This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/C23053B019A911EF97366417C4F9AE02.roa
File:                     C23053B019A911EF97366417C4F9AE02.roa (raw, json)
Hash identifier:          7AHfRlf5obcLabSztF3WSrRoKuN5MOc2fWcxIFrj8UQ=
Subject key identifier:   E4:CF:D0:1E:5A:8A:95:69:B8:E5:F3:D1:B0:6C:04:85:E4:7C:CF:44
Certificate issuer:       /CN=A91383BF/serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623
Certificate serial:       0127
Authority key identifier: 51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/C23053B019A911EF97366417C4F9AE02.roa
Signing time:             Fri 05 Dec 2025 03:12:47 +0000
ROA not before:           Fri 05 Dec 2025 03:12:47 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     64006
IP address blocks:        45.116.48.0/22 maxlen: 24
                          103.81.40.0/22 maxlen: 22
                          103.81.40.0/24 maxlen: 24
                          2400:6140::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl
                          rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383BF, serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623
        Validity
            Not Before: Dec  5 03:12:47 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69324dae-5c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:69:78:eb:7d:82:9a:40:05:b9:11:da:f2:
                    5e:ad:d5:44:b5:ed:fb:1e:94:e2:eb:40:ce:5d:b8:
                    24:01:ad:b2:49:a1:b7:85:35:e8:cb:88:d5:21:e5:
                    23:6a:71:92:17:00:5a:ed:32:6a:d1:8c:7d:45:7f:
                    20:af:aa:ba:a0:29:b5:c9:98:5a:c0:fc:9e:bf:b5:
                    ce:45:0e:40:8a:af:32:20:2b:de:23:39:4b:3b:68:
                    9e:ee:8b:0b:f9:3a:0c:ef:90:83:3e:4b:45:9a:81:
                    1f:49:41:16:8e:44:da:0b:c0:3c:99:cd:f7:3d:b7:
                    a2:95:86:f0:66:ea:88:ae:bd:72:4e:df:4c:ae:d1:
                    6c:c3:7d:51:9f:78:3a:49:2e:b2:d6:bf:9c:29:f9:
                    d7:7c:75:c1:bb:6a:a4:ea:64:59:08:d9:56:f8:9b:
                    1c:c9:62:c5:98:34:38:14:2b:e7:32:af:e7:6d:1a:
                    8a:ba:ac:ce:9c:51:46:15:a1:da:06:9b:43:28:23:
                    91:f5:bd:99:75:66:78:dc:6d:81:82:3a:94:9d:c8:
                    b5:2f:27:c6:07:f5:48:15:2f:b4:27:7c:a4:94:93:
                    f2:d1:bc:40:10:b5:0e:52:9e:cf:45:33:ca:34:3e:
                    f9:92:b8:76:f4:e7:17:2e:1d:7a:da:c3:98:b4:c2:
                    e9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CF:D0:1E:5A:8A:95:69:B8:E5:F3:D1:B0:6C:04:85:E4:7C:CF:44
            X509v3 Authority Key Identifier:
                keyid:51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/C23053B019A911EF97366417C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.48.0/22
                  103.81.40.0/22
                IPv6:
                  2400:6140::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:e0:da:7f:fc:2e:cb:d0:9a:7d:cd:cd:66:4c:e6:3b:36:a6:
         bb:bf:cb:fc:ef:e3:db:9e:97:93:73:17:e6:3e:d0:2a:26:f7:
         25:3b:b5:23:c8:f3:fb:0d:5e:fb:8f:e2:5a:97:8f:84:ee:71:
         57:58:72:27:d2:2e:aa:33:93:ae:78:ac:a8:03:c2:c2:08:88:
         bb:de:4f:13:12:77:d9:01:9c:bc:ac:3c:34:4e:66:06:1b:8e:
         1f:65:51:d9:08:93:68:20:67:b6:ba:06:8a:5d:3d:33:ae:e6:
         c7:e7:9a:c3:85:85:69:c9:be:12:7e:ec:c9:6b:6a:04:8e:42:
         70:ad:1f:88:09:c9:67:ed:9c:46:a0:67:fd:d9:5b:54:a4:34:
         a0:15:cb:5c:2b:6b:35:a8:78:bd:39:b8:11:fb:fd:a1:c4:41:
         64:93:ab:8c:1a:c2:7c:d7:14:c0:ab:e4:7e:05:6d:3a:4b:91:
         de:07:df:aa:2e:4e:70:88:28:3a:a3:0a:28:be:a2:fb:27:27:
         2c:d6:c7:cb:a1:74:e9:d7:e3:2d:d2:72:81:cb:2c:e1:3f:c9:
         0e:a3:c1:1a:af:a2:bf:e0:76:b0:dc:36:9f:84:19:a7:c6:cf:
         bc:5e:51:dc:f2:ea:f3:69:ab:59:1a:3f:1e:d4:29:a0:2c:3c:
         5c:02:96:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:42:15 2025 by rpki-client