This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/288F0B4A67EE11F0BC703D32C4F9AE02.roa
File:                     288F0B4A67EE11F0BC703D32C4F9AE02.roa (raw, json)
Hash identifier:          QWIMOAcgkWiXe8yL0VgndAt+yC73XVCYjGeK5FuwKuI=
Subject key identifier:   70:F5:31:2E:69:37:52:0B:D1:0D:59:AE:6D:77:09:6F:72:D3:FA:7F
Certificate issuer:       /CN=A913B6D4/serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED
Certificate serial:       06B2
Authority key identifier: 0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/288F0B4A67EE11F0BC703D32C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 21:35:17 +0000
ROA not before:           Thu 04 Dec 2025 21:35:17 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     32135
IP address blocks:        103.197.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl
                          rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714 (0x6b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B6D4, serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED
        Validity
            Not Before: Dec  4 21:35:17 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6931fe94-7387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:8d:a6:f7:00:d5:33:20:6c:d4:a3:3a:6f:
                    6c:71:3a:e5:8b:31:77:fa:c8:63:ad:45:f5:ec:ff:
                    e0:66:65:95:e9:4b:41:95:7a:29:74:b2:19:b9:ba:
                    05:71:25:5f:5d:4a:0b:c0:04:97:b8:10:55:f5:d3:
                    78:cc:cc:31:8a:47:f1:0d:b1:9c:e0:1c:d5:2f:bf:
                    b9:64:b0:3c:08:0f:c9:49:1c:33:9e:c3:e7:56:7a:
                    7c:5d:c1:34:bd:11:55:05:38:0b:63:17:7d:d0:1d:
                    4b:92:d1:63:34:44:99:f8:92:ff:29:87:2f:c4:fd:
                    03:5e:f6:c9:00:c5:a3:c8:ca:a7:d5:21:39:7e:97:
                    13:20:e2:82:01:7e:71:28:f7:7e:e3:d9:00:03:e5:
                    a7:2a:01:80:0b:fa:4f:cc:f3:0f:2f:61:6c:1a:ef:
                    80:e5:3b:f7:59:94:8e:3f:97:33:74:a6:4c:35:c5:
                    b1:2f:da:b6:4e:03:29:2c:9d:53:57:86:e7:ba:a1:
                    90:3e:d2:4c:87:56:b9:c5:4e:b3:73:3e:1c:13:45:
                    01:00:26:94:07:bb:80:80:66:18:b4:af:c9:cf:1b:
                    6c:ba:a9:ae:f6:43:1a:8d:d8:04:85:e0:79:b5:57:
                    71:04:a9:bf:e4:48:08:da:e4:be:66:4c:a5:66:0c:
                    65:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F5:31:2E:69:37:52:0B:D1:0D:59:AE:6D:77:09:6F:72:D3:FA:7F
            X509v3 Authority Key Identifier:
                keyid:0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/288F0B4A67EE11F0BC703D32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:d3:de:63:75:f5:cd:0b:f0:d0:9a:f6:fd:3b:96:35:0b:88:
         37:e0:12:0e:cf:5c:23:10:9e:20:8a:30:68:5b:bb:68:7f:5c:
         8f:9a:66:3d:eb:02:4e:f6:82:31:b2:64:06:78:a3:f6:4f:b6:
         43:c7:21:d2:14:a2:bc:37:7c:ce:3a:e8:83:3b:6c:eb:c7:f6:
         c6:da:3a:4a:b8:58:2d:6a:28:07:33:ad:d5:3f:8a:f9:96:70:
         f8:00:72:30:f3:25:16:9a:87:c1:e3:90:77:9f:b5:7f:21:87:
         7e:d8:33:b3:34:17:9c:0e:fa:b2:c1:95:2a:5b:06:4e:c3:93:
         61:b0:db:2a:c5:ff:33:49:0e:18:68:ba:f8:80:1d:94:de:79:
         57:a8:1f:f8:eb:e8:0a:ff:d0:cb:a8:cb:9d:42:48:cf:73:e9:
         7c:06:f2:ca:ef:5c:ad:43:8e:a7:94:ce:f2:a8:02:2e:5c:99:
         ee:e7:48:62:05:1a:5f:ed:14:1d:ec:93:da:bf:a1:82:b2:26:
         6d:96:d1:17:20:5c:f7:11:ca:9b:65:91:28:bf:04:a6:93:b6:
         88:c9:23:f9:24:56:56:a9:30:d8:31:65:1c:ba:b7:77:83:2b:
         06:b3:78:32:77:ce:00:58:1d:35:1e:5c:0c:a8:45:55:17:b3:
         92:78:75:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:04:00 2025 by rpki-client