This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa
File:                     29BE072046FF11EF9A76C461C4F9AE02.roa (raw, json)
Hash identifier:          oM6Sf/6xTPeOvH01knFGEFzZ6mpJcGKCSF9Jna1G/cw=
Subject key identifier:   92:1A:25:62:D8:0A:78:B0:EC:46:15:DC:19:45:AC:A1:C1:8C:FE:44
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       095B
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa
Signing time:             Fri 19 Dec 2025 00:24:15 +0000
ROA not before:           Fri 19 Dec 2025 00:24:15 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139468
IP address blocks:        45.116.134.0/23 maxlen: 23
                          45.116.134.0/24 maxlen: 24
                          103.9.94.0/23 maxlen: 23
                          103.28.28.0/22 maxlen: 22
                          103.37.132.0/22 maxlen: 22
                          103.37.134.0/23 maxlen: 23
                          103.40.216.0/22 maxlen: 22
                          103.240.12.0/22 maxlen: 22
                          103.240.13.0/24 maxlen: 24
                          103.245.4.0/22 maxlen: 22
                          103.245.4.0/23 maxlen: 23
                          103.245.7.0/24 maxlen: 24
                          2405:9e40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 19:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2395 (0x95b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Dec 19 00:24:15 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69449b2f-8b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:8d:86:f0:7e:9a:14:8d:d2:9c:1b:b1:08:
                    7c:04:c5:50:d2:f6:b3:05:9c:4d:21:19:3a:fa:d9:
                    96:b2:b0:11:2d:55:dd:34:00:11:7a:4c:01:62:19:
                    a7:28:6f:f8:a8:0f:57:17:4b:7d:ec:75:9b:fc:90:
                    bc:3b:3a:3d:ca:74:86:b0:cf:c5:20:68:4d:9d:2a:
                    ce:12:23:38:32:78:22:47:80:41:41:23:7a:67:99:
                    3b:d3:17:32:f8:3d:a0:d4:e7:60:6d:46:2d:08:39:
                    db:7f:30:62:ce:cc:8e:50:47:e4:c2:41:e0:ba:f2:
                    2e:49:65:e3:8f:47:53:71:3f:31:d8:85:f5:92:46:
                    26:28:03:d9:76:b1:29:ad:9d:b9:d7:75:83:69:a1:
                    3f:1c:ac:f1:60:5a:f0:32:80:54:59:53:12:d1:5a:
                    7c:37:7f:8b:8e:7b:20:58:12:ea:55:c8:c5:88:60:
                    40:cc:05:a1:6c:57:65:e1:6b:04:d6:e4:2a:95:50:
                    dc:fb:25:ce:b8:c7:e4:72:cb:1e:90:48:28:99:a1:
                    2d:89:f8:7c:ce:0c:9e:c7:92:a2:c8:dd:8f:56:69:
                    57:18:c5:2e:4c:62:9c:6f:9f:6f:22:43:33:a3:64:
                    5d:aa:ca:81:d2:0e:8e:cc:91:f5:28:d2:7c:ed:bb:
                    ae:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1A:25:62:D8:0A:78:B0:EC:46:15:DC:19:45:AC:A1:C1:8C:FE:44
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.134.0/23
                  103.9.94.0/23
                  103.28.28.0/22
                  103.37.132.0/22
                  103.40.216.0/22
                  103.240.12.0/22
                  103.245.4.0/22
                IPv6:
                  2405:9e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:37:a1:df:07:cb:1f:b3:7e:30:8a:e7:66:cf:17:47:54:34:
         77:88:1b:d3:2f:d1:15:79:3b:5a:5e:77:18:db:91:4f:02:3d:
         e4:96:2e:b6:e0:34:86:46:10:e1:ad:0d:68:e0:33:41:56:54:
         0d:95:9c:6c:dc:f4:ab:aa:d4:36:8e:7b:49:8e:50:67:7c:e5:
         fd:4f:81:50:10:a4:9c:3e:27:c9:a1:b0:c6:3d:0c:98:cf:3d:
         9c:1b:2d:e4:4f:9d:c9:37:f4:67:9b:b4:eb:1c:89:c4:86:ed:
         80:a3:57:d1:4e:66:74:79:28:26:af:bb:3f:17:da:0a:b9:fc:
         be:0c:68:13:a8:4c:f4:17:9c:2c:3b:4d:10:bc:5b:40:45:26:
         45:df:84:ae:3a:c3:70:29:e5:cf:79:a3:98:dd:5a:48:31:14:
         46:50:d9:66:54:f1:66:31:4e:96:8d:a0:dc:76:65:48:9e:ca:
         1b:34:4a:0d:00:3a:4b:f8:d5:26:a8:ea:79:ee:15:32:ca:70:
         85:1b:f8:0c:de:54:b2:df:0e:a9:81:00:6b:31:0f:dc:23:72:
         2b:ba:85:e8:42:38:1c:63:98:72:c3:f8:0c:ee:11:77:76:35:
         6e:03:16:92:ea:d9:d9:33:87:fc:34:40:ee:83:08:64:c9:59:
         dc:fb:76:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:07:13 2025 by rpki-client