This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/5F150B08D48611E9A4473984C4F9AE02.roa
File:                     5F150B08D48611E9A4473984C4F9AE02.roa (raw, json)
Hash identifier:          nXyjPMTcGMS2OjbK2PyrCf0HLG1Kb3Cu2oh9uRP2n2s=
Subject key identifier:   8B:3D:BC:5C:70:7E:C0:A7:85:6C:10:75:90:CA:CA:E6:19:7A:7C:1A
Certificate issuer:       /CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458
Certificate serial:       151A
Authority key identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/5F150B08D48611E9A4473984C4F9AE02.roa
Signing time:             Tue 30 Dec 2025 17:14:05 +0000
ROA not before:           Tue 30 Dec 2025 17:14:05 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     38203
IP address blocks:        103.81.172.0/22 maxlen: 22
                          103.81.172.0/24 maxlen: 24
                          103.81.173.0/24 maxlen: 24
                          103.81.174.0/24 maxlen: 24
                          103.81.175.0/24 maxlen: 24
                          203.194.116.0/22 maxlen: 22
                          203.194.116.0/24 maxlen: 24
                          203.194.117.0/24 maxlen: 24
                          203.194.118.0/24 maxlen: 24
                          203.194.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl
                          rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5402 (0x151a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91499BB, serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458
        Validity
            Not Before: Dec 30 17:14:05 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6954085d-01e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:f4:c1:0c:96:e9:64:b9:c3:71:a5:e0:6f:
                    83:6d:63:23:53:f2:78:2e:3c:57:c7:dd:0b:41:6a:
                    fc:05:5c:14:ab:c7:c0:18:bf:3d:1c:15:71:59:8c:
                    f8:dd:75:32:b3:02:12:e6:99:99:ca:3c:77:c5:28:
                    d1:32:4f:75:34:89:0c:89:5f:63:b7:a5:23:13:77:
                    d5:c9:59:13:e4:ae:52:a9:36:35:dd:2f:db:c8:27:
                    9d:64:15:77:1a:4b:a6:18:ff:a7:e6:83:67:90:3c:
                    f7:59:37:fe:5d:13:65:7d:cb:c6:c7:45:e9:b3:30:
                    5d:74:b9:ce:0c:23:78:0b:7f:6d:6e:16:bb:0f:df:
                    ca:7b:da:b5:b5:b1:7d:d4:e9:8f:eb:8c:5e:df:6f:
                    ba:be:3e:7d:9d:5d:3d:36:b5:58:d4:79:91:99:c2:
                    b4:12:6e:6e:80:38:53:fd:8f:35:a8:bb:df:68:1a:
                    71:52:98:31:50:ea:b7:b8:f2:1f:00:02:63:d0:84:
                    3b:be:f0:fa:f3:ec:b1:5a:da:4b:71:18:6b:63:db:
                    2b:5c:d0:d8:8f:9c:cb:00:15:ca:93:4d:20:2d:31:
                    06:fc:18:e3:cd:53:78:c7:8b:cb:cc:79:41:45:72:
                    cb:f4:a6:0f:4c:58:84:de:0f:74:6e:20:aa:92:30:
                    5b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3D:BC:5C:70:7E:C0:A7:85:6C:10:75:90:CA:CA:E6:19:7A:7C:1A
