This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/6EBD9348315C11F0B4470733C4F9AE02.roa
File:                     6EBD9348315C11F0B4470733C4F9AE02.roa (raw, json)
Hash identifier:          dUOsQ8A8T6M3HiMz0rMI1OFkO2hKKT8HDlrVYJlbsAA=
Subject key identifier:   36:13:9C:3D:09:00:CC:C4:C4:D0:09:65:63:63:B1:6E:21:A6:18:49
Certificate issuer:       /CN=A91456CF/serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093
Certificate serial:       65
Authority key identifier: 0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/6EBD9348315C11F0B4470733C4F9AE02.roa
Signing time:             Fri 21 Nov 2025 05:23:10 +0000
ROA not before:           Fri 21 Nov 2025 05:23:10 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     135675
IP address blocks:        103.78.185.0/24 maxlen: 24
                          103.101.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl
                          rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91456CF, serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093
        Validity
            Not Before: Nov 21 05:23:10 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691ff73e-cf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:a1:d8:cf:2b:40:50:7f:f2:d6:45:9d:31:
                    b7:5f:f9:cd:68:c1:4e:21:a7:a8:9c:56:ad:d8:a3:
                    c1:17:bc:e0:16:77:5f:7b:2f:ee:c1:c1:d5:e5:09:
                    05:cf:0f:09:53:69:e3:ff:73:86:be:f6:09:31:00:
                    0a:6b:10:0b:cb:ab:60:5b:3c:df:a4:cb:68:15:d2:
                    d3:92:c5:33:ef:df:e0:14:d5:52:c3:09:96:04:07:
                    3c:09:a3:64:c2:80:17:ea:c6:10:91:2d:bb:18:c5:
                    a6:0d:5c:e2:18:a2:ff:69:11:37:e2:57:18:f2:bf:
                    84:0e:f9:c1:c3:77:5e:9e:e1:28:c6:4b:bb:f5:87:
                    c1:10:0c:c7:e8:2d:5f:3b:b9:bd:87:c4:e2:b8:ec:
                    59:7e:cb:ea:c6:95:ee:71:ea:a3:42:c0:a7:d0:f9:
                    95:2a:ae:62:b2:49:0e:9e:91:29:fc:65:0b:e5:f5:
                    bf:4a:76:29:ce:1f:6c:df:7a:ee:58:04:19:6c:74:
                    47:24:ce:bc:73:a5:18:71:98:52:c4:64:5f:bd:8e:
                    81:ab:2e:f5:f2:7e:98:53:2f:2a:ec:85:4d:57:b9:
                    a2:dd:20:e7:72:ff:ea:e3:c1:bf:74:18:74:5c:81:
                    24:b0:3a:50:2b:e3:10:13:4f:75:ad:72:56:ca:46:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:13:9C:3D:09:00:CC:C4:C4:D0:09:65:63:63:B1:6E:21:A6:18:49
            X509v3 Authority Key Identifier:
                keyid:0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/6EBD9348315C11F0B4470733C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.185.0/24
                  103.101.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:75:67:3b:0d:85:44:14:7f:c9:af:9a:6f:10:72:b3:8b:ad:
         9d:38:ec:c0:31:24:0e:2d:56:c2:18:14:53:71:bb:83:a1:b0:
         e1:44:c2:81:87:c7:47:ba:6f:99:82:8d:ea:15:62:a6:e8:94:
         a1:b3:b3:ad:4a:39:16:5c:07:ec:7f:27:57:65:02:f0:4e:05:
         c5:6a:87:d7:dc:a1:ee:94:c2:1b:1f:5c:55:e2:63:24:82:97:
         c1:49:1d:42:55:00:45:c8:77:57:7b:c9:d5:fe:f0:82:53:6e:
         f7:5e:ab:75:93:1e:94:3e:42:07:b4:69:d0:24:aa:ab:a4:60:
         a2:23:d7:41:5a:22:c6:43:6a:77:0e:7f:db:b7:30:56:15:dd:
         21:ae:ac:df:1a:fb:21:9e:41:39:ef:3e:cd:b1:f6:9d:cc:52:
         00:62:85:a5:64:05:53:9a:78:93:ce:01:9f:07:b4:13:8f:bc:
         71:3a:da:f3:4d:e5:48:03:cf:d5:95:fd:4d:7b:65:45:0c:8a:
         bf:c1:33:ab:ee:05:62:33:f9:41:7b:cd:cc:c8:95:7f:99:59:
         98:41:cc:2b:32:ab:22:31:71:39:ae:d6:ac:18:ff:63:9a:a9:
         e9:58:e6:a8:d3:2e:a7:f6:38:7f:a6:c0:68:e6:ba:05:e4:4a:
         ab:8e:3a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:23:23 2025 by rpki-client