This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/32E51F32BFD511F0A2819A6CC4F9AE02.roa
File:                     32E51F32BFD511F0A2819A6CC4F9AE02.roa (raw, json)
Hash identifier:          GyJKr0ADEFxLplRdesBqEna45M3ARZFUwQ1X3O9sctw=
Subject key identifier:   0C:BA:53:05:9E:00:24:EC:B3:02:73:44:AA:F4:56:F8:B8:3C:B4:C3
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       371A
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/32E51F32BFD511F0A2819A6CC4F9AE02.roa
Signing time:             Wed 12 Nov 2025 14:38:05 +0000
ROA not before:           Wed 12 Nov 2025 14:38:05 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     134659
IP address blocks:        103.209.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14106 (0x371a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Nov 12 14:38:05 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=69149bcd-8686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:9c:a5:21:fa:b5:c2:20:24:63:d6:ed:38:
                    8f:19:9d:ef:fd:08:f5:45:79:66:65:21:bc:0a:6c:
                    c3:1e:d8:66:b4:d3:e2:d6:9c:62:65:b4:72:6b:d8:
                    80:ae:ee:7b:84:eb:cc:f6:60:97:7a:db:9c:ef:76:
                    c2:11:4c:2b:3a:e3:5f:6d:85:25:c2:15:95:0b:5f:
                    5d:15:c2:f1:57:ea:13:9d:c7:eb:8e:2e:c6:1c:61:
                    36:cd:2a:99:bb:01:2d:e9:be:9a:67:3c:b3:a9:2c:
                    dc:c0:90:08:09:6f:f9:10:8b:ad:a6:bb:f8:48:14:
                    db:f3:34:0c:a9:12:6e:d0:61:40:ca:58:ae:da:e1:
                    eb:42:49:bb:cb:a9:1e:d9:81:73:b6:f4:aa:f7:c8:
                    c5:f2:59:1f:ba:2a:47:53:48:40:89:2e:3e:ef:bb:
                    64:8f:41:4e:32:d4:7d:69:16:3b:20:f3:5c:f0:da:
                    ff:d6:8c:02:91:e7:c8:a6:3e:50:b4:a9:17:7b:56:
                    fc:67:3b:e1:63:1b:4d:9b:8a:85:02:af:63:55:23:
                    9b:80:53:bd:21:0a:5f:8c:a3:2a:b7:60:95:3f:0a:
                    f7:60:de:e2:8a:b7:11:eb:ac:10:9e:fe:54:e1:1f:
                    4b:e1:c0:d1:91:83:ca:23:71:d4:b3:e4:97:dd:e7:
                    2c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BA:53:05:9E:00:24:EC:B3:02:73:44:AA:F4:56:F8:B8:3C:B4:C3
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/32E51F32BFD511F0A2819A6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:36:71:8a:31:36:13:e6:5f:5f:b4:db:2f:04:8a:af:78:6e:
         e8:2d:e7:4d:f3:4f:3f:33:bd:e6:80:46:ca:f2:9f:99:65:54:
         f1:85:7b:56:51:4b:18:97:65:32:a4:dd:7a:a9:03:5d:ee:dc:
         7e:f3:ea:cd:b0:cc:44:dd:a1:f2:5e:94:d6:0d:08:31:e7:da:
         2c:11:32:21:f5:6a:2f:86:d5:e5:23:89:85:f6:5b:53:55:a7:
         70:55:a2:9b:41:1c:9e:ab:ee:84:81:d9:a9:b8:8e:e5:fc:5e:
         e5:21:79:21:e5:2e:db:4e:7b:07:22:79:ae:6c:8a:18:17:96:
         4d:c5:ca:fb:ec:a5:f1:fc:11:5a:d8:09:d5:fe:54:99:b9:40:
         c1:1b:cb:7b:a1:be:a8:c8:17:b9:9b:1e:02:e6:18:06:30:71:
         93:7f:4e:40:ff:d8:7f:ce:f6:d3:e0:64:ed:57:74:0e:b0:e8:
         02:4d:cf:6a:ba:14:3e:3e:87:ed:6c:54:e2:11:c8:75:46:b1:
         a2:d3:38:5c:7e:66:66:d0:48:5a:12:74:77:b6:0d:c3:ec:54:
         7f:d1:b7:ba:55:76:a2:f8:ea:6c:62:b6:5d:62:6d:bb:5d:99:
         34:7c:b3:d1:5e:59:d5:37:a6:56:e6:ba:81:2f:38:e2:23:b7:
         5d:47:49:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:05:07 2025 by rpki-client