This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/018377CA9AF111EC9717F22AC4F9AE02.roa
File:                     018377CA9AF111EC9717F22AC4F9AE02.roa (raw, json)
Hash identifier:          yG8PlSoP79B0Ukp9xyIdEKnsXwnrefETQ9cXhevZuq0=
Subject key identifier:   CD:CA:D2:09:60:23:BD:D7:BA:4C:6B:3F:09:4D:B8:F6:06:47:17:C9
Certificate issuer:       /CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48
Certificate serial:       040E
Authority key identifier: FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/018377CA9AF111EC9717F22AC4F9AE02.roa
Signing time:             Thu 25 Dec 2025 00:20:37 +0000
ROA not before:           Thu 25 Dec 2025 00:20:37 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     149490
IP address blocks:        103.181.30.0/23 maxlen: 23
                          103.181.30.0/24 maxlen: 24
                          103.181.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl
                          rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1038 (0x40e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91390D6, serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48
        Validity
            Not Before: Dec 25 00:20:37 2025 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=694c8355-414e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:21:46:c5:dc:97:0a:fa:47:56:7b:ed:fa:
                    34:89:75:51:9d:5d:4e:6e:d5:5e:a8:54:31:f7:62:
                    95:a0:ac:03:31:60:de:ba:de:19:cb:d2:9d:0f:03:
                    1b:21:bb:6b:cf:c2:75:d4:cf:da:71:0e:44:94:3d:
                    10:f3:60:87:10:c6:df:63:14:1b:ff:18:06:f5:37:
                    32:b3:f6:25:72:20:ec:ae:87:b0:9d:90:8e:4f:af:
                    4e:14:93:6e:25:b9:61:1b:e4:7d:41:3a:b9:31:8d:
                    ea:e1:8d:90:14:b5:bd:b4:a2:a7:b1:c5:07:b4:e8:
                    fa:1f:7c:af:02:80:ac:ae:dd:c6:48:14:21:30:ad:
                    92:5e:35:b6:af:79:e6:87:85:96:74:83:4e:21:b3:
                    54:bd:c7:38:79:45:b3:52:73:79:47:05:6c:24:b6:
                    64:3d:5d:f3:4c:91:20:b9:86:5b:78:28:ba:df:e7:
                    88:bf:df:4c:39:17:6b:72:82:9b:3f:62:08:2b:0d:
                    21:fa:c3:31:f6:16:7b:d5:c9:43:08:37:98:39:50:
                    34:f8:bd:36:78:27:e4:ff:60:ce:76:aa:5f:33:5a:
                    33:8a:55:ed:26:bc:46:bc:a1:e3:e9:b6:fe:75:b3:
                    56:f8:a3:4d:09:8c:62:4f:02:24:f0:ad:fa:43:e6:
                    ce:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CA:D2:09:60:23:BD:D7:BA:4C:6B:3F:09:4D:B8:F6:06:47:17:C9
            X509v3 Authority Key Identifier:
                keyid:FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/018377CA9AF111EC9717F22AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:51:d1:cb:f7:66:a2:dd:25:22:6b:a3:e5:f6:86:ca:f9:01:
         8e:8e:be:a6:f8:d7:d4:55:4e:63:f7:4a:fb:77:00:75:e3:5c:
         87:7b:05:87:4e:c9:0d:51:84:01:7d:17:33:f2:0f:15:a8:f9:
         fc:7a:5c:b8:c6:44:c0:fe:be:82:e4:a7:78:ee:b8:be:71:5d:
         ac:15:68:34:2e:5a:99:dc:9f:1c:ce:cc:16:b2:26:8a:8a:7f:
         43:89:d9:83:f3:92:28:10:6b:e7:35:50:1f:10:33:b4:3e:33:
         b7:47:d1:55:69:7a:f0:6a:4c:88:89:cc:99:db:70:52:b7:3c:
         d9:88:7b:98:87:54:ad:f2:85:16:d3:45:29:5d:73:18:99:d5:
         e1:03:6d:13:e3:06:21:5d:77:2c:46:11:76:ff:85:73:a2:0e:
         56:3d:c6:57:08:09:af:b2:99:1b:46:48:23:b1:61:a1:63:cc:
         9f:15:c9:e1:19:55:fa:96:3a:b6:e1:c7:45:79:37:53:38:eb:
         d6:9e:72:d7:6e:17:e5:6e:e5:66:18:a9:b4:97:39:42:04:72:
         a9:31:c1:d2:46:09:cf:c6:df:d8:46:9b:15:0d:f5:1d:f9:af:
         1d:42:9c:c1:ba:73:40:1a:f9:73:75:7f:23:06:07:c2:1f:3f:
         44:c5:fb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:01 2026 by rpki-client