This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/0F0D45D0373711EF896FCE68C4F9AE02.roa
File:                     0F0D45D0373711EF896FCE68C4F9AE02.roa (raw, json)
Hash identifier:          sxE944388ZvCjoo0AC5kbhBycMOF3blJF1KJLcFAAS8=
Subject key identifier:   42:71:EB:73:ED:02:B0:62:8A:09:4D:C0:AE:63:34:5A:D2:A3:62:6D
Certificate issuer:       /CN=A91282C6/serialNumber=16925A5F9486BFC3F11B518F0DF8473A02ABB85B
Certificate serial:       0104
Authority key identifier: 16:92:5A:5F:94:86:BF:C3:F1:1B:51:8F:0D:F8:47:3A:02:AB:B8:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpJaX5SGv8PxG1GPDfhHOgKruFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/0F0D45D0373711EF896FCE68C4F9AE02.roa
Signing time:             Wed 05 Nov 2025 05:20:32 +0000
ROA not before:           Wed 05 Nov 2025 05:20:32 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     134744
IP address blocks:        103.199.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.crl
                          rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpJaX5SGv8PxG1GPDfhHOgKruFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91282C6, serialNumber=16925A5F9486BFC3F11B518F0DF8473A02ABB85B
        Validity
            Not Before: Nov  5 05:20:32 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=690ade9f-ad5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:68:24:b3:5b:f4:22:fd:89:81:64:44:4d:83:
                    63:86:8e:d5:fe:1a:61:26:71:31:98:93:6f:a5:85:
                    50:81:6d:49:6e:ad:76:00:e4:03:16:18:f0:f2:57:
                    b2:0a:c2:1f:3d:7a:a2:3e:bc:e1:3a:70:de:f8:f8:
                    36:00:e7:ae:57:9d:a0:a9:92:e6:54:b5:b9:dc:e8:
                    bd:3b:4d:8e:e8:a8:ae:da:dd:97:f3:c7:24:b6:c5:
                    eb:a8:03:c5:59:d8:48:3c:de:a7:14:4c:50:61:ca:
                    b4:d2:5b:76:a7:6b:00:ea:36:bb:ea:2f:06:f0:bd:
                    5e:9d:dd:fd:5b:e0:9a:74:70:34:b7:6e:f6:46:62:
                    5b:1c:13:b8:e9:77:3b:8e:f9:93:0c:f0:06:6d:df:
                    5c:5d:13:f8:1e:30:3a:d5:a1:c6:88:f2:36:43:de:
                    7c:ee:9a:79:46:eb:0a:6e:91:82:ef:15:7b:92:82:
                    8c:85:f9:a6:55:6a:e1:8b:ff:8e:f3:b9:3c:12:dd:
                    b3:d8:51:fb:f8:a6:f9:6a:e0:b3:e8:af:58:de:9b:
                    97:dd:4d:09:38:e1:16:e7:36:4c:9b:79:a9:d6:a8:
                    a9:62:8a:d0:4c:1c:c5:8c:fe:73:ab:e2:36:07:c9:
                    21:d6:90:e4:f4:10:29:29:95:fe:fb:ac:28:56:3f:
                    93:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:71:EB:73:ED:02:B0:62:8A:09:4D:C0:AE:63:34:5A:D2:A3:62:6D
            X509v3 Authority Key Identifier:
                keyid:16:92:5A:5F:94:86:BF:C3:F1:1B:51:8F:0D:F8:47:3A:02:AB:B8:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpJaX5SGv8PxG1GPDfhHOgKruFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/0F0D45D0373711EF896FCE68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.199.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:a6:4e:bb:ff:1c:70:bf:a1:02:e5:31:1a:a3:4d:87:aa:15:
         ff:27:d1:d4:24:f2:45:ed:bf:17:13:fa:6c:87:86:46:b5:a2:
         cc:68:a2:00:c7:51:02:be:b8:ff:37:d7:84:71:e1:67:b6:e6:
         ae:54:be:b5:d9:d4:33:1d:da:61:6e:7d:b5:56:2b:a1:d7:64:
         88:0c:87:88:b8:46:c9:a3:34:27:a8:80:13:44:e3:5c:75:8d:
         9b:1f:b4:3d:ee:b0:dd:59:20:5c:c9:02:3e:41:5a:d8:e0:7f:
         1b:64:db:f5:55:bf:9d:ab:bc:4a:6b:4f:64:13:e1:65:c9:be:
         e7:0c:98:0e:21:45:de:7e:2d:21:45:dd:97:88:75:2b:37:7e:
         c0:c2:eb:04:0c:e3:da:ff:e1:85:37:4c:2e:8c:1c:c2:79:b0:
         99:63:e2:7b:42:e7:40:28:19:6f:06:2f:14:f6:b6:4a:28:a0:
         97:b5:93:78:0d:93:c4:19:d9:9a:e7:7f:ac:a7:89:58:53:40:
         58:33:9c:62:4b:c2:65:1a:c3:2a:42:bc:07:ed:00:f0:cc:c6:
         7c:93:dc:0c:98:b8:cd:1a:3d:7c:72:bc:a7:60:a2:b2:b9:03:
         f9:dc:82:9b:5a:12:87:f8:5c:84:66:1b:68:17:15:7e:6a:e5:
         90:62:c5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:20:25 2025 by rpki-client