This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/57B53F64DE9B11EC9AE23269C4F9AE02.roa
File:                     57B53F64DE9B11EC9AE23269C4F9AE02.roa (raw, json)
Hash identifier:          8iSV8D8oD91ieFptEm6yOg+QGlIuWzGhM3xHJS2wfog=
Subject key identifier:   C3:CD:11:A8:7A:E9:C7:BC:6C:B6:9E:C8:6E:BB:16:85:03:05:A4:28
Certificate issuer:       /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial:       0485
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/57B53F64DE9B11EC9AE23269C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 12:29:49 +0000
ROA not before:           Thu 04 Dec 2025 12:29:49 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     136526
IP address blocks:        103.80.132.0/22 maxlen: 22
                          103.80.132.0/24 maxlen: 24
                          103.80.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
                          rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1157 (0x485)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
        Validity
            Not Before: Dec  4 12:29:49 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=69317ebd-fe81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2c:0b:13:6d:91:a7:35:13:22:14:d3:58:51:
                    de:dc:05:ce:30:f5:b4:4f:1c:de:fa:93:c7:20:9f:
                    ca:f9:c2:55:7e:ce:e7:02:93:4c:27:36:d9:7c:c6:
                    10:20:ca:fb:0d:70:66:20:4b:4f:27:64:2e:77:bf:
                    88:3a:74:62:ee:8c:7e:a7:17:d9:34:02:df:f0:21:
                    ac:56:0d:3e:f6:c3:4c:6f:3b:c7:53:bb:d7:3b:5b:
                    f4:c0:0a:dd:7f:54:f0:7c:b6:8a:02:10:a6:a4:90:
                    9f:75:7d:6f:9e:da:1a:b5:65:e0:8c:a8:b2:47:6a:
                    a5:3f:89:8f:c8:e2:24:9c:54:cf:9a:ba:fb:ff:1a:
                    21:48:f0:45:15:28:81:5c:a1:01:a3:18:b9:cc:b9:
                    81:1d:a4:2a:3e:f3:c5:ea:ba:83:c2:e6:b8:0e:74:
                    53:42:5e:e8:46:6e:52:41:94:e2:b5:6a:24:c4:64:
                    2f:22:bc:cc:26:47:c3:f9:30:f7:d7:3f:cb:e7:02:
                    c9:1e:d5:51:36:8a:eb:af:c3:00:a3:4f:e3:14:0e:
                    bf:37:3f:78:13:6d:ee:7a:62:f1:03:f9:6b:a8:0b:
                    38:b9:54:8a:1c:c0:96:c2:53:e5:81:ed:77:65:46:
                    d9:6a:1c:56:46:56:99:ac:3f:de:2a:63:d3:bf:1b:
                    a2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CD:11:A8:7A:E9:C7:BC:6C:B6:9E:C8:6E:BB:16:85:03:05:A4:28
            X509v3 Authority Key Identifier:
                keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/57B53F64DE9B11EC9AE23269C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:23:c5:64:6b:15:1f:e1:97:25:23:98:e0:31:25:02:c0:e3:
         da:1e:a4:6a:b9:cb:64:5b:67:f5:68:3e:9d:97:16:b9:26:38:
         a7:2b:e8:2f:84:11:16:91:65:5b:71:8e:ae:ae:6d:a6:63:f9:
         99:a5:93:ae:0b:81:70:4c:b3:8b:8d:df:f6:8f:b7:d8:1e:a1:
         f5:72:f2:9f:66:7c:0d:3f:72:d5:69:06:5e:6c:da:16:0b:c0:
         ff:e9:b5:ff:67:db:70:6b:49:97:43:53:9f:69:c6:b7:f6:b6:
         cc:4e:6c:32:55:2c:e5:d5:99:24:eb:d8:72:2b:61:9a:95:6b:
         cc:52:53:25:19:eb:26:23:aa:34:c3:7c:28:5b:4d:e3:50:27:
         4d:2c:af:00:2c:94:1a:fc:c5:d6:28:a7:12:ed:e7:1d:fd:77:
         94:9c:5c:2e:ef:d3:41:7f:7c:6a:ce:ce:db:2e:ea:ed:d0:91:
         42:ba:a9:68:a5:78:86:4d:7c:ba:71:eb:17:55:79:72:0b:be:
         95:6e:15:4e:85:c6:a5:61:e0:29:88:7a:5e:9a:01:8a:02:cb:
         4f:d4:b6:74:f4:96:f6:50:d5:16:3a:15:b1:ab:2e:2c:4f:fd:
         90:03:1d:a9:66:ca:16:37:c5:e6:a9:1d:8f:cc:aa:26:42:a3:
         8b:cc:c2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:25 2025 by rpki-client