subject key identifier:   F5:29:9B:4A:50:BF:3F:8F:3F:19:F5:89:1E:BD:2F:D3:42:DC:07:31
Certificate issuer:       /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Certificate serial:       0349
Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/FB1BF574E7E411EC84283679C4F9AE02.roa
Signing time:             Sat 06 Dec 2025 23:38:25 +0000
ROA not before:           Sat 06 Dec 2025 23:38:25 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     135664
IP address blocks:        43.230.60.0/22 maxlen: 24
                          103.78.128.0/22 maxlen: 22
                          103.78.128.0/24 maxlen: 24
                          103.78.129.0/24 maxlen: 24
                          103.78.130.0/24 maxlen: 24
                          103.78.131.0/24 maxlen: 24
                          2407:c180::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
                          rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 23:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841 (0x349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
        Validity
            Not Before: Dec  6 23:38:25 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6934be70-02d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ab:80:d9:d7:46:d0:31:ac:48:5b:68:c3:7e:
                    d2:a4:c4:3d:fb:19:fe:52:5f:46:c9:ff:bf:6c:0f:
                    2e:6e:80:4f:6f:7a:7d:c2:97:80:16:cc:5c:e6:b2:
                    fb:0f:a3:68:f7:0d:b4:29:fe:fd:e7:a9:54:19:08:
                    17:9b:68:1c:0e:36:d0:2c:64:6f:78:bc:e3:c8:d6:
                    3b:11:72:1e:ac:ef:8f:1a:b7:ae:a0:36:2f:56:2f:
                    e9:c8:6f:6b:09:85:1e:02:a7:a3:d3:82:41:3d:5d:
                    68:29:29:cc:13:af:c7:01:d6:74:5c:c2:ec:98:87:
                    29:aa:d6:e3:60:c7:b0:8c:7f:c5:72:99:24:c1:15:
                    83:29:79:76:75:c7:0d:50:5b:d6:35:ec:f6:78:40:
                    f7:a8:65:95:1a:1d:4d:44:5c:19:a0:d6:67:df:91:
                    42:7b:c3:0c:97:0d:8b:ed:fa:d0:08:e8:54:1d:99:
                    1f:ea:dd:f6:76:9e:25:e8:14:4e:ab:52:3b:3c:38:
                    87:08:53:fb:a7:80:49:83:62:9e:f4:ad:3b:60:51:
                    a0:3d:65:3b:36:17:f5:69:8d:c6:55:4e:58:00:28:
                    5e:f1:ff:3f:76:03:f2:1b:82:b3:68:b6:50:1e:52:
                    2a:c6:05:87:fd:1e:10:58:2a:19:a6:b3:4d:81:ef:
                    33:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:29:9B:4A:50:BF:3F:8F:3F:19:F5:89:1E:BD:2F:D3:42:DC:07:31
            X509v3 Authority Key Identifier:
                keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/FB1BF574E7E411EC84283679C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.60.0/22
                  103.78.128.0/22
                IPv6:
                  2407:c180::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:31:d8:b9:0f:2c:bc:86:8a:6b:9f:07:db:0b:31:1e:09:d3:
         05:30:57:f9:c0:2c:8a:25:a5:5b:dc:81:9c:ba:e7:4a:75:ab:
         1d:ab:31:35:af:0b:13:7b:75:68:dd:98:b5:4f:65:d4:2a:86:
         35:9e:7f:cf:a8:73:8f:04:b1:ca:7e:70:16:49:6d:8e:54:1e:
         88:cb:0c:03:3a:3f:e9:ad:6c:9f:35:1e:1d:ac:ea:45:82:b8:
         f7:b7:75:32:8d:53:27:c7:ad:44:70:31:ec:c9:9a:c5:da:0b:
         48:70:78:70:4c:af:d4:94:6b:db:96:67:c5:e8:a6:27:60:d3:
         6c:75:bb:05:9d:c2:91:6d:94:03:cc:e1:be:f1:ff:49:03:10:
         4f:0b:30:63:c9:4a:60:a9:d6:8e:d4:16:f5:5c:fc:62:ea:5e:
         8a:d8:25:a0:f5:51:c3:9c:c3:dc:dc:ff:70:cd:34:8d:61:b6:
         d7:0e:29:07:28:06:9c:42:98:09:c4:0f:cf:31:06:ba:e5:e4:
         6f:a7:61:62:98:02:9f:d6:41:a1:bb:3d:f6:db:3b:cf:ed:f0:
         02:45:7a:89:9a:0a:bc:52:8e:be:ca:33:5f:ef:7d:03:07:83:
         f4:90:64:25:22:ef:65:17:d0:64:c3:0b:16:f3:d5:8c:f5:5b:
         8d:a1:0a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:33:50 2025 by rpki-client