This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/A3C84616C50211F09AF17973C4F9AE02.roa
File:                     A3C84616C50211F09AF17973C4F9AE02.roa (raw, json)
Hash identifier:          NdVLHYhZq68hyCHbrDBL5VR/VYx0cW6RVaPwpxn9ZdI=
Subject key identifier:   C1:9E:0F:72:8F:D1:76:4B:FA:7C:52:EF:0F:84:0D:D9:B3:C0:13:D5
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       39F3
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/A3C84616C50211F09AF17973C4F9AE02.roa
Signing time:             Wed 19 Nov 2025 04:45:58 +0000
ROA not before:           Wed 19 Nov 2025 04:45:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        111.88.96.0/19 maxlen: 24
                          111.88.132.0/23 maxlen: 24
                          111.88.168.0/24 maxlen: 24
                          111.88.169.0/24 maxlen: 24
                          111.88.224.0/21 maxlen: 24
                          115.186.44.0/23 maxlen: 23
                          115.186.46.0/24 maxlen: 24
                          115.186.62.0/24 maxlen: 24
                          115.186.104.0/24 maxlen: 24
                          203.81.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 14:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14835 (0x39f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Nov 19 04:45:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=691d4b86-b404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e9:34:9e:c9:7a:27:5d:50:fd:23:1a:ee:e1:
                    85:65:8b:00:2c:cd:a1:ed:7a:4a:39:54:01:61:6c:
                    fb:7d:55:57:bd:1a:f4:85:82:4d:d0:32:ef:e8:d0:
                    04:00:3d:d7:ad:dc:05:1a:49:86:fb:57:10:64:bc:
                    7c:f5:b2:a7:bd:43:18:28:1c:15:8d:2a:0a:27:60:
                    ac:1c:27:40:8f:15:b7:c3:85:c4:b0:b7:a8:c8:e8:
                    fe:00:39:9a:a7:31:f0:8d:57:d7:32:96:64:94:df:
                    18:95:f1:2b:b8:2a:68:b7:d1:94:c0:44:2d:3f:e4:
                    df:a5:9c:5e:0e:33:54:66:b9:5b:ab:28:6c:2d:f2:
                    ed:99:3d:ed:73:92:3c:08:31:e9:0c:ea:3b:29:8c:
                    da:37:e5:9f:8f:8e:83:18:3f:3f:3a:53:87:cf:b6:
                    6b:ce:17:06:89:63:ac:5c:b8:96:59:64:07:ee:b5:
                    e0:4a:7f:1d:2e:f1:f7:11:51:d7:ec:f0:44:bf:cc:
                    3a:a7:e3:1e:a8:24:c4:e5:ca:ff:93:47:7f:26:aa:
                    7e:62:be:20:48:26:7f:01:90:bb:8d:49:2a:c7:db:
                    65:3f:1f:c1:e5:83:ce:21:74:0d:0e:d0:ca:f4:ff:
                    5f:d3:99:5e:c9:33:c2:ee:52:49:3c:1e:fd:49:40:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9E:0F:72:8F:D1:76:4B:FA:7C:52:EF:0F:84:0D:D9:B3:C0:13:D5
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/A3C84616C50211F09AF17973C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.88.96.0/19
                  111.88.132.0/23
                  111.88.168.0/23
                  111.88.224.0/21
                  115.186.44.0-115.186.46.255
                  115.186.62.0/24
                  115.186.104.0/24
                  203.81.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:a3:8f:22:a4:d9:73:c7:b7:da:fb:bd:74:f7:a6:92:bf:68:
         05:9b:47:fc:37:82:48:84:83:9d:1f:bd:1f:00:fd:5f:4b:01:
         d5:af:cc:f3:c9:ae:57:54:cb:60:06:6b:6b:59:eb:bd:53:e9:
         aa:c2:36:34:08:5c:77:fa:aa:e1:f6:69:cf:a7:ae:73:41:5b:
         c0:00:55:fa:76:bb:b1:87:56:5b:63:61:29:b7:bf:e6:38:2a:
         17:aa:b3:6e:ac:7a:c6:05:8c:d1:bb:24:61:a5:88:e5:d6:a3:
         7e:1c:31:bd:38:7e:ee:32:49:42:f6:d9:31:24:a0:e4:17:07:
         b0:e8:1c:7f:84:dd:07:d8:fa:9b:10:d5:d9:23:7b:ec:09:a5:
         49:35:09:48:b6:52:aa:a6:d0:10:eb:44:2e:aa:73:46:3e:aa:
         f3:10:cf:55:10:1c:32:bc:d0:34:7f:7d:ab:63:35:81:82:53:
         07:2c:8e:2e:eb:57:6e:74:92:40:1c:14:5c:32:1b:69:3e:53:
         77:e2:18:32:10:69:ac:bc:7b:53:59:81:34:a5:1f:92:de:4f:
         84:da:aa:2c:8e:d7:38:d0:b1:a6:01:b5:2f:25:71:0a:30:a0:
         c4:3c:d2:c8:b4:cf:75:8c:61:d1:1c:6e:97:32:56:00:ef:a2:
         40:34:74:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:37:01 2025 by rpki-client