This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa
File:                     5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa (raw, json)
Hash identifier:          U+T/TymiKuMoa8scgq1FH7pho3SjRA8wLhQ23jCtYa8=
Subject key identifier:   9A:90:E6:2A:B0:0E:DD:03:05:6A:B9:10:5C:6A:FC:BC:E1:0F:7A:09
Certificate issuer:       /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411
Certificate serial:       010F
Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa
Signing time:             Mon 01 Dec 2025 04:32:28 +0000
ROA not before:           Mon 01 Dec 2025 04:32:28 +0000
ROA not after:            Mon 30 Mar 2026 00:00:00 +0000
asID:                     134963
IP address blocks:        103.40.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl
                          rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 04:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411
        Validity
            Not Before: Dec  1 04:32:28 2025 GMT
            Not After : Mar 30 00:00:00 2026 GMT
        Subject: CN=692d1a5c-7362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:aa:da:d8:c5:5b:26:c5:a3:85:2c:98:2a:
                    19:9b:6d:85:c0:62:2d:bf:4c:03:e4:39:e7:49:47:
                    59:20:79:b0:04:8c:07:fa:0c:e1:a3:f7:5f:03:eb:
                    b8:ba:c2:ee:31:50:77:14:84:83:96:f0:b6:19:d3:
                    b0:41:d5:94:88:8e:4f:1f:61:c9:37:e2:25:71:4a:
                    6d:9d:55:24:9f:5e:1f:c3:cd:70:ef:80:d9:8e:0d:
                    2b:7b:91:3a:42:d2:c1:2f:0e:8d:be:21:3f:a3:aa:
                    b8:a8:1e:65:b0:a9:72:1d:1e:a5:14:34:98:1c:69:
                    14:da:a3:a9:bf:5b:e6:3d:04:7e:9a:13:a8:5e:f6:
                    6d:37:e1:a5:e3:8c:01:e3:03:bd:f9:9f:bc:7c:2e:
                    55:e8:3d:8e:e8:b1:d0:40:00:14:5d:e2:57:16:fd:
                    f3:4e:77:47:c3:c0:a6:63:da:c6:94:3e:99:63:a7:
                    cd:f8:36:82:49:89:b8:bf:43:60:fa:25:10:6e:40:
                    3b:14:98:73:92:ea:97:0f:54:a7:64:08:e8:47:e9:
                    67:ca:93:7d:8b:3b:bd:58:bd:da:7e:42:cf:14:6f:
                    a1:a6:5d:3c:fa:0e:ec:48:19:12:38:d0:93:4b:0b:
                    8e:5c:07:f6:db:31:09:8a:7d:47:52:46:a9:ae:d8:
                    09:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:90:E6:2A:B0:0E:DD:03:05:6A:B9:10:5C:6A:FC:BC:E1:0F:7A:09
            X509v3 Authority Key Identifier:
                keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:51:39:2e:8d:00:36:55:3a:ed:e3:fc:7b:8b:6e:96:6b:35:
         d7:66:e3:44:6d:ba:2e:c6:46:5a:93:b4:39:12:ee:22:71:c6:
         bc:ac:45:c1:ff:aa:f2:72:79:37:76:c7:91:1c:c9:e7:b2:4e:
         bc:4d:a1:8f:d9:05:3b:bc:3e:fd:fa:90:82:e2:fa:cc:69:e7:
         b9:ee:07:e5:56:a7:a0:b5:c3:a2:55:5a:63:c4:61:12:98:3f:
         ab:26:e5:c8:54:1d:a0:f6:52:07:8c:83:1a:cd:88:f8:df:c4:
         82:39:70:46:fc:8a:93:14:ea:84:1b:3b:55:d0:4f:b9:3b:3f:
         3c:f2:25:2e:be:e3:db:02:be:d4:3f:ae:ff:76:ce:44:30:49:
         79:2c:24:75:58:f7:e7:a7:3e:a1:81:f3:f5:4f:9e:5c:0a:c2:
         fb:b5:65:3d:e9:37:c3:aa:4d:b9:ed:51:62:11:7e:b9:97:3a:
         ed:4f:b9:77:2b:fd:00:54:b5:55:53:43:70:be:57:3a:cb:9d:
         0c:42:f4:99:fd:f8:3e:e6:37:64:2f:5f:83:16:7a:63:41:e0:
         0d:27:8d:7c:64:7f:f8:09:89:0b:18:44:0d:4b:30:c8:b4:e0:
         f0:7e:28:bf:b7:bd:a2:1c:1e:d2:a5:ed:98:e0:3d:49:7a:71:
         da:b0:eb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 12:19:15 2025 by rpki-client