This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/59D82E00DE9B11EC9AE23269C4F9AE02.roa
File:                     59D82E00DE9B11EC9AE23269C4F9AE02.roa (raw, json)
Hash identifier:          aK5lOBxuyy20/P6Yp/WYpmnOKhoFOh8i3wflWDT9tlc=
Subject key identifier:   DC:F6:E8:2E:C6:BC:43:65:B9:96:3D:05:33:4D:10:85:35:3B:B2:B1
Certificate issuer:       /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial:       0488
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/59D82E00DE9B11EC9AE23269C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 12:29:52 +0000
ROA not before:           Thu 04 Dec 2025 12:29:52 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     212921
IP address blocks:        103.80.132.0/22 maxlen: 22
                          103.80.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
                          rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 22:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1160 (0x488)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
        Validity
            Not Before: Dec  4 12:29:52 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=69317ec0-6fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:09:4a:60:29:c7:f5:04:20:ad:cd:02:94:
                    25:84:7c:52:d5:76:eb:01:40:8d:d6:82:26:e6:99:
                    cc:19:44:88:6b:32:74:83:5c:74:f1:23:56:0d:ca:
                    99:0b:ae:ad:67:69:51:1a:e4:f7:84:23:4d:5e:d5:
                    a2:58:ac:f7:33:c5:61:b5:74:96:63:f4:77:5a:38:
                    8f:0d:02:d1:01:4e:9d:6c:9c:09:e7:60:49:72:0c:
                    d2:9c:18:82:68:bd:01:31:4d:52:4c:93:a9:b6:49:
                    e1:e6:18:b3:9d:bf:56:d8:ba:8b:74:99:35:2d:e9:
                    a6:92:97:a4:71:bd:7e:61:24:ad:34:a7:3f:e7:34:
                    e3:a0:bc:57:38:3d:53:f6:22:98:4b:73:4d:b6:3d:
                    91:38:30:34:3d:10:e0:a3:f6:f3:5b:24:8a:1b:ca:
                    36:8e:93:db:60:0d:eb:40:27:71:7b:fe:f2:d8:44:
                    6c:ed:ed:66:e6:9a:52:3d:22:5d:02:0f:90:1f:48:
                    88:df:66:4b:d2:54:86:55:5b:80:81:09:9e:4f:79:
                    c3:d2:d8:37:d4:be:68:a4:3a:2b:6a:f4:b0:61:6c:
                    ce:05:02:5a:ee:c2:57:c4:6b:f5:79:52:fd:7a:1d:
                    03:85:3f:c1:fb:8b:ee:81:79:d2:d4:53:a2:a0:c3:
                    d5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F6:E8:2E:C6:BC:43:65:B9:96:3D:05:33:4D:10:85:35:3B:B2:B1
            X509v3 Authority Key Identifier:
                keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/59D82E00DE9B11EC9AE23269C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:6d:fb:d0:e2:81:72:e5:89:be:9b:f3:24:f8:16:7d:30:8b:
         14:46:9f:36:64:09:bc:a0:78:04:30:0d:b0:2b:b1:7f:fc:57:
         e2:6a:e5:cf:54:c4:5d:ec:2e:cd:cf:de:5e:3d:88:c8:ae:a7:
         8b:6a:24:97:82:56:7e:dd:32:36:10:8f:d3:4b:06:5e:b0:b5:
         be:90:47:32:92:38:60:fc:0d:a7:50:2a:9d:8a:f1:b2:90:88:
         f3:f7:c9:f3:3b:84:6a:0f:eb:95:c1:42:b9:37:b9:5f:ef:f4:
         a5:0c:21:fa:6e:2a:53:d8:84:fb:0b:14:a4:3c:ec:f3:78:4c:
         50:a0:f8:c7:a4:6a:4e:e1:7e:42:ab:92:9f:99:14:7d:14:13:
         dd:87:bd:c8:a4:2e:1a:a2:73:11:8b:df:77:2f:c0:06:1f:80:
         c3:6f:ef:5c:28:e5:13:0a:d9:54:58:a2:99:b7:9d:26:c6:cd:
         98:8f:93:0b:77:48:0f:c6:a1:67:61:9d:7a:70:9e:b4:a9:94:
         a6:d5:60:ce:0f:f4:61:fb:37:44:b7:31:59:99:2e:4a:d0:f7:
         9b:f4:5d:89:54:47:46:49:e3:80:a2:89:33:51:03:7f:a1:5c:
         fc:da:35:b0:57:6f:62:9f:25:5a:41:8c:4e:ed:06:95:18:bb:
         b1:3d:6d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:54:19 2025 by rpki-client