            X509v3 Authority Key Identifier:
                keyid:F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/5F150B08D48611E9A4473984C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.172.0/22
                  203.194.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:01:0e:9e:23:c2:a9:d5:e9:34:3a:80:71:a4:6f:1c:75:85:
         7b:80:3b:47:84:9f:ea:68:a3:60:a9:19:6a:66:01:ff:80:71:
         9e:57:7d:27:f8:61:01:82:a5:ae:bf:fc:2b:f9:e5:71:b4:84:
         39:8a:11:83:c4:18:93:59:7f:3f:0c:bc:e0:48:36:c8:3d:d9:
         fc:a4:88:ed:43:29:16:61:c2:5c:30:ab:af:d3:a7:5b:83:1b:
         2f:95:97:a4:70:06:88:c4:08:1c:6c:f5:18:8e:79:a0:00:eb:
         eb:f1:54:8e:22:60:93:e5:d5:32:ed:c9:2a:2a:75:96:b5:35:
         6a:5e:38:bd:f6:39:20:7c:92:fe:97:0c:a5:9d:eb:56:89:b1:
         b5:53:3f:67:7d:44:e0:88:af:f0:17:f2:25:94:54:8b:2c:33:
         89:13:ff:70:76:25:fe:8a:c2:a7:26:90:b5:4b:bf:3a:97:6f:
         a4:07:60:73:be:39:eb:85:76:10:f6:c0:bb:de:34:6b:9e:18:
         bf:f7:67:13:e7:c7:80:5d:b4:79:49:f4:45:c4:47:98:ba:37:
         59:aa:ad:3e:bd:1a:c0:af:6d:03:2f:84:3e:03:d7:b0:cd:ee:
         f5:58:b7:ba:21:7b:29:6b:4b:25:a3:c1:bf:6c:69:a5:ca:e5:
         10:bf:62:9f
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICFRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NDk5QkIxMTAvBgNVBAUTKEYwRUIzRDExRjBFQ0FFNjg3MzY5NUQ1QUNGQjdCNEFE
QzU1RjM0NTgwHhcNMjUxMjMwMTcxNDA1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU0MDg1ZC0wMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmvX0wQyW6WS5w3Gl4G+DbWMjU/J4LjxXx90LQWr8BVwUq8fAGL89HBVxWYz4
3XUyswIS5pmZyjx3xSjRMk91NIkMiV9jt6UjE3fVyVkT5K5SqTY13S/byCedZBV3
GkumGP+n5oNnkDz3WTf+XRNlfcvGx0XpszBddLnODCN4C39tbha7D9/Ke9q1tbF9
1OmP64xe32+6vj59nV09NrVY1HmRmcK0Em5ugDhT/Y81qLvfaBpxUpgxUOq3uPIf
AAJj0IQ7vvD68+yxWtpLcRhrY9srXNDYj5zLABXKk00gLTEG/BjjzVN4x4vLzHlB
RXLL9KYPTFiE3g90biCqkjBbmwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIs9vFxw
fsCnhWwQdZDKyuYZenwaMB8GA1UdIwQYMBaAFPDrPRHw7K5oc2ldWs+3tK3FXzRY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTlCQi9BQjFDQUM4NjYw
OTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3JtaHphVjFhejdlMHJjVmZO
RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhPczlFZkRzcm1oemFWMWF6N2UwcmNWZk5GZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDk5QkIvQUIxQ0FDODY2MDk3MTFFOEI3NEE4NjFBQzRGOUFFMDIvNUYxNTBCMDhE
NDg2MTFFOUE0NDczOTg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnUawDBALLwnQwDQYJKoZIhvcNAQELBQADggEBAEMBDp4j
wqnV6TQ6gHGkbxx1hXuAO0eEn+poo2CpGWpmAf+AcZ5XfSf4YQGCpa6//Cv55XG0
hDmKEYPEGJNZfz8MvOBINsg92fykiO1DKRZhwlwwq6/Tp1uDGy+Vl6RwBojECBxs
9RiOeaAA6+vxVI4iYJPl1TLtySoqdZa1NWpeOL32OSB8kv6XDKWd61aJsbVTP2d9
ROCIr/AX8iWUVIssM4kT/3B2Jf6KwqcmkLVLvzqXb6QHYHO+OeuFdhD2wLveNGue
GL/3ZxPnx4BdtHlJ9EXER5i6N1mqrT69GsCvbQMvhD4D17DN7vVYt7oheylrSyWj
wb9saaXK5RC/Yp8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:01:59 2026 by rpki-client