This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/57A86D66553F11EBA47EB279C4F9AE02.roa
File:                     57A86D66553F11EBA47EB279C4F9AE02.roa (raw, json)
Hash identifier:          Ao2MdtIoRl87gC2mtEAscioKdKAFmPGREnFCP9lsjgM=
Subject key identifier:   DD:BD:97:18:41:84:FB:A1:14:AC:50:A1:61:EC:B6:39:57:1A:C3:7A
Certificate issuer:       /CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E
Certificate serial:       0F54
Authority key identifier: E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/57A86D66553F11EBA47EB279C4F9AE02.roa
Signing time:             Fri 28 Nov 2025 17:20:20 +0000
ROA not before:           Fri 28 Nov 2025 17:20:19 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     56304
IP address blocks:        103.243.160.0/24 maxlen: 24
                          2400:3d80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl
                          rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3924 (0xf54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D0B6, serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E
        Validity
            Not Before: Nov 28 17:20:19 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6929d9d3-565c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c5:66:ac:f6:00:4d:69:48:c2:f7:82:19:44:
                    09:eb:48:42:11:aa:de:72:9c:f8:ba:e8:13:da:26:
                    4c:a3:b9:b4:e1:3b:9d:9a:1e:cc:7a:0c:0f:e3:3d:
                    c8:50:8b:3b:8c:e9:05:9c:cc:ed:c9:31:a8:21:e7:
                    84:ae:e5:b4:c1:c1:68:df:44:88:c5:2e:22:ff:91:
                    81:1d:4c:3f:ad:b2:ec:3c:79:e5:b0:65:a3:e0:81:
                    6d:ca:05:e9:c7:86:37:34:97:ca:96:67:a1:8f:04:
                    39:08:0c:36:ff:27:34:68:60:ba:38:cc:46:bc:9e:
                    b4:78:73:6a:ad:9b:a9:b4:b9:88:86:16:69:88:2c:
                    8e:e2:74:f6:dc:8f:cf:3d:b9:23:e0:07:a7:11:4c:
                    86:88:7a:45:ee:b7:ff:b2:3c:e6:a3:83:91:9f:b0:
                    d3:b4:0b:0e:b9:8d:41:e4:b3:1d:e4:ca:d1:94:da:
                    05:b6:90:ca:e7:2c:b8:66:67:df:eb:83:15:0f:9b:
                    d9:77:8f:7d:a1:52:e9:0f:38:b5:ad:55:de:48:15:
                    ac:f9:6b:5b:46:5e:ca:b0:86:5e:a7:ee:43:bd:1c:
                    9a:ed:61:3a:eb:53:c0:18:42:67:90:6b:f0:7c:70:
                    ba:c8:28:43:f1:b7:6e:c7:b7:72:dd:15:06:17:46:
                    78:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BD:97:18:41:84:FB:A1:14:AC:50:A1:61:EC:B6:39:57:1A:C3:7A
            X509v3 Authority Key Identifier:
                keyid:E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/57A86D66553F11EBA47EB279C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.160.0/24
                IPv6:
                  2400:3d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:01:3a:73:d0:6f:71:ca:b2:04:15:23:4e:49:ea:60:90:13:
         a2:29:d6:7b:44:d4:47:35:cd:ed:56:22:f1:f5:2b:c9:3a:c0:
         3b:83:bd:25:b1:25:fa:ea:fe:e9:17:d0:34:11:87:8a:a3:d3:
         7d:e2:0c:a7:ce:9e:2d:51:09:63:38:2a:2a:5a:d8:e7:fe:1a:
         b7:03:3a:05:3e:8f:e2:f0:ea:38:58:f7:17:7f:b7:43:31:cd:
         32:03:db:f7:64:c3:c7:ba:b9:b6:98:bb:19:d8:27:d2:8c:0f:
         c8:29:0a:50:5a:48:5a:f2:c7:f7:53:48:74:6c:60:61:11:ad:
         7b:29:91:30:84:ea:48:ec:73:b1:ff:1b:1e:a1:25:63:c4:d8:
         30:fe:0c:07:04:24:49:e0:ff:a2:bd:37:ec:22:48:20:57:6f:
         37:ec:b2:75:fd:de:c1:af:b5:a2:4e:66:88:08:ac:66:bd:f7:
         e3:84:58:71:46:2d:fa:9d:a5:93:ef:78:99:e2:76:3c:d6:5e:
         60:8c:0b:09:cc:28:f6:ea:c8:f3:47:12:a8:e8:b7:f0:8f:28:
         15:12:14:ad:c2:a0:54:8a:87:30:0b:4e:af:7b:1d:6d:33:42:
         89:eb:de:11:9d:dd:30:e8:7d:4b:0f:6e:20:82:ad:f8:1a:bf:
         89:8a:ef:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 11:12:15 2025 by rpki-client