This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/3EACF95EEBB511ECA410BF6DC4F9AE02.roa
File:                     3EACF95EEBB511ECA410BF6DC4F9AE02.roa (raw, json)
Hash identifier:          qKX/GBn2ViWf+TjqAq1x5OKYSX2OLWnCMDMtErmOaQ4=
Subject key identifier:   B8:40:72:DD:06:39:27:31:37:F4:D4:DE:DA:D3:E4:03:FC:F2:79:DD
Certificate issuer:       /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
Certificate serial:       06C5
Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/3EACF95EEBB511ECA410BF6DC4F9AE02.roa
Signing time:             Sat 08 Nov 2025 21:13:09 +0000
ROA not before:           Sat 08 Nov 2025 21:13:09 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     4826
IP address blocks:        103.198.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl
                          rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1733 (0x6c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91854B7, serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
        Validity
            Not Before: Nov  8 21:13:09 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=690fb265-0653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:58:4f:c2:6b:bf:3d:e5:77:b1:e8:ab:aa:2f:
                    21:20:c7:3b:5f:58:51:44:70:88:71:e8:9e:5e:1d:
                    b2:a0:cc:1a:88:cc:94:ed:15:da:9f:84:5a:60:b9:
                    e7:ee:94:7a:f3:87:2d:25:19:9e:7d:93:15:2b:d9:
                    5d:a0:8a:42:96:24:c6:69:84:e9:96:61:5d:d6:b8:
                    04:5b:35:9f:58:63:6b:c8:96:a9:83:d6:39:bb:35:
                    90:da:72:21:cb:70:95:8f:92:20:fe:39:f3:3a:fa:
                    1d:08:1c:84:51:6c:6a:17:59:73:67:75:e6:10:19:
                    7a:31:52:46:5b:16:29:8e:ab:d2:6b:9a:79:cf:3f:
                    eb:fa:28:31:e7:87:3d:20:a9:33:8e:f9:a3:ee:16:
                    ca:e9:42:69:ec:c2:67:a3:07:77:5b:80:27:55:30:
                    93:fc:69:03:c0:43:ea:95:d5:88:05:77:e5:2b:ab:
                    64:89:e2:7a:9f:a0:a1:81:6b:61:de:05:cc:7f:94:
                    9a:53:98:6a:da:08:e6:56:84:ec:31:f3:d0:c9:30:
                    23:29:e4:0e:72:48:16:9c:01:3e:51:ed:1a:f9:75:
                    b6:66:27:45:d7:48:d4:10:e6:ab:9e:56:9f:3e:4f:
                    c9:a2:84:9f:ab:3b:a5:9f:98:7e:73:0b:00:a2:18:
                    ae:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:40:72:DD:06:39:27:31:37:F4:D4:DE:DA:D3:E4:03:FC:F2:79:DD
            X509v3 Authority Key Identifier:
                keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/3EACF95EEBB511ECA410BF6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:88:95:bc:ca:42:0f:41:f5:b4:e8:bb:3e:fa:1d:e8:87:72:
         17:07:06:87:7f:34:cf:55:53:34:2d:bf:50:41:ed:54:be:7d:
         d1:af:61:39:34:b0:a8:f5:db:aa:91:2e:1e:ec:33:20:a3:15:
         3c:6e:52:24:fb:fe:2f:5e:2c:db:80:70:87:a4:51:4e:89:40:
         c7:5d:fc:35:a5:38:d9:4f:4f:12:36:18:0c:3c:33:bf:b3:84:
         ba:10:c9:d1:3b:02:bd:24:44:31:83:38:fd:94:e9:9a:5a:48:
         ae:e6:8b:91:b2:e3:e2:68:9e:67:04:e4:4b:e5:74:97:0e:6d:
         b2:fd:0a:81:06:f4:02:b6:2f:4a:cc:e4:8d:5e:84:60:b3:fa:
         6d:41:38:ff:6a:84:df:95:fe:3b:de:8e:64:e8:7b:0c:69:af:
         f4:48:ad:b0:d8:23:37:e1:e7:34:97:42:dd:34:16:b1:03:2b:
         6c:e0:6f:00:bd:27:8f:7a:3e:ca:7e:03:13:68:1a:04:f9:c4:
         97:84:de:5c:36:da:dd:b4:8d:80:25:1d:93:37:bd:23:74:02:
         18:c4:75:a7:34:09:1b:71:f7:f2:ce:56:6c:00:ec:1a:28:8b:
         af:0d:e9:66:c9:df:55:c1:70:27:22:bb:12:76:81:99:96:d9:
         e9:2e:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:44:30 2025 by rpki-client