This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/41C97D600EA811EB8E9A770CC4F9AE02.roa
File:                     41C97D600EA811EB8E9A770CC4F9AE02.roa (raw, json)
Hash identifier:          BTersuR9nT3lEPvuv48IvMBlCU5YGyqezwR+drdWXyU=
Subject key identifier:   88:06:B0:9F:C2:32:B3:AD:76:F7:DF:B6:8C:C4:FE:AF:0C:1C:91:90
Certificate issuer:       /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
Certificate serial:       07EC
Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/41C97D600EA811EB8E9A770CC4F9AE02.roa
Signing time:             Tue 02 Dec 2025 20:53:03 +0000
ROA not before:           Tue 02 Dec 2025 20:53:03 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     141345
IP address blocks:        103.157.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl
                          rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2028 (0x7ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
        Validity
            Not Before: Dec  2 20:53:03 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692f51ae-e8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:fd:df:0e:b3:62:77:7f:33:51:57:21:95:
                    4d:16:a2:bb:22:a3:6a:d0:3f:1f:1f:89:28:95:9c:
                    bf:7f:73:09:2e:08:bf:39:c4:d7:0a:4a:7a:98:29:
                    7c:28:97:d0:b0:72:e8:6b:48:95:47:ce:89:01:e8:
                    84:02:76:fe:aa:2b:76:20:a8:5c:f5:14:ab:4c:71:
                    14:d9:0c:8c:6f:11:08:9a:0e:05:b8:d6:9c:64:ab:
                    95:51:ea:a7:30:49:92:b4:01:33:fd:ac:91:f1:d4:
                    f6:15:15:3d:ad:1e:fe:0f:af:27:c4:ee:d3:22:7a:
                    3c:85:fe:26:2b:18:55:24:0c:e4:0d:11:f1:ec:0b:
                    5a:11:d7:7a:b6:da:f6:61:46:da:67:0a:22:86:0f:
                    bd:12:bd:70:37:ea:e1:5b:9a:78:c7:b1:1f:aa:69:
                    2c:fb:98:ea:c1:ec:63:19:ea:8f:86:28:4c:21:38:
                    2c:fe:af:6d:24:00:af:50:84:a1:ae:72:e6:cb:95:
                    cb:01:75:bd:d2:ba:3a:77:ce:22:ec:0b:8a:e2:08:
                    49:e1:3a:f6:05:3e:a6:ef:49:fb:d0:9b:49:d6:e7:
                    76:b0:41:6a:47:18:ce:0a:84:2a:b7:c5:96:ff:3a:
                    0f:dd:3e:33:98:b7:0e:6d:41:26:b8:dc:4f:1c:63:
                    7e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:06:B0:9F:C2:32:B3:AD:76:F7:DF:B6:8C:C4:FE:AF:0C:1C:91:90
            X509v3 Authority Key Identifier:
                keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/41C97D600EA811EB8E9A770CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:6b:5f:2b:bf:cb:c2:b8:07:41:aa:ca:dd:6f:e3:85:a5:1d:
         34:80:68:89:86:12:c3:94:bb:59:a2:bb:8f:61:19:b9:e2:a4:
         9e:2e:45:77:0b:6c:14:d5:76:63:85:c8:83:ab:e1:44:b0:fa:
         b6:7a:d3:99:a7:f9:bf:b1:f5:17:26:33:c1:0a:e4:af:1b:c1:
         7d:88:0a:48:9b:24:73:e1:71:1c:0f:6d:61:eb:08:fa:18:9e:
         cd:67:ad:30:ef:ac:56:64:04:26:72:5b:ff:24:61:a2:05:4a:
         6d:a5:b2:01:78:94:3b:ea:7b:96:64:59:4d:99:c7:37:76:de:
         6d:73:13:00:28:46:5a:f1:01:ad:86:66:b8:41:29:78:0c:ee:
         21:7e:06:0f:bc:44:4a:2a:dd:34:31:77:0b:6b:0e:2e:f3:c6:
         4c:4d:23:0f:b9:2e:5d:b3:83:7a:51:ae:1a:a4:41:05:ff:17:
         89:c3:28:2b:dc:f0:0e:4b:12:18:6b:29:d2:e6:04:35:f3:32:
         8e:a4:3d:74:bb:ea:04:a4:f2:cc:5a:a7:ea:f6:55:70:a0:3d:
         43:52:b4:bd:c9:4c:1c:27:4e:bb:85:d6:0b:08:76:89:e8:58:
         f6:6e:da:d1:f3:88:a2:72:16:48:e6:2e:d5:62:23:ba:9c:3c:
         20:c5:0f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:57:12 2025 by rpki-client