This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/B9FDAFA436D511F09007A616C4F9AE02.roa
File:                     B9FDAFA436D511F09007A616C4F9AE02.roa (raw, json)
Hash identifier:          /7H6pgF1GK4zfWE9tl/VxE0gsVHBKJxkQ410/jO8vFQ=
Subject key identifier:   D8:C0:6D:04:B4:59:80:E5:3F:7F:A1:67:BC:63:F7:1F:7D:44:FF:DE
Certificate issuer:       /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
Certificate serial:       05BC
Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/B9FDAFA436D511F09007A616C4F9AE02.roa
Signing time:             Thu 18 Dec 2025 23:18:57 +0000
ROA not before:           Thu 18 Dec 2025 23:18:57 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     55581
IP address blocks:        103.104.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl
                          rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1468 (0x5bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
        Validity
            Not Before: Dec 18 23:18:57 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69448be1-64c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:81:8b:99:4e:e2:b8:15:d9:3d:f7:b3:e9:
                    6d:78:c9:4f:91:5b:19:fd:90:23:f4:c7:2b:00:71:
                    60:27:69:07:3f:46:89:b9:54:9f:26:01:2e:08:00:
                    af:fc:a2:8f:27:14:c9:b1:90:c4:99:0c:20:50:b3:
                    0c:e3:c7:d9:1f:18:82:41:bf:9d:13:42:02:3d:7d:
                    32:9c:b6:0b:6c:15:e3:3e:43:53:28:cf:3e:e5:49:
                    25:a3:c1:37:27:86:ad:40:8f:be:63:1c:9c:84:67:
                    79:0f:8f:7e:1b:9b:6f:a9:6c:ba:cc:e6:72:9f:a8:
                    d7:47:bf:60:31:d6:bc:c9:13:f4:db:4d:82:31:18:
                    28:a1:65:8c:7b:29:d3:bb:96:72:ec:60:b6:ab:b1:
                    6e:dc:70:7b:12:7c:eb:87:01:e6:fc:d9:ba:38:75:
                    2b:e6:2e:bb:2c:33:ca:01:d8:ea:18:a8:eb:64:5f:
                    e3:f2:bf:f3:de:6d:59:c7:a8:cc:ad:8a:81:03:71:
                    15:6e:67:7a:16:b9:2c:62:72:49:bf:43:02:15:9a:
                    ab:bc:32:91:a7:84:4d:9c:73:82:76:98:1e:65:d5:
                    ad:c1:4e:bd:ad:86:12:a1:31:70:fe:55:5e:1a:7d:
                    69:1c:a9:9b:a7:41:8a:85:71:3a:f3:fd:1d:3a:66:
                    05:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C0:6D:04:B4:59:80:E5:3F:7F:A1:67:BC:63:F7:1F:7D:44:FF:DE
            X509v3 Authority Key Identifier:
                keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/B9FDAFA436D511F09007A616C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:6d:08:13:5a:63:5d:70:4d:46:c3:df:c3:ee:05:70:c4:e8:
         1d:33:c4:0f:2f:cc:72:23:51:16:18:90:52:0c:c4:e0:b8:3f:
         24:5a:45:35:9a:bf:47:20:6e:b1:41:36:5f:3b:92:93:39:3c:
         7b:91:d6:b2:f2:7e:f0:78:78:0c:8e:23:30:f4:e4:d3:62:3b:
         fa:be:eb:60:e3:bc:44:ad:dc:7b:43:87:3d:dc:82:67:19:3c:
         72:4d:21:60:d3:c3:af:3b:62:0b:f1:50:17:c2:ea:f5:7f:2f:
         12:e8:21:5b:6d:a9:db:d6:4a:3c:41:ea:f9:15:d2:4f:3b:16:
         f5:74:35:8d:37:84:76:75:84:1d:32:48:f9:74:a6:84:ec:ac:
         56:17:31:26:18:29:db:31:63:92:ea:ca:89:85:94:d1:c2:64:
         41:f5:b2:d8:ca:2f:b0:7f:e7:1b:6e:3d:fd:4a:e2:f2:df:da:
         19:c9:c4:6e:9a:02:66:ec:4d:a8:c6:12:05:96:25:a9:cf:97:
         5c:21:93:e3:dc:33:dc:d0:56:5a:fd:dd:72:74:47:a9:69:46:
         60:fa:e2:e0:02:58:e6:dd:fc:0e:01:bd:c8:c0:e4:ad:df:cc:
         18:bd:e8:aa:51:d9:87:3c:39:4b:50:c0:ab:a1:9f:f3:60:bf:
         9c:4d:c2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:21:05 2025 by rpki-client