This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3C2CE992BF9111F0AC4B384FC4F9AE02.roa
File:                     3C2CE992BF9111F0AC4B384FC4F9AE02.roa (raw, json)
Hash identifier:          RB4hi6rzyLvxdCOtxeP5KEjIjY+QDkh83y2QufAXxsQ=
Subject key identifier:   5C:4E:C6:30:DF:BF:75:D2:FA:20:9B:FF:08:92:D3:C3:02:7F:AF:14
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3718
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3C2CE992BF9111F0AC4B384FC4F9AE02.roa
Signing time:             Wed 12 Nov 2025 06:31:35 +0000
ROA not before:           Wed 12 Nov 2025 06:31:35 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     55002
IP address blocks:        103.209.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 15:24:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14104 (0x3718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Nov 12 06:31:35 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=691429c7-e3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:69:fd:54:5e:77:91:ca:24:05:50:f6:e0:
                    61:82:12:f7:1e:13:ae:e5:08:30:4e:08:71:26:35:
                    8c:9b:2e:fc:9d:db:7a:26:b4:1b:f2:60:dd:2f:15:
                    f4:88:79:94:8a:a6:5d:74:29:4f:e8:9e:1b:8f:e5:
                    89:ca:61:52:dc:b6:23:57:63:90:37:1c:da:5b:c4:
                    89:5e:cd:f4:8d:c1:61:7d:dc:75:87:d2:eb:59:02:
                    53:8f:73:fa:7e:fa:e7:13:fa:14:3c:75:4f:51:68:
                    9f:3f:3a:c6:eb:42:4d:5f:ee:99:13:ae:5c:e7:49:
                    78:86:a0:48:96:8f:c0:3b:19:3b:20:65:57:f7:cf:
                    a8:0b:f2:e2:30:00:0a:c6:3f:e2:83:51:9f:99:1a:
                    00:ef:57:24:d8:b6:c1:b8:23:10:9b:2b:c9:cb:9c:
                    0d:2b:0d:02:5d:c3:80:9b:5c:fc:2d:e6:bd:4e:ab:
                    53:60:4a:7d:e2:9c:d3:d2:4a:12:7b:1b:2e:fd:60:
                    a8:c0:c9:24:bf:f2:f6:78:54:ae:1e:80:d4:c4:7e:
                    01:7c:f1:29:e2:3d:75:de:f9:db:15:41:56:09:cd:
                    01:dc:3b:53:f7:05:86:11:42:6c:0d:8a:87:56:b5:
                    cf:c7:4c:29:5a:d9:de:73:f6:73:1e:b4:5b:36:db:
                    96:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4E:C6:30:DF:BF:75:D2:FA:20:9B:FF:08:92:D3:C3:02:7F:AF:14
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3C2CE992BF9111F0AC4B384FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:02:a9:ef:a1:66:03:f8:38:cf:5a:84:b5:ea:4b:be:d3:7a:
         dc:d3:d7:a9:2d:0e:62:30:df:ae:b2:a4:88:61:aa:29:9e:9f:
         a1:94:20:eb:7b:13:09:26:f3:10:37:d6:26:12:41:6a:5a:61:
         e7:12:2b:b3:33:88:ee:36:14:05:a5:40:72:03:a4:7b:d8:bf:
         e6:03:d0:30:7d:ad:09:21:e9:8c:f7:54:13:9a:fe:60:ae:bd:
         6b:c1:3f:22:94:69:1e:23:ef:07:34:4b:0d:be:ee:f4:30:68:
         d7:86:4f:5c:3d:57:b5:ec:cd:49:72:3a:d9:36:f1:db:6e:04:
         41:52:e2:0f:6d:cc:22:d3:08:9a:ec:eb:80:6d:ba:15:20:5e:
         63:51:cb:4f:58:db:d0:38:38:b2:68:32:97:7f:c2:99:d0:39:
         8c:16:10:32:b6:e9:dc:e0:4b:28:b1:75:3a:1b:d9:42:2f:86:
         7e:99:df:b8:2e:6e:c5:29:78:be:ab:bb:db:a9:c7:3d:e4:66:
         51:5e:2d:69:a5:73:c6:03:ac:4e:5a:ee:64:a3:10:d0:c3:89:
         f8:c0:aa:89:24:b1:1b:ff:db:a4:70:11:cd:b6:93:26:a7:96:
         f0:19:50:00:78:e4:b2:2a:53:f1:2f:98:9d:30:b0:87:0d:64:
         ab:34:00:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:27:37 2025 by rpki-client