This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6057D70CF6911F0909F8F85C4F9AE02.roa
File:                     E6057D70CF6911F0909F8F85C4F9AE02.roa (raw, json)
Hash identifier:          MO/iDd87j5pGKxZp+zL7XnnngFieE4WY/+qwzrz39sM=
Subject key identifier:   0A:F3:ED:04:AA:21:2A:A9:86:FE:87:F0:B3:A9:53:A8:1F:2A:47:DC
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       C95E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6057D70CF6911F0909F8F85C4F9AE02.roa
Signing time:             Tue 02 Dec 2025 10:30:19 +0000
ROA not before:           Tue 02 Dec 2025 10:30:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153870
IP address blocks:        103.49.167.0/24 maxlen: 24
                          103.171.55.0/24 maxlen: 24
                          2001:df5:81c0::/48 maxlen: 48
                          2001:df6:fc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 12:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51550 (0xc95e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Dec  2 10:30:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=692ebfbb-273e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:81:4b:8e:7f:80:28:9e:78:7b:09:45:de:
                    f4:aa:5c:4c:5a:0e:fe:01:67:90:30:39:32:c6:09:
                    75:28:83:f0:d6:d4:c7:7f:5b:a0:12:3b:20:60:6c:
                    4b:7a:14:9c:20:1c:e2:6d:b4:0b:6c:6d:a5:d2:7b:
                    df:e9:ca:67:0f:bf:39:73:ce:1a:de:8e:fb:3f:4d:
                    2a:29:51:96:01:fd:51:80:f5:09:ef:27:fd:29:3e:
                    ce:48:23:95:33:11:20:03:bb:45:ab:64:48:11:c9:
                    33:cd:a1:ac:b7:93:4e:64:ff:d7:77:24:f9:26:3a:
                    1d:42:fa:05:0b:3e:da:28:26:f1:08:bb:9b:cf:0c:
                    4f:e0:03:0f:d1:59:dd:a0:bf:7c:94:d6:e5:12:ce:
                    bc:0d:36:95:f9:b8:5f:8f:d6:d6:d2:aa:8a:c8:06:
                    d7:71:a6:9a:fb:cc:9a:13:70:60:67:9a:57:e8:d2:
                    2d:62:bf:e8:d5:ac:08:85:56:9c:58:e1:4b:af:7c:
                    c3:e7:04:2c:de:5d:8d:86:98:7d:9d:1b:d5:8a:c2:
                    cd:d2:53:ec:6c:78:60:41:f4:1f:96:51:7c:fc:68:
                    22:54:eb:7f:69:1e:78:25:b0:82:a5:59:91:85:3e:
                    36:d4:b7:23:b6:fa:4b:3b:e1:5b:8e:8f:dc:fe:15:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F3:ED:04:AA:21:2A:A9:86:FE:87:F0:B3:A9:53:A8:1F:2A:47:DC
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6057D70CF6911F0909F8F85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.167.0/24
                  103.171.55.0/24
                IPv6:
                  2001:df5:81c0::/48
                  2001:df6:fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:b5:71:54:98:a4:d2:89:ce:6e:3f:dd:f3:68:9a:ae:a9:8a:
         42:3f:35:ca:81:08:ff:c1:3b:f4:0f:6e:48:8f:6e:f3:16:6c:
         53:b3:4e:5c:69:b9:c4:2e:80:6c:e6:4b:c6:93:86:0a:18:62:
         0a:02:cc:37:83:b8:41:3a:f8:c9:d0:23:1b:c9:66:da:3c:32:
         22:cc:d3:da:b6:9a:12:c2:98:8a:04:b6:71:c7:d8:11:38:27:
         f5:d1:9f:63:e2:b8:ff:d5:1d:0d:c0:94:de:ad:c0:01:81:53:
         44:7d:91:d4:3e:58:89:dd:45:0c:66:9a:f4:de:a8:9f:fe:2a:
         16:96:e1:eb:10:aa:f5:1f:5d:8c:fc:05:b1:0b:29:35:8c:68:
         6c:7f:36:19:9f:81:fb:04:5c:06:75:10:62:44:19:f5:45:1e:
         4f:17:30:9e:bb:b4:a3:24:9a:87:06:74:08:58:8a:34:d5:cc:
         fd:1f:b8:a6:1e:f0:dd:eb:8d:4c:39:bc:37:37:73:76:46:73:
         21:77:88:52:58:21:e6:03:32:26:f3:76:e4:2b:02:8f:0d:1c:
         2b:e3:c3:83:1c:d8:8f:9f:46:c4:59:39:9e:13:b8:0a:08:6c:
         4c:7e:7c:d2:fd:58:0d:31:9d:99:8c:57:3d:a4:c4:74:77:9b:
         45:23:ba:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 17:19:25 2025 by rpki-client