This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/018377CA9AF111EC9717F22AC4F9AE02.roa
File:                     018377CA9AF111EC9717F22AC4F9AE02.roa (raw, json)
Hash identifier:          ZTGzWMYHeiUgbI/Ob63uEbxBeTDxYyADhXTIjme/A3s=
Subject key identifier:   17:1A:6F:B5:5C:B7:A3:FC:25:AE:06:69:84:75:DE:81:E4:AE:18:17
Certificate issuer:       /CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48
Certificate serial:       03F4
Authority key identifier: FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/018377CA9AF111EC9717F22AC4F9AE02.roa
Signing time:             Wed 12 Nov 2025 10:14:13 +0000
ROA not before:           Wed 12 Nov 2025 10:14:13 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     149490
IP address blocks:        103.181.30.0/23 maxlen: 23
                          103.181.30.0/24 maxlen: 24
                          103.181.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl
                          rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 22:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1012 (0x3f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91390D6, serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48
        Validity
            Not Before: Nov 12 10:14:13 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69145df5-c42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:10:70:21:02:b6:e3:54:98:35:9d:7d:55:
                    8a:2c:e5:3e:a1:75:3f:85:be:a2:2c:b4:a1:35:48:
                    88:8a:3f:c9:7c:ba:eb:34:f3:bc:e5:85:79:0c:17:
                    57:90:a9:e3:e5:50:75:3b:45:98:b2:ec:47:1d:32:
                    b6:8d:dc:b5:48:16:7d:85:17:6a:ea:f3:a5:91:49:
                    e4:05:92:2c:a3:7c:e7:fd:d7:6e:03:09:2d:a7:27:
                    e2:d6:26:7a:ce:57:0b:1a:52:84:4f:fb:0a:63:d7:
                    ba:5f:ba:0e:39:3b:e0:f5:0a:06:b2:79:f7:fd:8d:
                    4a:64:76:42:82:39:6b:cb:00:ae:14:6f:f4:69:c8:
                    2a:1d:58:79:39:56:3b:1c:ca:50:60:8f:59:13:71:
                    c2:f8:80:46:3b:21:b2:bb:97:53:27:2d:92:5c:dd:
                    0b:5d:10:51:d5:6e:55:d2:47:9a:d5:de:6e:71:05:
                    e4:a0:db:98:b6:20:e8:68:82:b4:e0:af:eb:f9:85:
                    76:5c:ef:32:d0:40:19:bb:ac:8f:47:d7:8c:16:80:
                    7b:bd:cf:f9:20:7d:53:ef:e5:eb:be:23:b0:6a:70:
                    a4:a2:87:de:3b:69:0a:09:d6:ab:8d:51:15:75:eb:
                    9b:62:0e:da:40:8f:1e:56:c7:b1:65:46:e9:7d:b6:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1A:6F:B5:5C:B7:A3:FC:25:AE:06:69:84:75:DE:81:E4:AE:18:17
            X509v3 Authority Key Identifier:
                keyid:FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/018377CA9AF111EC9717F22AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:05:93:4c:5b:7a:08:25:bd:bd:d1:35:49:7c:50:b0:b6:c6:
         bf:1c:37:ea:6a:3c:f8:36:9b:41:b2:66:35:68:63:71:63:94:
         6e:70:6f:65:fd:69:ad:3a:7b:00:95:32:12:8c:b5:ce:fa:e6:
         dc:8f:d0:3f:07:38:f5:00:66:c5:b7:0b:3b:e1:55:35:71:9f:
         20:bd:5f:e1:c1:50:46:77:47:99:82:56:cc:cb:00:43:b3:64:
         aa:2c:23:b5:f8:83:3e:d5:2c:59:89:63:b7:68:0c:1d:f0:fb:
         22:6c:97:b7:83:8b:d3:a4:7a:42:b0:f3:58:d3:9a:bb:1b:25:
         34:3e:cc:8c:d0:a9:69:7c:4a:5a:8e:36:39:e7:9a:be:62:30:
         0b:42:fa:b3:87:1b:f6:18:8e:93:fd:97:17:4f:43:f4:3d:de:
         a6:d3:1e:52:42:f6:a9:53:1e:06:bd:16:cd:ee:30:24:03:af:
         db:70:b6:2d:24:bf:f6:1f:61:55:32:10:8b:65:a2:6d:b1:2d:
         6b:da:f3:3f:39:4a:90:b1:40:07:d5:de:b9:a3:6c:bf:24:80:
         dd:6c:ad:c6:88:ad:4b:65:66:70:db:0e:31:cd:6e:db:0b:43:
         06:b6:34:2d:10:69:59:91:99:07:c9:e7:dd:53:9a:34:fa:df:
         59:85:59:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 17:23:02 2025 by rpki-client