This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/D9C33050560B11EDA1636E52C4F9AE02.roa
File:                     D9C33050560B11EDA1636E52C4F9AE02.roa (raw, json)
Hash identifier:          9/2XCNctQ1f+o95ZaKqd5kOwv2Isg2/Z/qwhLlbN/dM=
Subject key identifier:   E8:E8:52:C1:6C:8E:CE:52:F5:D6:DD:1D:61:86:C3:AC:A3:9C:0A:C5
Certificate issuer:       /CN=A91747E1/serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E
Certificate serial:       0B48
Authority key identifier: 7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/D9C33050560B11EDA1636E52C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 18:39:10 +0000
ROA not before:           Sat 08 Nov 2025 18:39:10 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     138362
IP address blocks:        103.131.144.0/22 maxlen: 24
                          2403:cc40::/32 maxlen: 36
                          2403:cc40::/40 maxlen: 40
                          2403:cc40:1::/48 maxlen: 48
                          2403:cc40:2::/48 maxlen: 48
                          2403:cc40:3::/48 maxlen: 48
                          2403:cc40:22::/48 maxlen: 48
                          2403:cc40:100::/40 maxlen: 40
                          2403:cc40:200::/40 maxlen: 40
                          2403:cc40:300::/40 maxlen: 40
                          2403:cc40:400::/40 maxlen: 40
                          2403:cc40:1000::/40 maxlen: 40
                          2403:cc40:1100::/40 maxlen: 40
                          2403:cc40:1200::/40 maxlen: 40
                          2403:cc40:1300::/40 maxlen: 40
                          2403:cc40:1400::/40 maxlen: 40
                          2403:cc40:1500::/40 maxlen: 40
                          2403:cc40:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl
                          rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2888 (0xb48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91747E1, serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E
        Validity
            Not Before: Nov  8 18:39:10 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=690f8e4e-98c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:68:cf:8c:21:1f:a1:09:36:42:29:55:66:
                    8b:98:b4:85:67:f8:0a:e7:ae:2f:ed:f4:ec:c7:61:
                    dc:94:14:79:34:d7:5e:80:cd:db:cb:34:8c:de:db:
                    a4:15:fd:b1:2d:e5:d2:b3:d5:78:15:b7:60:80:da:
                    5f:06:5b:44:50:28:ce:3b:02:b4:3f:68:01:f5:22:
                    b1:46:8f:01:14:d3:51:84:3a:b0:73:8d:ba:0d:7e:
                    88:39:3c:22:1c:c3:c2:42:f4:d6:43:bd:c3:09:2f:
                    4e:2e:0c:73:e7:c6:a1:44:cc:ee:4f:c0:9d:54:e0:
                    c4:32:a6:ed:11:53:7e:64:57:29:fc:e9:03:5d:63:
                    0e:04:3c:f0:5f:89:34:9d:47:ab:bb:38:1a:f3:77:
                    f2:65:3a:6f:51:bb:8c:91:31:6d:fa:68:84:ef:cc:
                    8b:ea:4f:6f:d9:9d:1f:ed:4c:fc:f7:ad:07:ce:c8:
                    5b:c8:57:10:16:a3:25:2b:01:08:27:2a:4f:35:bc:
                    89:44:e3:66:02:66:a0:b7:fd:c8:96:7d:28:99:35:
                    6b:3f:8e:2c:b7:16:c2:78:b6:04:a5:32:c6:1c:83:
                    22:21:06:d6:c7:45:24:45:bb:96:04:99:01:22:30:
                    a6:83:ba:57:b2:e0:4f:80:76:19:3a:6e:35:77:87:
                    23:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E8:52:C1:6C:8E:CE:52:F5:D6:DD:1D:61:86:C3:AC:A3:9C:0A:C5
            X509v3 Authority Key Identifier:
                keyid:7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/D9C33050560B11EDA1636E52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.144.0/22
                IPv6:
                  2403:cc40::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:82:27:b1:75:11:48:be:66:f7:d7:3b:8b:fe:6f:01:2a:e6:
         1b:99:4c:c1:f8:5e:30:86:e4:3a:b9:f1:2d:d1:67:72:66:3a:
         55:f7:55:58:c4:d3:14:c5:04:b6:a0:64:70:4b:1d:f2:c2:25:
         db:49:77:32:c7:0b:0e:b3:aa:ff:bc:ea:d0:60:0c:c4:77:a3:
         c4:ca:de:6e:24:bd:3a:5b:b7:ad:fe:ad:bd:26:5f:9a:2b:61:
         ac:3b:a2:a4:df:ea:c9:fb:70:b2:b6:cd:c3:a1:e7:d5:69:e3:
         51:6c:61:54:41:63:68:d0:15:e6:74:44:95:31:cf:a8:01:2c:
         f2:56:c7:62:a7:36:5f:2c:4b:82:d4:27:cf:5a:41:7e:61:4b:
         ab:8f:f1:88:67:4e:28:91:90:5e:cd:0e:7e:7a:0b:89:db:d2:
         97:4c:fe:62:f1:bc:26:62:4d:0f:76:79:25:06:6b:39:72:b5:
         69:c8:2b:b6:d8:6f:e5:0a:23:ad:e4:88:6f:d9:a1:5d:eb:40:
         3c:bd:73:a1:e3:28:4a:81:d8:0a:f0:01:0e:da:fe:f5:77:7f:
         1f:08:bf:b7:6b:a1:e8:3b:fa:fd:d7:98:df:4b:64:7e:f2:65:
         84:cd:4a:27:b8:b2:e0:aa:c2:c4:e6:f4:9f:35:c2:40:09:09:
         fb:40:b9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:11 2025 by rpki-client