This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/5A306016D15111EE98E6801EC4F9AE02.roa
File:                     5A306016D15111EE98E6801EC4F9AE02.roa (raw, json)
Hash identifier:          0iX8GWVZfHTiPTTq9om3cBPBNC8DR5QF75DufZZXDYg=
Subject key identifier:   29:4C:F9:3E:BE:85:2C:AA:B6:C8:1A:98:3F:42:67:02:93:34:FE:E0
Certificate issuer:       /CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573
Certificate serial:       0573
Authority key identifier: 46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/5A306016D15111EE98E6801EC4F9AE02.roa
Signing time:             Sun 30 Nov 2025 22:54:55 +0000
ROA not before:           Sun 30 Nov 2025 22:54:55 +0000
ROA not after:            Mon 30 Mar 2026 00:00:00 +0000
asID:                     51847
IP address blocks:        103.172.182.0/24 maxlen: 24
                          103.172.183.0/24 maxlen: 24
                          2407:d840:1::/48 maxlen: 48
                          2407:d840:2::/48 maxlen: 48
                          2407:d840:3:1::/64 maxlen: 64
                          2407:d840:50::/44 maxlen: 44
                          2407:d840:50::/48 maxlen: 48
                          2407:d840:51::/48 maxlen: 48
                          2407:d840:52::/48 maxlen: 48
                          2407:d840:53::/48 maxlen: 48
                          2407:d840:60::/44 maxlen: 44
                          2407:d840:60::/48 maxlen: 48
                          2407:d840:61::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl
                          rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 22:27:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1395 (0x573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B2EC, serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573
        Validity
            Not Before: Nov 30 22:54:55 2025 GMT
            Not After : Mar 30 00:00:00 2026 GMT
        Subject: CN=692ccb3f-2821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0e:05:93:a8:39:cf:07:58:d5:36:cf:3b:af:
                    72:d7:e8:9b:54:b2:68:60:79:73:17:28:87:85:0d:
                    7f:9c:12:c0:61:8c:e8:7a:e7:d4:95:3d:88:77:8f:
                    0b:8d:7e:7f:7d:f3:1d:60:11:16:14:0c:a3:f6:a5:
                    cc:15:ab:6c:96:31:15:2c:2b:52:24:f0:38:2a:00:
                    b2:9b:bb:8c:6c:de:af:d5:42:f6:48:8d:ed:5a:22:
                    f9:4a:0a:c1:9b:15:2c:a7:47:42:bf:43:59:03:99:
                    7e:24:3d:a8:fd:1d:39:8b:a5:fe:a6:41:56:54:33:
                    3c:0b:fd:19:9e:9e:31:0d:1e:f2:8f:03:55:a0:33:
                    c4:a7:f2:88:65:81:ab:0e:86:fb:ca:d2:70:87:a2:
                    b7:e9:4d:08:7c:32:60:1a:db:0c:23:ef:df:02:a1:
                    7e:1d:ff:ca:ea:c7:db:53:da:49:21:bc:9d:ad:4b:
                    bb:14:a8:02:fb:57:4c:fb:11:3a:b2:54:45:24:cf:
                    1c:f3:0b:1a:56:38:b7:4a:18:b5:84:96:9d:a1:53:
                    fe:61:d6:1f:23:95:fb:cb:5e:a9:95:fb:47:58:4f:
                    17:49:c3:4a:84:9e:26:44:e6:28:f5:a1:09:2a:6b:
                    ad:ae:53:0b:a5:46:cc:0c:18:d7:b4:ab:4a:50:d8:
