This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/27030ADA8EB211EA9D09090FC4F9AE02.roa
File:                     27030ADA8EB211EA9D09090FC4F9AE02.roa (raw, json)
Hash identifier:          EoTAnAdbaycX4KXCkuvokN4LFeCdZ2YBduzBWIBavtE=
Subject key identifier:   0F:6C:01:30:67:2E:D8:93:63:26:A6:FE:4B:0C:69:4A:44:36:4A:4F
Certificate issuer:       /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF
Certificate serial:       09EA
Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/27030ADA8EB211EA9D09090FC4F9AE02.roa
Signing time:             Mon 08 Dec 2025 19:30:16 +0000
ROA not before:           Mon 08 Dec 2025 19:30:16 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139919
IP address blocks:        103.147.24.0/24 maxlen: 24
                          103.147.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl
                          rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 19:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2538 (0x9ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB7A, serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF
        Validity
            Not Before: Dec  8 19:30:16 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69372747-5cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:17:ee:d6:88:d9:de:eb:67:6b:27:a7:1f:
                    19:ae:eb:57:f8:25:f8:47:fe:57:89:60:2c:4b:53:
                    76:44:4c:31:48:e1:ec:1b:f9:74:79:fb:d1:ad:27:
                    4a:d6:94:60:5f:9e:61:7a:e6:e1:42:ca:f9:1b:e5:
                    a3:c4:31:c8:a2:b4:0e:74:91:84:47:82:02:67:2a:
                    7a:6a:47:73:3d:d8:98:5e:96:c6:6b:08:91:54:99:
                    9e:d2:77:38:db:71:09:01:b0:f0:e7:bf:df:ae:d9:
                    5a:bd:80:26:e1:ba:47:3c:bc:3d:6a:96:a8:b4:a7:
                    3f:ce:65:e6:43:6d:bd:8e:0b:42:64:dc:b5:d5:90:
                    70:7e:12:60:2b:a9:9e:c7:4a:56:93:fb:eb:c1:b9:
                    0a:99:ee:95:ef:27:ce:78:dc:48:92:fa:20:5b:df:
                    30:d0:01:e3:bb:27:d4:04:6d:21:2c:40:f2:d4:bf:
                    a5:5b:6f:2e:e9:ea:87:b3:67:bd:6f:0a:8b:28:9d:
                    69:d8:28:73:77:cd:7a:2c:f1:3e:66:cb:bf:94:e1:
                    ac:0a:a9:e6:28:0c:41:ce:91:d7:16:49:ca:89:42:
                    3a:46:3c:5f:cc:35:17:fa:0e:bd:9b:c1:55:cb:16:
                    0a:da:2c:1d:a5:10:4b:00:83:ec:48:0e:e4:33:2d:
                    06:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6C:01:30:67:2E:D8:93:63:26:A6:FE:4B:0C:69:4A:44:36:4A:4F
            X509v3 Authority Key Identifier:
                keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/27030ADA8EB211EA9D09090FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:d1:54:7c:87:95:c2:c8:ef:b9:b4:74:3c:de:23:ca:5f:b9:
         c2:e2:72:70:0f:f7:70:ed:80:84:fd:51:fe:8c:96:c4:32:be:
         b9:14:47:34:b2:45:c6:f5:c7:0e:55:cc:7a:16:d9:25:1a:62:
         02:f0:29:38:3a:50:a0:af:97:b4:da:f9:38:9d:50:72:50:65:
         a2:33:dd:da:01:b9:a7:b3:c0:81:03:2b:80:db:22:99:b4:30:
         0d:e9:83:19:c1:fa:39:43:cb:2b:f4:43:ba:72:c0:db:cb:0e:
         63:2c:14:c5:8f:09:bc:e7:93:62:e7:5f:0d:11:26:cb:a8:00:
         ea:88:7a:c0:d8:55:de:d5:97:80:e7:4e:45:b7:75:cb:d0:5e:
         66:66:da:29:78:3b:79:64:49:7b:f1:a2:42:61:d5:16:f1:5a:
         ac:db:99:9d:40:fe:ab:66:09:61:21:11:60:40:bc:eb:d8:ec:
         3e:50:09:65:8a:62:72:38:8e:18:56:0d:01:ed:d1:96:86:ae:
         ce:22:62:1e:06:e6:11:a1:c9:4d:e5:65:f0:41:54:fe:cf:ef:
         70:d7:b9:04:67:95:a1:94:21:11:f4:48:ba:5c:0e:02:c7:e9:
         d3:2b:8c:ba:5f:cb:9c:7e:4a:15:b7:1d:74:dd:b8:fc:f0:03:
         7d:fb:3e:94
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJCN0ExMTAvBgNVBAUTKEI5RkVCQkEwOUNGMTBCMjg3RUVEMkNFNTY3MjJCM0M5
QTBFRjEyRkYwHhcNMjUxMjA4MTkzMDE2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTM3Mjc0Ny01Y2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsrkX7taI2d7rZ2snpx8ZrutX+CX4R/5XiWAsS1N2REwxSOHsG/l0efvRrSdK
1pRgX55heubhQsr5G+WjxDHIorQOdJGER4ICZyp6akdzPdiYXpbGawiRVJme0nc4
23EJAbDw57/frtlavYAm4bpHPLw9apaotKc/zmXmQ229jgtCZNy11ZBwfhJgK6me
x0pWk/vrwbkKme6V7yfOeNxIkvogW98w0AHjuyfUBG0hLEDy1L+lW28u6eqHs2e9
bwqLKJ1p2Chzd816LPE+Zsu/lOGsCqnmKAxBzpHXFknKiUI6RjxfzDUX+g69m8FV
yxYK2iwdpRBLAIPsSA7kMy0GBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA9sATBn
LtiTYyam/ksMaUpENkpPMB8GA1UdIwQYMBaAFLn+u6Cc8Qsofu0s5Wcis8mg7xL/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI3QS81RDIxMTg0QzhF
QjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6eEN5aC03U3psWnlLenlhRHZF
djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VmNjdvSnp4Q3loLTdTemxaeUt6eWFEdkV2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEJCN0EvNUQyMTE4NEM4RUIxMTFFQUIwMkE1NTBFQzRGOUFFMDIvMjcwMzBBREE4
RUIyMTFFQTlEMDkwOTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnkxgwDQYJKoZIhvcNAQELBQADggEBAMDRVHyHlcLI77m0
dDzeI8pfucLicnAP93DtgIT9Uf6MlsQyvrkURzSyRcb1xw5VzHoW2SUaYgLwKTg6
UKCvl7Ta+TidUHJQZaIz3doBuaezwIEDK4DbIpm0MA3pgxnB+jlDyyv0Q7pywNvL
DmMsFMWPCbznk2LnXw0RJsuoAOqIesDYVd7Vl4DnTkW3dcvQXmZm2il4O3lkSXvx
okJh1RbxWqzbmZ1A/qtmCWEhEWBAvOvY7D5QCWWKYnI4jhhWDQHt0ZaGrs4iYh4G
5hGhyU3lZfBBVP7P73DXuQRnlaGUIRH0SLpcDgLH6dMrjLpfy5x+ShW3HXTduPzw
A337PpQ=
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:59:16 2025 by rpki-client