This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/294325DC699711EEB317603DC4F9AE02.roa
File:                     294325DC699711EEB317603DC4F9AE02.roa (raw, json)
Hash identifier:          8wlSlxdWRVQsKWpecDfGTBfpDDK2RtL9v/+VCfGWZ7I=
Subject key identifier:   2C:14:7E:39:DE:22:F9:F7:C7:76:4A:0B:14:8A:DF:67:B2:65:99:F8
Certificate issuer:       /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Certificate serial:       0191
Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/294325DC699711EEB317603DC4F9AE02.roa
Signing time:             Thu 27 Nov 2025 01:49:35 +0000
ROA not before:           Thu 27 Nov 2025 01:49:35 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     151813
IP address blocks:        103.131.134.0/24 maxlen: 24
                          103.131.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
                          rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 01:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
        Validity
            Not Before: Nov 27 01:49:35 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6927ae2f-b45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:92:9c:95:a7:be:44:01:c8:41:03:f4:8d:a7:
                    5c:66:9e:05:0f:7a:f6:9d:bd:b8:38:77:c1:f8:98:
                    6a:86:47:ea:bf:15:4a:03:11:c1:f8:94:49:5a:81:
                    96:47:14:48:52:a2:59:3a:55:94:e3:a6:3d:22:c4:
                    3d:ac:7f:cf:c9:a4:d9:f9:65:d3:37:a1:e5:3e:be:
                    d5:2f:e0:8d:17:cb:1e:66:f8:4b:b3:b5:29:a0:1e:
                    e2:94:41:a3:b3:7a:03:a5:ce:d7:e7:c3:c1:82:b6:
                    39:f2:99:b6:8b:60:04:00:a6:73:91:5f:41:b2:71:
                    93:de:16:4e:11:94:e8:3b:5f:2c:28:1e:b4:79:b8:
                    f7:03:ec:99:49:76:9b:6a:87:04:9c:e4:b5:2f:bb:
                    f1:d7:c1:11:fc:39:fe:5d:21:94:39:46:99:67:43:
                    63:74:ab:85:18:92:dc:a8:c1:6f:cd:58:ba:93:24:
                    26:54:4a:d1:97:3c:69:9a:31:7d:90:06:a8:69:ce:
                    c4:9b:fe:8d:f3:8e:cb:71:06:ec:6c:5b:4c:fd:16:
                    7f:68:dc:d2:8e:0a:b1:cb:6c:1b:a1:8f:aa:5c:24:
                    24:83:eb:34:1a:cc:3c:15:7c:f1:97:50:0f:39:0c:
                    ed:07:a9:f0:b7:55:05:b0:9b:7d:dd:e3:8c:d1:2d:
                    91:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:14:7E:39:DE:22:F9:F7:C7:76:4A:0B:14:8A:DF:67:B2:65:99:F8
            X509v3 Authority Key Identifier:
                keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/294325DC699711EEB317603DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:f0:95:fb:91:2f:95:3f:27:db:48:0c:65:f3:4e:6b:c6:0f:
         fb:7b:2b:d3:1c:e0:5c:d9:74:f0:10:4e:6c:32:3c:71:00:3e:
         28:d0:bb:ee:61:59:39:77:e0:36:58:c0:d2:68:fe:b2:cb:3c:
         da:cc:51:7a:f3:b2:f3:0f:be:a1:2a:a7:e3:50:45:1f:bf:b8:
         3f:ab:fd:fd:8b:2a:16:ac:6e:c6:ea:a6:f9:16:6d:d3:70:11:
         9b:4b:00:49:e8:4c:78:94:0a:a0:58:8e:c7:73:b0:7b:fa:68:
         ba:5d:fe:7e:74:85:02:a3:c2:af:b3:c0:63:90:70:ae:60:9b:
         1e:4a:f0:2a:2f:cf:86:f0:bd:04:3e:8d:81:bf:c6:c1:d3:9c:
         33:96:3a:d6:90:33:b2:59:ef:8a:25:a0:76:24:f4:1e:4e:b9:
         7b:8a:7a:5b:e0:29:a6:5d:0f:53:55:73:67:7f:95:7f:75:db:
         e6:6c:75:84:da:5e:47:3c:7d:51:a9:ec:15:73:26:dd:d2:e0:
         49:d6:4c:cf:4d:98:b9:8f:c5:58:90:1c:67:e3:86:b6:d0:ce:
         3a:16:29:9c:89:2a:e6:57:77:08:28:97:04:16:27:20:e8:a0:
         16:1b:69:a8:c7:f1:3d:52:cb:77:3c:7b:89:00:d0:46:90:5d:
         c0:5f:07:5c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM1QTQxMTAvBgNVBAUTKDQxQTBDMjQ0MzU5RjAyMzVDOUE2MEIxRjcxOUE1RkQ1
Njc5NjYwNTMwHhcNMjUxMTI3MDE0OTM1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI3YWUyZi1iNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7JKclae+RAHIQQP0jadcZp4FD3r2nb24OHfB+JhqhkfqvxVKAxHB+JRJWoGW
RxRIUqJZOlWU46Y9IsQ9rH/PyaTZ+WXTN6HlPr7VL+CNF8seZvhLs7UpoB7ilEGj
s3oDpc7X58PBgrY58pm2i2AEAKZzkV9BsnGT3hZOEZToO18sKB60ebj3A+yZSXab
aocEnOS1L7vx18ER/Dn+XSGUOUaZZ0NjdKuFGJLcqMFvzVi6kyQmVErRlzxpmjF9
kAaoac7Em/6N847LcQbsbFtM/RZ/aNzSjgqxy2wboY+qXCQkg+s0Gsw8FXzxl1AP
OQztB6nwt1UFsJt93eOM0S2RsQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCwUfjne
Ivn3x3ZKCxSK32eyZZn4MB8GA1UdIwQYMBaAFEGgwkQ1nwI1yaYLH3GaX9VnlmBT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzVBNC9EQkMxRkQxMDY5
OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFqWEpwZ3NmY1pwZjFXZVdZ
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FhRENSRFdmQWpYSnBnc2ZjWnBmMVdlV1lGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTM1QTQvREJDMUZEMTA2OTk2MTFFRUI0RTc3QjNDQzRGOUFFMDIvMjk0MzI1REM2
OTk3MTFFRUIzMTc2MDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFng4YwDQYJKoZIhvcNAQELBQADggEBAHHwlfuRL5U/J9tI
DGXzTmvGD/t7K9Mc4FzZdPAQTmwyPHEAPijQu+5hWTl34DZYwNJo/rLLPNrMUXrz
svMPvqEqp+NQRR+/uD+r/f2LKhasbsbqpvkWbdNwEZtLAEnoTHiUCqBYjsdzsHv6
aLpd/n50hQKjwq+zwGOQcK5gmx5K8Covz4bwvQQ+jYG/xsHTnDOWOtaQM7JZ74ol
oHYk9B5OuXuKelvgKaZdD1NVc2d/lX912+ZsdYTaXkc8fVGp7BVzJt3S4EnWTM9N
mLmPxViQHGfjhrbQzjoWKZyJKuZXdwgolwQWJyDooBYbaajH8T1Sy3c8e4kA0EaQ
XcBfB1w=
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:20:02 2025 by rpki-client