This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/CCA402F8BE3811F0B9AAC956C4F9AE02.roa
File:                     CCA402F8BE3811F0B9AAC956C4F9AE02.roa (raw, json)
Hash identifier:          gtTpVW5LqxqfvKC2N4TARLuSjiGbRhdHo4ieYNHeMFc=
Subject key identifier:   11:AA:8C:5C:9F:AD:DB:D7:F2:EB:A3:A5:08:60:43:55:11:E5:04:24
Certificate issuer:       /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial:       07AD
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/CCA402F8BE3811F0B9AAC956C4F9AE02.roa
Signing time:             Mon 10 Nov 2025 13:26:01 +0000
ROA not before:           Mon 10 Nov 2025 13:26:01 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     61317
IP address blocks:        103.104.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
                          rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:25:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965 (0x7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D808, serialNumber=0725F2491801505185C9069A4013635C38B56B72
        Validity
            Not Before: Nov 10 13:26:01 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6911e7e9-fb7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3e:da:88:34:da:08:fe:9f:24:1b:06:17:f9:
                    4d:4b:80:8b:04:ad:32:d4:b5:76:b9:39:71:34:85:
                    0a:97:09:77:24:92:96:f3:11:26:c8:f2:f4:bc:80:
                    33:a6:2e:a0:74:55:eb:86:50:5b:6e:28:60:fc:64:
                    90:79:ca:66:63:cd:3f:38:f0:11:d4:c1:55:4a:f5:
                    d6:00:db:6c:37:b8:02:62:c2:50:e3:c0:b8:77:6d:
                    68:e5:ec:73:c5:e6:f0:75:87:a9:43:08:df:22:9e:
                    5a:f3:7c:8d:6e:8a:ed:06:73:c6:a3:e9:e6:21:11:
                    ca:3a:f5:82:e1:94:c1:9c:a0:88:8c:2e:a0:ea:16:
                    a2:41:b8:79:e9:f6:68:62:50:d2:9c:7a:b4:42:c1:
                    58:b6:9e:a1:49:cd:36:eb:42:3c:de:35:db:ce:bf:
                    09:69:30:fc:66:a6:40:a4:99:68:8e:0a:a3:e2:63:
                    f3:85:de:98:4f:94:1c:67:72:fc:dd:c5:43:66:3a:
                    4a:64:d7:50:03:dc:3f:78:d3:00:33:95:6e:24:22:
                    6c:74:3c:e7:25:bb:46:63:20:af:da:0a:69:fd:fd:
                    df:4c:a8:fc:35:ee:e1:af:73:7e:63:82:52:32:6b:
                    62:34:40:2c:48:74:3e:6f:ab:31:5e:6e:39:6e:bc:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AA:8C:5C:9F:AD:DB:D7:F2:EB:A3:A5:08:60:43:55:11:E5:04:24
            X509v3 Authority Key Identifier:
                keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/CCA402F8BE3811F0B9AAC956C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:5c:bc:e4:6b:c1:86:e3:1d:ed:ff:5f:0e:1c:dd:38:e2:53:
         ec:a3:27:b9:de:46:c1:6c:62:3d:27:b9:90:86:d9:f9:7a:b0:
         24:f1:38:5d:6a:fe:f8:3c:7f:4c:f2:aa:37:50:66:97:6e:16:
         a3:8c:1b:d4:a1:43:3b:16:e6:38:15:9f:54:cd:26:48:7a:3f:
         1a:35:3f:e1:39:62:3a:7b:dc:49:23:8e:2a:8a:b5:12:9b:06:
         fe:b0:87:11:ce:bf:79:7b:64:d1:46:dd:ff:32:df:a5:9d:ae:
         6f:c5:e2:1f:e1:7b:f2:a8:15:f4:ca:ef:64:1f:8a:59:ec:2e:
         b7:3c:fb:11:9c:42:54:b0:1c:26:6e:18:0d:6b:0c:ae:64:20:
         23:b5:8e:eb:f2:b9:74:34:b6:4d:06:bb:94:89:ba:0c:f1:0c:
         3f:d9:bf:ee:cd:e9:56:44:f8:6c:9d:46:d0:dd:c9:1f:b6:8c:
         27:cb:b0:f9:fe:57:08:aa:48:e3:05:04:19:4a:a4:8a:66:14:
         be:78:1d:8d:93:a0:0d:2b:d4:1e:4c:1c:2b:9a:a8:99:4c:66:
         43:16:6a:57:7f:b8:d1:9b:b8:03:de:ab:bd:cd:e0:4d:37:59:
         94:45:8b:f4:86:04:de:72:a1:3c:43:9c:3f:d9:81:3b:bc:bc:
         ec:a0:9d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 05:27:20 2025 by rpki-client