This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/EC7B7E82DFD811F08F00FF64536F56BC.roa
File:                     EC7B7E82DFD811F08F00FF64536F56BC.roa (raw, json)
Hash identifier:          QD91TSR3ZuXrQJclCdD9lmSV7b6jH/GHsZe7m6lielA=
Subject key identifier:   6E:9A:E4:CE:2C:D4:A6:AF:74:88:94:5F:4C:54:9B:31:F7:A3:DF:43
Certificate issuer:       /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Certificate serial:       0596
Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/EC7B7E82DFD811F08F00FF64536F56BC.roa
Signing time:             Tue 23 Dec 2025 08:25:53 +0000
ROA not before:           Tue 23 Dec 2025 08:25:53 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     141727
IP address blocks:        103.162.204.0/24 maxlen: 24
                          2001:df5:fb80::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
                          rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 09:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
        Validity
            Not Before: Dec 23 08:25:53 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=694a5211-171a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d5:61:c8:26:65:03:26:fb:47:73:81:5a:b1:
                    b7:7c:aa:a2:c3:89:13:33:96:3b:cf:6e:d6:8b:14:
                    ed:d1:39:30:5f:96:ab:1c:66:c2:e4:0b:b5:2d:48:
                    04:94:ec:d0:4f:4b:c0:24:e8:de:43:d0:a3:22:3c:
                    ac:32:8a:df:4f:02:b3:ae:2a:64:44:ae:65:94:78:
                    c8:5d:f2:a7:98:77:58:b6:d1:79:cb:be:db:4f:91:
                    eb:11:e4:35:d3:77:eb:41:e3:ef:ca:73:c3:64:70:
                    db:1f:30:29:6a:4a:6d:4d:02:be:20:c8:44:4a:b9:
                    7f:97:97:02:c9:5d:ff:55:80:32:c2:16:2a:e4:d4:
                    a3:5c:f1:f9:8b:ab:2d:61:ec:03:59:df:54:9a:38:
                    aa:5b:4c:29:86:29:cd:18:ef:c2:91:bf:02:d9:12:
                    b6:0c:e3:71:90:39:7d:62:e4:95:da:68:18:b8:78:
                    a1:d6:91:7c:76:eb:fb:3c:a5:41:ec:98:9d:1a:9f:
                    72:25:84:dd:d4:45:cc:88:d5:b4:ce:54:61:ec:fe:
                    53:6b:52:89:1d:02:05:5b:39:44:ed:cd:1d:ce:86:
                    05:84:0f:8f:6c:6e:bf:d6:c6:3d:e2:b5:cb:3a:2a:
                    1c:bc:ad:bc:0f:ad:22:f1:5f:76:31:e7:8e:82:65:
                    a6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9A:E4:CE:2C:D4:A6:AF:74:88:94:5F:4C:54:9B:31:F7:A3:DF:43
            X509v3 Authority Key Identifier:
                keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/EC7B7E82DFD811F08F00FF64536F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.204.0/24
                IPv6:
                  2001:df5:fb80::/47

    Signature Algorithm: sha256WithRSAEncryption
         01:d8:34:95:c2:8c:fb:9f:04:48:83:eb:01:4b:bd:c2:f5:d2:
         56:81:d5:15:3b:5c:80:df:0c:48:fe:66:e2:a8:7e:f1:72:d5:
         88:0d:22:15:09:36:43:2e:de:72:2d:30:47:ba:c1:4c:f4:29:
         c9:b2:6a:91:0b:64:a6:a8:c3:83:fd:51:3e:65:41:a0:41:43:
         ef:da:5f:59:08:b2:23:ee:17:57:b4:5c:7f:13:46:39:1f:86:
         48:66:3a:41:f6:71:a9:8e:b4:6b:d3:4e:8a:da:d2:f5:92:e9:
         a3:a3:29:08:80:2a:9f:2b:59:d3:96:d3:fa:c9:e3:d6:b6:01:
         12:e5:11:1b:b1:da:46:e0:82:f1:fa:c7:e5:ba:c8:79:08:e5:
         e9:a2:55:6b:27:0d:f1:cd:14:58:87:bb:20:30:85:71:e2:43:
         0c:f9:9b:23:5b:0a:ae:9d:8d:be:e9:b5:59:0a:1f:e1:22:87:
         49:33:3e:e7:81:da:51:5b:a6:34:fe:91:2c:37:55:b3:f7:c9:
         d3:31:c1:bd:cc:fd:e0:cd:f0:24:26:f8:89:a8:a1:f0:5f:94:
         a2:92:b9:4f:d8:32:39:b8:94:73:8c:1d:ee:fc:fa:1b:54:ed:
         6b:65:f3:8d:8e:a0:b7:3c:c1:e7:d1:24:f7:aa:f7:9f:26:83:
         37:59:17:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:48:31 2025 by rpki-client