This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/1210E96E791511F08360054EC4F9AE02.roa
File:                     1210E96E791511F08360054EC4F9AE02.roa (raw, json)
Hash identifier:          LZ/19eRDovcqNkq1WRCoRPmhUrlnhJLR/l5REA7He68=
Subject key identifier:   3F:70:78:F9:3D:6B:AE:A0:CE:A6:28:DB:75:66:F0:25:DD:76:0B:24
Certificate issuer:       /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
Certificate serial:       5A
Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/1210E96E791511F08360054EC4F9AE02.roa
Signing time:             Tue 11 Nov 2025 14:55:50 +0000
ROA not before:           Tue 11 Nov 2025 14:55:50 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     24084
IP address blocks:        203.105.163.0/24 maxlen: 24
                          203.105.164.0/24 maxlen: 24
                          203.105.176.0/23 maxlen: 23
                          203.105.176.0/24 maxlen: 24
                          203.105.177.0/24 maxlen: 24
                          203.105.178.0/23 maxlen: 23
                          203.105.178.0/24 maxlen: 24
                          203.105.179.0/24 maxlen: 24
                          203.105.180.0/24 maxlen: 24
                          203.105.181.0/24 maxlen: 24
                          203.105.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl
                          rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
        Validity
            Not Before: Nov 11 14:55:50 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69134e76-9634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:70:73:20:27:a3:96:85:49:65:f5:1b:45:b5:
                    77:6f:d3:13:d0:e9:7a:52:07:cd:60:38:d0:96:cd:
                    f2:9b:bd:ab:1d:3d:61:22:be:8e:3a:d4:a8:ae:4d:
                    07:bc:73:3e:0a:e6:fa:f5:90:95:2c:b9:7f:d5:43:
                    97:ee:0d:7f:b0:27:f6:3c:51:03:3d:40:fe:f5:aa:
                    46:6c:90:e1:7b:37:4e:61:75:9d:3c:b1:4d:8c:1e:
                    2d:a7:d5:08:68:06:1a:fc:14:39:77:d5:ed:66:1e:
                    08:66:e0:23:f4:c4:b9:47:82:7a:07:35:72:d5:0b:
                    7b:2f:5d:c5:e7:55:b8:ce:48:0a:78:a8:19:1a:98:
                    97:ef:07:9a:57:29:f2:5a:c6:15:2d:4b:3a:70:05:
                    5d:4d:aa:48:73:8d:30:3e:6d:f6:9a:ec:4f:07:e4:
                    73:4d:f9:2f:a3:69:b3:b3:dd:fc:77:32:a9:be:c9:
                    1a:55:47:5d:45:56:66:f8:9c:ff:d9:fc:92:ad:3e:
                    df:fb:c5:90:f6:c0:74:c6:19:04:3b:0f:6e:6d:d2:
                    0d:38:40:25:1b:ef:86:6a:e7:6e:22:35:d7:bd:ab:
                    28:2d:e2:09:3b:2f:53:aa:3a:6f:bf:1d:bd:8e:0f:
                    13:0d:f5:b8:26:b7:c4:04:bd:11:43:f5:b3:9a:10:
                    cb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:70:78:F9:3D:6B:AE:A0:CE:A6:28:DB:75:66:F0:25:DD:76:0B:24
            X509v3 Authority Key Identifier:
                keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/1210E96E791511F08360054EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.105.163.0-203.105.164.255
                  203.105.176.0-203.105.181.255
                  203.105.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:02:95:ae:67:5e:9a:59:39:cd:20:82:aa:96:b6:e2:65:f2:
         0c:bb:e4:a7:94:ef:93:6d:34:99:98:79:c6:be:d1:c7:6c:6e:
         75:17:3d:8f:aa:fa:df:62:27:03:a8:d3:e8:25:65:e8:a3:1a:
         fe:97:19:c9:b6:ae:a3:7b:d3:b5:93:ee:a7:62:56:1e:3e:85:
         f2:af:82:69:3f:21:21:31:1c:fb:c8:57:1c:5d:1f:65:b1:56:
         73:09:e3:98:de:ad:e6:55:17:db:a0:c6:a5:b7:f8:89:14:5b:
         05:d2:d6:90:48:96:40:bc:04:5c:52:45:27:6d:f7:1a:df:c2:
         ec:e0:a5:06:b9:ba:7f:24:f3:58:c3:9a:f3:d7:3c:ac:fc:de:
         1b:35:0a:57:30:01:0e:f7:66:be:64:ed:fe:a5:3b:a8:b4:e6:
         89:43:85:4b:9d:2f:c8:a0:fa:f1:63:8d:dc:30:1e:25:66:ad:
         26:44:73:55:f3:09:74:47:58:49:48:35:ea:bf:3f:ef:44:f6:
         50:5f:ff:45:22:cd:e0:5e:0a:f0:7a:55:9a:db:60:c8:25:cb:
         9c:c3:de:bd:6d:5f:e0:8b:3b:07:8b:46:13:8c:b4:62:05:6a:
         d1:fe:e8:1e:f6:39:ff:ee:91:8f:d4:5d:e8:49:47:86:f8:bb:
         52:46:f1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 11:47:53 2025 by rpki-client