                    22:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4C:F9:3E:BE:85:2C:AA:B6:C8:1A:98:3F:42:67:02:93:34:FE:E0
            X509v3 Authority Key Identifier:
                keyid:46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/5A306016D15111EE98E6801EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.182.0/23
                IPv6:
                  2407:d840:1::-2407:d840:2:ffff:ffff:ffff:ffff:ffff
                  2407:d840:3:1::/64
                  2407:d840:50::-2407:d840:6f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         37:2d:89:b7:81:2b:cd:73:51:c4:74:11:53:73:04:78:3c:be:
         26:17:a6:11:56:22:63:96:a6:cc:03:f2:ec:1b:f2:02:dc:1c:
         85:59:69:04:f9:1a:4e:58:b1:12:84:5e:6a:f9:d2:23:c2:75:
         d1:44:84:f4:db:91:79:fc:0e:38:8b:b6:60:3a:9c:bf:07:39:
         c0:bc:e9:5a:06:0d:dc:55:ab:a5:c4:1d:af:6a:7c:22:bd:16:
         37:7c:f6:e2:2f:a6:36:84:f5:4a:f8:d6:9b:e6:a2:36:0f:fc:
         0c:44:dd:2c:c9:5e:2f:42:63:31:c8:c6:28:31:cf:7e:08:c9:
         cb:bf:f8:08:79:63:1a:29:69:65:6a:55:06:13:c3:58:90:d1:
         9d:15:90:10:bd:e2:96:c1:10:3b:a1:9d:0f:84:84:01:80:9c:
         26:30:0c:09:6b:7b:4f:09:d5:0b:ec:a0:c4:d6:84:cd:ed:f5:
         0b:0c:1e:64:66:95:f4:04:f2:61:cd:8a:6d:7e:cb:8f:37:79:
         ac:13:be:66:b6:0b:bc:5c:b1:00:77:f0:2c:51:57:9a:71:8d:
         04:0f:4f:53:f2:98:28:c7:35:b9:ce:7d:9d:4d:ae:5a:7e:98:
         44:de:54:42:ad:7e:d5:fc:9d:6e:0b:42:27:1d:ab:ca:97:d3:
         01:91:81:ea
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIyRUMxMTAvBgNVBAUTKDQ2OTIyQzU2NTQ0MDA0MEJEOTlBRkQ0RTMyOUVEOURF
QjZGOTI1NzMwHhcNMjUxMTMwMjI1NDU1WhcNMjYwMzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJjY2IzZi0yODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4w4Fk6g5zwdY1TbPO69y1+ibVLJoYHlzFyiHhQ1/nBLAYYzoeufUlT2Id48L
jX5/ffMdYBEWFAyj9qXMFatsljEVLCtSJPA4KgCym7uMbN6v1UL2SI3tWiL5SgrB
mxUsp0dCv0NZA5l+JD2o/R05i6X+pkFWVDM8C/0Znp4xDR7yjwNVoDPEp/KIZYGr
Dob7ytJwh6K36U0IfDJgGtsMI+/fAqF+Hf/K6sfbU9pJIbydrUu7FKgC+1dM+xE6
slRFJM8c8wsaVji3Shi1hJadoVP+YdYfI5X7y16plftHWE8XScNKhJ4mROYo9aEJ
KmutrlMLpUbMDBjXtKtKUNgi6QIDAQABo4IC0DCCAswwHQYDVR0OBBYEFClM+T6+
hSyqtsgamD9CZwKTNP7gMB8GA1UdIwQYMBaAFEaSLFZUQAQL2Zr9TjKe2d62+SVz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJFQy84NDI3NTk1NjJC
MDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJBdlptdjFPTXA3WjNyYjVK
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JwSXNWbFJBQkF2Wm12MU9NcDdaM3JiNUpYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUIyRUMvODQyNzU5NTYyQjA5MTFFQzg1MUI5ODBFQzRGOUFFMDIvNUEzMDYwMTZE
MTUxMTFFRTk4RTY4MDFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWgYIKwYBBQUHAQcBAf8E
SzBJMAwEAgABMAYDBAFnrLYwOQQCAAIwMzASAwcAJAfYQAABAwcAJAfYQAACAwkA
JAfYQAADAAEwEgMHBCQH2EAAUAMHBCQH2EAAYDANBgkqhkiG9w0BAQsFAAOCAQEA
Ny2Jt4ErzXNRxHQRU3MEeDy+JhemEVYiY5amzAPy7BvyAtwchVlpBPkaTlixEoRe
avnSI8J10USE9NuRefwOOIu2YDqcvwc5wLzpWgYN3FWrpcQdr2p8Ir0WN3z24i+m
NoT1SvjWm+aiNg/8DETdLMleL0JjMcjGKDHPfgjJy7/4CHljGilpZWpVBhPDWJDR
nRWQEL3ilsEQO6GdD4SEAYCcJjAMCWt7TwnVC+ygxNaEze31CwweZGaV9ATyYc2K
bX7Ljzd5rBO+ZrYLvFyxAHfwLFFXmnGNBA9PU/KYKMc1uc59nU2uWn6YRN5UQq1+
1fydbgtCJx2rypfTAZGB6g==
-----END CERTIFICATE-----
Generated at Wed Dec 3 18:56:06 2025 by rpki-client