This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/9427EF0A7CA411F09AE49B57C4F9AE02.roa
File:                     9427EF0A7CA411F09AE49B57C4F9AE02.roa (raw, json)
Hash identifier:          s4RIDWdi7orMllw9+ORFUjTr5A9upmm6LGjN/P5C25M=
Subject key identifier:   76:0B:DE:BB:17:99:BA:54:D8:48:FF:A5:FA:7B:4D:53:0D:1F:DB:41
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       357E
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/9427EF0A7CA411F09AE49B57C4F9AE02.roa
Signing time:             Fri 21 Nov 2025 06:38:41 +0000
ROA not before:           Fri 21 Nov 2025 06:38:41 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     7616
IP address blocks:        203.130.128.0/19 maxlen: 20
                          203.130.146.0/24 maxlen: 24
                          203.147.10.0/24 maxlen: 24
                          203.147.16.0/20 maxlen: 21
                          203.147.31.0/24 maxlen: 24
                          203.147.32.0/20 maxlen: 21
                          203.147.42.0/24 maxlen: 24
                          203.147.48.0/20 maxlen: 20
                          203.147.54.0/24 maxlen: 24
                          203.156.18.0/24 maxlen: 24
                          203.156.48.0/20 maxlen: 20
                          203.156.64.0/20 maxlen: 20
                          203.156.80.0/20 maxlen: 20
                          203.156.95.0/24 maxlen: 24
                          203.156.128.0/18 maxlen: 20
                          203.156.146.0/24 maxlen: 24
                          203.156.147.0/24 maxlen: 24
                          203.156.148.0/24 maxlen: 24
                          203.156.149.0/24 maxlen: 24
                          203.156.150.0/24 maxlen: 24
                          203.156.152.0/21 maxlen: 21
                          203.156.152.0/24 maxlen: 24
                          2403:bf00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13694 (0x357e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Nov 21 06:38:41 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=692008f1-2814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fc:cc:d0:49:c9:2b:40:a8:54:69:06:c8:24:
                    3f:f7:76:56:0c:10:3e:f6:42:f0:66:4c:b5:83:3f:
                    2d:cb:d6:5f:99:ef:72:69:0e:79:5e:e5:2a:d1:9c:
                    79:c9:6c:cb:fd:29:a5:c9:05:a3:d5:56:e7:95:c8:
                    95:4c:13:30:3c:7d:f6:67:41:5f:49:47:68:52:75:
                    e8:15:e9:fa:8a:de:b9:12:dc:e4:64:24:8f:50:db:
                    fe:71:0f:63:38:00:a5:c3:d3:92:b3:2a:25:bb:6e:
                    cf:d3:12:f5:71:42:90:b0:58:69:bf:9f:b1:9c:91:
                    d1:af:f2:43:26:35:5d:b7:66:95:47:92:15:3a:c5:
                    b5:3a:bd:52:b8:ee:34:a9:c7:fa:0b:5a:fc:b1:f8:
                    90:b7:e9:86:b6:64:11:ec:05:cd:e2:e1:7b:dc:c6:
                    4a:53:d8:0e:32:f2:6f:11:6d:ef:8e:e1:9f:48:19:
                    33:98:5c:b3:3a:04:2c:fe:50:69:60:f9:2d:7c:e0:
                    c4:f9:3e:2c:90:cc:9a:98:75:ef:5b:83:93:60:fa:
                    62:1c:26:4e:0b:7d:10:3f:40:91:9e:f0:70:ca:a2:
