This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/7452F54C7D7D11F09C982A7CC4F9AE02.roa
File:                     7452F54C7D7D11F09C982A7CC4F9AE02.roa (raw, json)
Hash identifier:          orW22gR1weyQBFJq2xht8k2Oky/95mfVvWkFfSQOdy0=
Subject key identifier:   97:C9:3F:2E:E6:3A:4C:78:3C:FA:EB:A0:D1:C8:01:7C:2F:ED:01:AE
Certificate issuer:       /CN=A915E4A4/serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB
Certificate serial:       3C
Authority key identifier: C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/7452F54C7D7D11F09C982A7CC4F9AE02.roa
Signing time:             Tue 09 Dec 2025 05:44:15 +0000
ROA not before:           Tue 09 Dec 2025 05:44:15 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132430
IP address blocks:        103.80.251.0/24 maxlen: 24
                          103.189.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl
                          rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E4A4, serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB
        Validity
            Not Before: Dec  9 05:44:15 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6937b72e-e457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:48:99:9c:ab:c6:20:1a:15:68:30:5a:47:ea:
                    3c:2a:e3:cd:1e:23:11:f3:d9:5d:9e:c6:a4:e0:f9:
                    9a:52:59:29:26:e2:65:f8:0b:dc:f4:6c:2c:f6:5e:
                    f2:cc:e3:c7:11:8e:2b:86:da:b0:7f:aa:bb:89:98:
                    99:82:04:1b:40:34:0b:b4:4f:a2:00:01:5f:9f:59:
                    b1:1d:54:3f:dd:be:f4:2b:0c:52:50:c8:46:42:83:
                    81:8e:ac:26:02:f2:46:d5:81:3d:6e:df:57:ec:76:
                    85:b8:b6:b5:f1:b9:4c:46:a6:85:1f:ce:22:1b:e1:
                    fd:bb:5e:3e:35:7c:90:01:ec:2d:85:4f:e4:60:76:
                    46:cb:43:15:43:a6:ad:67:59:9a:72:c0:02:5f:ef:
                    fb:14:a2:cc:be:6c:cf:ac:b0:21:3c:8b:83:65:b4:
                    a7:d1:32:02:07:de:ba:10:56:12:e6:f6:4c:c2:bf:
                    b8:3c:60:ba:2f:a8:f4:bc:6c:57:36:da:5f:39:dd:
                    c6:4b:39:0d:af:0a:25:d5:de:d8:59:69:bf:cf:61:
                    94:6e:e1:4e:19:c7:be:f9:35:72:ed:40:5e:2a:b3:
                    c1:67:9a:6e:f5:b8:2f:09:52:98:68:59:b3:ce:b9:
                    08:2a:d8:22:1d:04:7f:33:2f:80:78:96:3f:dd:e0:
                    e3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C9:3F:2E:E6:3A:4C:78:3C:FA:EB:A0:D1:C8:01:7C:2F:ED:01:AE
            X509v3 Authority Key Identifier:
                keyid:C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/7452F54C7D7D11F09C982A7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.251.0/24
                  103.189.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:fc:1f:18:da:07:d1:5e:0b:6f:5d:88:f9:fd:59:bb:ce:6e:
         b7:1d:07:b7:7c:01:be:e0:b9:a8:48:eb:e3:57:59:2d:8b:c6:
         ef:16:8f:21:20:b5:7f:8e:ba:ee:52:44:7f:00:ce:df:35:64:
         ae:42:d7:7a:3f:0d:44:b0:c3:31:54:af:92:b0:b1:6b:ae:d6:
         78:c3:fe:e6:e1:26:ba:e2:4d:51:1e:7e:98:50:da:a0:cf:d1:
         60:3e:3f:38:06:6b:f5:75:5a:1c:39:f6:02:c3:59:f8:94:2f:
         74:18:59:2f:96:0f:06:f9:71:a2:74:90:d1:34:32:7e:99:18:
         6f:40:5f:66:eb:d8:bf:91:7a:68:64:b2:21:41:bd:01:cd:37:
         e0:d1:27:28:91:e9:f3:a0:4c:de:e4:af:a2:16:b1:b4:45:4d:
         67:ae:40:2b:ff:0b:b5:cb:c8:7c:70:db:bd:9f:9b:6f:94:72:
         00:61:47:3d:14:93:43:9f:33:cf:a3:bf:6f:39:cb:40:44:23:
         c8:7b:cf:0a:2a:10:5e:31:b0:49:ef:7c:a5:c0:12:a1:78:16:
         90:60:25:6a:aa:05:e9:98:59:59:0a:ad:5f:0a:8c:ca:64:9c:
         3e:76:1e:23:97:e4:83:21:79:68:9f:80:14:44:23:17:50:9c:
         f3:81:4f:42
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RTRBNDExMC8GA1UEBRMoQzkzRjhGNjBGMDY3RTI0QzFCRkNGMjNCMkNGNDIyQkQ1
ODY0QkVDQjAeFw0yNTEyMDkwNTQ0MTVaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MzdiNzJlLWU0NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfSJmcq8YgGhVoMFpH6jwq480eIxHz2V2exqTg+ZpSWSkm4mX4C9z0bCz2XvLM
48cRjiuG2rB/qruJmJmCBBtANAu0T6IAAV+fWbEdVD/dvvQrDFJQyEZCg4GOrCYC
8kbVgT1u31fsdoW4trXxuUxGpoUfziIb4f27Xj41fJAB7C2FT+RgdkbLQxVDpq1n
WZpywAJf7/sUosy+bM+ssCE8i4NltKfRMgIH3roQVhLm9kzCv7g8YLovqPS8bFc2
2l853cZLOQ2vCiXV3thZab/PYZRu4U4Zx775NXLtQF4qs8Fnmm71uC8JUphoWbPO
uQgq2CIdBH8zL4B4lj/d4ONpAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUl8k/LuY6
THg8+uug0cgBfC/tAa4wHwYDVR0jBBgwFoAUyT+PYPBn4kwb/PI7LPQivVhkvssw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFNEE0L0VBQjE3QkY2N0Q3
QzExRjA5NkU1OTU3OUM0RjlBRTAyL3lULVBZUEJuNGt3Yl9QSTdMUFFpdlZoa3Zz
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveVQtUFlQQm40a3diX1BJN0xQUWl2VmhrdnNzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTRBNC9FQUIxN0JGNjdEN0MxMUYwOTZFNTk1NzlDNEY5QUUwMi83NDUyRjU0QzdE
N0QxMUYwOUM5ODJBN0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAGdQ+wMEAGe90jANBgkqhkiG9w0BAQsFAAOCAQEAx/wfGNoH
0V4Lb12I+f1Zu85utx0Ht3wBvuC5qEjr41dZLYvG7xaPISC1f4667lJEfwDO3zVk
rkLXej8NRLDDMVSvkrCxa67WeMP+5uEmuuJNUR5+mFDaoM/RYD4/OAZr9XVaHDn2
AsNZ+JQvdBhZL5YPBvlxonSQ0TQyfpkYb0BfZuvYv5F6aGSyIUG9Ac034NEnKJHp
86BM3uSvohaxtEVNZ65AK/8LtcvIfHDbvZ+bb5RyAGFHPRSTQ58zz6O/bznLQEQj
yHvPCioQXjGwSe98pcASoXgWkGAlaqoF6ZhZWQqtXwqMymScPnYeI5fkgyF5aJ+A
FEQjF1Cc84FPQg==
-----END CERTIFICATE-----
Generated at Wed Dec 24 22:57:02 2025 by rpki-client