This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa
File:                     0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (raw, json)
Hash identifier:          WYVGzlUOokIEqc6nVBCw4EkY//RM5SfsZA3dIIIOBug=
Subject key identifier:   98:F7:B3:03:BF:16:1E:81:55:B3:3B:72:F4:9B:6D:CB:53:65:3F:47
Certificate issuer:       /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Certificate serial:       01E0
Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa
Signing time:             Wed 17 Dec 2025 03:22:22 +0000
ROA not before:           Wed 17 Dec 2025 03:22:22 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139716
IP address blocks:        103.175.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl
                          rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143848, serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
        Validity
            Not Before: Dec 17 03:22:22 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=694221ed-654c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:cb:57:13:4d:94:08:b2:1a:90:71:b2:56:
                    9b:0d:0f:30:f0:0e:8c:73:01:95:e8:f0:14:31:7f:
                    05:6d:c1:3f:43:8f:00:d4:2c:b4:82:65:9a:35:93:
                    e1:7c:74:3e:00:ce:1c:cd:6b:65:cd:d8:2b:49:f4:
                    aa:06:b9:2b:02:a2:94:bf:10:42:8a:f0:d1:05:21:
                    3f:4d:64:6a:72:5e:69:90:25:4d:f5:f6:28:7c:bc:
                    a4:33:aa:c9:40:2b:9c:34:42:67:92:fb:56:51:a9:
                    99:34:e7:91:24:8b:b2:d3:60:40:eb:68:e6:29:a5:
                    73:5d:00:0c:a7:6f:12:0c:0d:7a:63:cd:f1:35:29:
                    82:cd:d5:8f:22:a4:6d:11:05:b2:68:10:5f:b8:b9:
                    20:98:3a:4d:70:96:b6:84:10:dd:9e:5c:0f:11:30:
                    ae:0f:f0:cc:25:88:4e:15:dd:99:f6:4d:2a:bd:72:
                    92:5c:14:13:36:62:19:9a:63:f9:0b:a7:d2:17:23:
                    3f:18:a2:3b:49:df:6f:5d:02:14:28:0a:d6:e1:e3:
                    6e:c0:d5:ce:6b:c3:51:9d:6c:2c:6f:f6:d7:fc:0d:
                    b9:be:c1:4e:de:b0:01:73:a6:3d:81:d7:b8:d0:d9:
                    ac:fa:14:06:70:a1:66:06:5c:ff:0a:fd:f5:a0:ba:
                    2a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F7:B3:03:BF:16:1E:81:55:B3:3B:72:F4:9B:6D:CB:53:65:3F:47
            X509v3 Authority Key Identifier:
                keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:ef:25:13:95:1c:55:6b:e5:3a:f3:25:01:be:6f:c5:d1:23:
         2b:83:1d:fc:9b:a5:73:65:b6:84:89:74:e8:74:75:35:a3:eb:
         7f:8c:1f:e2:ca:86:45:88:37:d1:37:c7:ed:01:b8:b6:84:bd:
         bb:1d:62:c7:2e:5f:5f:fd:e1:ba:e0:0d:ad:e3:89:c6:14:a5:
         ff:20:cc:70:7c:7c:80:9d:ff:d6:ce:f1:4d:da:5c:ac:19:1f:
         1b:8f:4b:eb:bb:c9:3f:0d:46:7c:8b:b2:35:19:41:58:93:78:
         3a:25:4c:cf:12:58:2b:fa:ea:95:7d:6d:ca:58:17:69:42:2d:
         66:41:02:bd:2d:0c:23:ad:d0:f0:93:19:f2:c9:a2:43:43:fd:
         1a:fc:f9:bf:5e:23:bd:68:74:2e:c7:51:21:fe:fe:5e:19:fd:
         e3:01:45:a7:aa:cf:76:2a:fa:54:7e:8e:4a:0f:f3:18:37:b3:
         64:dd:9f:3d:1f:3e:a8:39:df:ae:64:05:6b:8f:53:8e:9e:ec:
         5c:a1:c2:fa:bc:8c:d5:91:66:da:cd:28:14:78:87:c2:e0:4b:
         d9:d8:22:fa:2d:7a:79:0b:ac:08:2d:bf:b2:87:55:76:58:04:
         d0:2d:45:56:dd:5b:fa:d9:7b:25:06:b1:b3:91:43:7c:67:4d:
         f7:76:8e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:05:58 2025 by rpki-client