                    9c:85:d8:33:44:77:d4:b8:fe:92:6a:21:f7:f9:94:
                    ff:47:2c:96:ce:52:f6:d9:35:a5:97:70:61:5a:38:
                    fb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0B:DE:BB:17:99:BA:54:D8:48:FF:A5:FA:7B:4D:53:0D:1F:DB:41
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/9427EF0A7CA411F09AE49B57C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.130.128.0/19
                  203.147.10.0/24
                  203.147.16.0-203.147.63.255
                  203.156.18.0/24
                  203.156.48.0-203.156.95.255
                  203.156.128.0/18
                IPv6:
                  2403:bf00::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:90:af:8d:c3:68:ac:97:3f:88:dc:5a:aa:54:63:62:93:3c:
         a4:83:0e:47:e4:16:88:2e:4d:b7:36:5d:41:67:85:b0:5d:10:
         aa:23:13:67:f0:7f:9d:e6:07:8e:2e:73:35:28:56:c2:d8:0d:
         7e:76:87:95:45:bf:52:d8:03:98:91:22:dc:fe:3a:71:9c:74:
         b7:b0:ea:a2:86:b9:e9:d7:bb:f4:0e:80:e4:77:b6:ce:e3:dd:
         00:1d:f4:70:e2:40:69:96:8c:96:b4:42:ce:39:62:4b:16:83:
         eb:e7:44:67:ad:d5:8e:33:8d:b5:00:b9:54:aa:db:d7:0b:cd:
         6b:17:99:78:a3:5b:80:a3:41:69:0d:84:71:44:2a:85:e3:fa:
         b5:1e:90:dc:f1:b0:fb:47:aa:64:24:63:2b:98:47:7b:fa:5e:
         b4:2d:4f:ec:1c:3f:14:af:cb:2f:5e:2e:f8:3c:b9:d1:9b:96:
         33:fc:1a:00:47:61:11:70:10:f7:b1:a3:58:4c:f1:cd:ef:0f:
         19:42:31:56:7a:57:45:c1:6f:f5:05:82:b7:94:c9:2f:51:cc:
         4f:d5:50:bd:c4:2b:3b:a8:a7:cd:c0:16:53:7e:ba:9f:87:ec:
         14:84:73:86:ce:9a:93:8b:d8:bc:0f:bc:fc:63:b2:95:00:1c:
         49:82:16:25
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgICNX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5
QzhGNjU5MEQwHhcNMjUxMTIxMDYzODQxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTIwMDhmMS0yODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1vzM0EnJK0CoVGkGyCQ/93ZWDBA+9kLwZky1gz8ty9Zfme9yaQ55XuUq0Zx5
yWzL/SmlyQWj1VbnlciVTBMwPH32Z0FfSUdoUnXoFen6it65EtzkZCSPUNv+cQ9j
OAClw9OSsyolu27P0xL1cUKQsFhpv5+xnJHRr/JDJjVdt2aVR5IVOsW1Or1SuO40
qcf6C1r8sfiQt+mGtmQR7AXN4uF73MZKU9gOMvJvEW3vjuGfSBkzmFyzOgQs/lBp
YPktfODE+T4skMyamHXvW4OTYPpiHCZOC30QP0CRnvBwyqKchdgzRHfUuP6SaiH3
+ZT/RyyWzlL22TWll3BhWjj7zQIDAQABo4IC0jCCAs4wHQYDVR0OBBYEFHYL3rsX
mbpU2Ej/pfp7TVMNH9tBMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE
OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvOTQyN0VGMEE3
Q0E0MTFGMDlBRTQ5QjU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXAYIKwYBBQUHAQcBAf8E
TTBLMDoEAgABMDQDBAXLgoADBADLkwowDAMEBMuTEAMEBsuTAAMEAMucEjAMAwQE
y5wwAwQFy5xAAwQGy5yAMA0EAgACMAcDBQAkA78AMA0GCSqGSIb3DQEBCwUAA4IB
AQCckK+Nw2islz+I3FqqVGNikzykgw5H5BaILk23Nl1BZ4WwXRCqIxNn8H+d5geO
LnM1KFbC2A1+doeVRb9S2AOYkSLc/jpxnHS3sOqihrnp17v0DoDkd7bO490AHfRw
4kBployWtELOOWJLFoPr50RnrdWOM421ALlUqtvXC81rF5l4o1uAo0FpDYRxRCqF
4/q1HpDc8bD7R6pkJGMrmEd7+l60LU/sHD8Ur8svXi74PLnRm5Yz/BoAR2ERcBD3
saNYTPHN7w8ZQjFWeldFwW/1BYK3lMkvUcxP1VC9xCs7qKfNwBZTfrqfh+wUhHOG
zpqTi9i8D7z8Y7KVABxJghYl
-----END CERTIFICATE-----
Generated at Sun Dec 7 22:49:11 2025 by rpki-client