This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/6810784CC56F11F0836DEB12C4F9AE02.roa
File:                     6810784CC56F11F0836DEB12C4F9AE02.roa (raw, json)
Hash identifier:          l/6jwLwhHlaq4DjFtJkbAl5/YqlAnf4TjESkfZ2vJwg=
Subject key identifier:   C6:AB:B1:25:D0:7B:8E:CB:5B:F3:8F:A8:DD:FA:4D:19:60:2A:7D:71
Certificate issuer:       /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial:       01D3
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/6810784CC56F11F0836DEB12C4F9AE02.roa
Signing time:             Wed 19 Nov 2025 17:44:33 +0000
ROA not before:           Wed 19 Nov 2025 17:44:33 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     46450
IP address blocks:        103.115.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
                          rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
        Validity
            Not Before: Nov 19 17:44:33 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=691e0200-9435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7d:3e:94:23:99:3a:7a:87:1b:d6:29:15:99:
                    66:37:21:4d:45:e3:de:fc:94:81:1e:f5:fb:cf:61:
                    a7:ea:7a:00:50:bb:98:d0:a7:56:8b:bb:cb:0e:1c:
                    4a:9e:ed:d8:38:b7:69:07:f4:94:2d:38:11:5a:82:
                    13:65:f3:dc:ae:9a:f0:de:2d:61:a9:d2:6f:ef:4c:
                    04:5e:28:41:e3:5f:8d:a1:e7:76:26:8f:43:1b:56:
                    70:90:7b:78:79:14:37:02:eb:3a:ff:31:c3:63:44:
                    4f:8e:d8:c9:d9:9b:a0:23:6a:11:cd:07:91:ad:4b:
                    98:c2:ff:b5:d2:72:73:6b:2c:22:1d:7b:4c:15:c7:
                    0c:2d:bd:59:2a:cb:42:b0:c9:10:cb:57:51:b5:10:
                    9d:60:31:90:21:67:7d:61:7c:4f:c1:e4:f9:4e:44:
                    88:ec:eb:ea:50:7c:50:84:2f:fe:b2:e5:9c:0b:7e:
                    0e:c9:75:be:72:7b:cc:e3:35:78:f7:af:a0:9f:85:
                    33:ce:5c:18:9c:b2:3d:5c:62:8a:dc:b3:80:c4:1a:
                    b2:f7:08:84:62:74:f9:1c:c7:8f:28:33:d6:63:16:
                    57:0b:41:f8:a3:03:e9:61:e3:ac:35:b9:df:ed:2c:
                    f4:ea:5a:fe:1a:13:95:47:70:7e:8b:f3:4f:fb:c6:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AB:B1:25:D0:7B:8E:CB:5B:F3:8F:A8:DD:FA:4D:19:60:2A:7D:71
            X509v3 Authority Key Identifier:
                keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/6810784CC56F11F0836DEB12C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:d5:04:fb:95:c4:fb:83:1a:30:85:bd:b9:d0:27:56:f3:36:
         10:54:19:77:49:fa:f7:be:68:69:43:d3:74:c2:d8:3e:78:be:
         4f:9d:a5:eb:2d:bc:aa:25:aa:8c:73:a0:08:50:b9:3c:b8:02:
         d7:5f:00:79:e6:b4:3b:33:53:eb:68:0d:b1:ca:03:eb:16:d6:
         e5:15:79:99:80:b9:e1:33:68:7d:34:c3:8b:21:24:dd:43:f9:
         96:af:34:e4:21:46:28:d1:b7:0d:6b:f9:03:3a:0f:61:bf:2e:
         8c:23:96:e2:e1:11:c4:7d:5b:34:97:6f:74:bf:c3:ff:cf:d6:
         3e:1d:0a:90:7e:7a:20:4d:e4:4e:d5:8f:f4:dd:fe:8e:f7:24:
         eb:34:bf:ea:24:c7:28:25:83:99:59:b0:3d:99:f0:be:d3:f7:
         34:bf:d8:84:38:3d:8b:3c:53:63:5e:d5:eb:d0:dd:51:72:ec:
         da:1d:ff:36:25:6e:93:5a:70:68:8b:51:76:5f:b6:f8:60:0e:
         d2:42:c6:8c:89:58:ea:e4:0f:42:52:b7:f5:90:0a:63:00:10:
         73:f4:8a:3b:86:09:8d:24:72:12:6e:05:4e:5d:bc:e8:1b:be:
         d6:ff:b3:ac:1e:19:72:e2:36:e4:9e:2a:60:de:f1:af:6b:2c:
         ba:a5:0a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:08:19 2025 by rpki-client