This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/B855A21C3E1211EB8D23EB6CC4F9AE02.roa
File:                     B855A21C3E1211EB8D23EB6CC4F9AE02.roa (raw, json)
Hash identifier:          7Is3vb8M4Ael/zSFkVaQ0sGxAVtnbAzSio382bs/guQ=
Subject key identifier:   8D:45:E4:A2:76:E8:1E:C5:ED:19:61:09:AE:27:5F:EC:B5:AE:C4:A8
Certificate issuer:       /CN=A91508C4/serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3
Certificate serial:       0775
Authority key identifier: AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/B855A21C3E1211EB8D23EB6CC4F9AE02.roa
Signing time:             Sat 06 Dec 2025 21:03:10 +0000
ROA not before:           Sat 06 Dec 2025 21:03:10 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139770
IP address blocks:        103.144.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl
                          rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909 (0x775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91508C4, serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3
        Validity
            Not Before: Dec  6 21:03:10 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69349a0e-e516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:38:35:9a:d1:b3:b1:c7:7a:f4:51:36:47:
                    0b:73:66:97:42:0e:0d:77:4a:a7:3b:c4:ae:b9:99:
                    ff:b6:d4:a7:8f:f5:59:53:04:f3:bc:6e:1d:5c:dd:
                    38:11:55:21:39:ae:a2:fa:97:39:f6:4e:e3:4c:ed:
                    2a:80:2d:31:86:4f:25:73:37:f9:76:f1:a3:68:ef:
                    90:a6:39:23:12:66:cf:07:3e:ee:51:fd:70:ff:73:
                    61:d0:c9:36:c0:a5:4d:f1:c0:bb:a6:0a:95:66:29:
                    19:99:73:ab:cd:a8:9a:5f:50:e3:5c:53:8c:26:23:
                    3c:e8:08:af:91:87:92:93:d3:2c:e3:8e:f6:fd:4b:
                    46:5a:32:b8:24:ef:be:05:93:74:36:cd:80:da:2c:
                    e0:39:b9:65:a6:0c:1a:99:25:46:f1:af:b0:1d:bc:
                    bf:66:16:cf:6b:a4:b4:6a:a0:50:46:4f:83:07:0d:
                    3c:fc:31:80:6e:d9:b1:1a:5b:cd:9a:cc:ee:75:05:
                    8e:ae:0b:61:43:be:8e:22:04:a5:ba:e7:9e:3c:87:
                    17:e4:d6:2b:9d:a6:b4:24:1d:73:ca:9e:c1:e5:4a:
                    75:a2:e3:dc:9c:fd:2f:6a:43:ee:e0:7e:50:93:82:
                    02:d0:32:e8:04:c8:32:07:7e:81:61:54:89:c0:11:
                    88:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:45:E4:A2:76:E8:1E:C5:ED:19:61:09:AE:27:5F:EC:B5:AE:C4:A8
            X509v3 Authority Key Identifier:
                keyid:AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/B855A21C3E1211EB8D23EB6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:fa:2e:df:9b:78:8f:e4:8d:cb:2f:ac:b6:59:ce:17:cf:16:
         9c:a2:77:36:d1:1a:4e:f5:d9:f8:4f:7d:cc:df:e5:72:84:d9:
         ca:f9:70:8a:a7:86:83:9e:f6:02:84:0e:91:79:22:ad:7d:73:
         96:6a:da:2a:25:1a:a0:53:9a:9b:96:ec:22:5e:4a:ad:9c:39:
         e4:e8:d4:01:60:25:9b:f0:3e:49:5b:99:74:be:fd:09:5b:80:
         06:e9:a5:b3:fb:a1:5c:c2:1d:5b:ae:1f:d7:48:26:9b:93:c3:
         10:fe:b7:95:45:40:25:7a:11:94:b9:a9:49:0d:52:05:fb:8c:
         fe:e2:e3:1d:a9:46:01:73:11:8c:dc:75:32:6d:bb:1b:85:02:
         0f:94:75:05:02:42:82:11:36:35:59:61:c9:1a:52:8e:b7:77:
         33:7c:8d:e6:d3:25:ba:08:1e:b9:6f:71:1f:7a:ef:02:9e:fe:
         5d:0f:d6:2c:f5:9a:7b:16:91:4f:05:19:6d:85:63:e1:7b:4d:
         9f:cf:b1:84:2c:bc:ca:f6:16:da:5a:c8:06:14:5d:d9:c2:84:
         87:54:58:d4:b9:68:0d:93:5b:3d:e6:f3:46:9a:34:f2:80:a0:
         cb:e8:2c:8f:8e:50:09:a3:43:86:b4:7c:e4:2e:7b:7a:39:cd:
         1d:bc:f5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:17:08 2025 by rpki-client