This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa
File:                     0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa (raw, json)
Hash identifier:          WtXkOiy3N9c/pecAaEEFIx6uM4xN6m5PmoAbpJv4Elo=
Subject key identifier:   22:04:1C:40:5A:1E:8D:53:59:02:3E:95:B4:D9:D8:4D:C1:24:C4:B2
Certificate issuer:       /CN=A91A3BB1/serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0
Certificate serial:       3536
Authority key identifier: E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa
Signing time:             Tue 30 Dec 2025 15:11:53 +0000
ROA not before:           Tue 30 Dec 2025 15:11:53 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     38830
IP address blocks:        103.10.8.0/24 maxlen: 24
                          203.12.235.0/24 maxlen: 24
                          2001:df0:218::/48 maxlen: 48
                          2001:df7:e800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl
                          rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13622 (0x3536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3BB1, serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0
        Validity
            Not Before: Dec 30 15:11:53 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6953ebb9-015d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:1f:15:cb:d7:b5:2f:6e:b5:bf:b3:c9:8a:
                    a3:55:8a:bb:13:a7:e1:cf:d6:5d:23:fe:c3:11:71:
                    30:ef:82:bc:e2:87:c9:ba:52:52:c1:c1:ab:4a:81:
                    c7:9b:39:4f:3d:a9:03:cf:3d:72:9d:5f:c4:12:5c:
                    3b:c1:f1:8e:43:2c:d5:72:bf:fb:0e:3a:bf:49:c1:
                    1f:80:b7:17:9b:7c:12:66:e1:4d:2b:f5:ef:e2:0a:
                    22:54:04:f7:bd:c5:41:a0:e8:40:4b:53:c4:07:52:
                    74:5b:07:9f:4b:ef:a2:fd:94:d3:ff:7b:5c:38:79:
                    79:2d:d2:69:5d:2b:dd:a4:f3:99:24:ba:43:6a:1d:
                    cc:08:e5:8e:d6:16:d4:80:8d:95:1c:a5:34:6e:b4:
                    f0:73:b1:1d:3b:a5:0b:e9:c3:b9:fc:6b:51:2a:0e:
                    d9:5f:e2:bb:69:a8:85:66:1e:a8:04:8f:c5:03:5d:
                    ed:7c:55:03:e7:14:7b:6f:96:f6:3a:14:19:d8:f6:
                    ad:59:88:f1:2b:91:a2:62:e6:04:20:4f:57:5a:fc:
                    f9:c1:76:04:bb:bb:2a:39:2c:57:f8:81:98:36:74:
                    6d:82:af:a3:42:53:cc:d3:c4:6d:f4:68:28:12:fd:
                    83:d5:86:ba:df:34:80:cb:be:0b:22:49:d3:7e:44:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:04:1C:40:5A:1E:8D:53:59:02:3E:95:B4:D9:D8:4D:C1:24:C4:B2
            X509v3 Authority Key Identifier:
                keyid:E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.8.0/24
                  203.12.235.0/24
                IPv6:
                  2001:df0:218::/48
                  2001:df7:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:30:1a:b7:fe:c9:bf:25:01:2a:22:c5:f9:1d:f5:97:11:74:
         6d:23:ea:6b:bf:4d:c9:57:e5:aa:33:9d:40:0f:03:96:c4:09:
         1f:38:a6:f2:7e:a3:5e:f9:b1:41:e4:0c:90:32:42:6f:a3:7e:
         d9:cf:2d:25:45:67:1b:60:95:b9:91:e7:3d:42:fb:cf:30:75:
         d9:f2:3d:8c:b9:11:66:74:b8:3e:99:d1:6a:a0:e1:0a:be:fa:
         13:28:df:c2:87:c5:d0:28:61:39:5b:87:67:86:39:4e:8a:06:
         61:0c:1b:b3:b2:f6:1d:e7:dc:88:82:08:3e:f7:75:91:24:ee:
         68:5f:5f:20:fc:98:1f:c4:5f:7c:d1:da:70:93:83:4c:6d:ac:
         46:b2:d2:88:5f:4c:35:01:5e:75:40:d7:83:77:12:e4:ed:fc:
         50:2f:61:d6:89:5e:05:b0:7a:cb:46:91:db:8a:bd:ff:83:49:
         73:38:2e:89:de:26:6b:0d:a4:77:15:f0:ad:b6:3c:b1:18:2a:
         4e:f6:d7:b2:c9:67:b4:4e:13:e2:07:d3:f0:af:8a:9f:4e:a4:
         c0:2f:dc:1a:59:65:e6:39:32:3b:c2:86:30:0c:b6:aa:22:bc:
         f8:14:0a:b7:62:97:50:76:a0:9d:9e:34:eb:9f:7e:69:65:58:
         1a:40:22:8c
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgICNTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QTNCQjExMTAvBgNVBAUTKEU4M0E1OUI4ODFDRTFFNTczNUQxQUREQ0Q4QkFFMDVF
NTNCODUzRDAwHhcNMjUxMjMwMTUxMTUzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTUzZWJiOS0wMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtmofFcvXtS9utb+zyYqjVYq7E6fhz9ZdI/7DEXEw74K84ofJulJSwcGrSoHH
mzlPPakDzz1ynV/EElw7wfGOQyzVcr/7Djq/ScEfgLcXm3wSZuFNK/Xv4goiVAT3
vcVBoOhAS1PEB1J0WwefS++i/ZTT/3tcOHl5LdJpXSvdpPOZJLpDah3MCOWO1hbU
gI2VHKU0brTwc7EdO6UL6cO5/GtRKg7ZX+K7aaiFZh6oBI/FA13tfFUD5xR7b5b2
OhQZ2PatWYjxK5GiYuYEIE9XWvz5wXYEu7sqOSxX+IGYNnRtgq+jQlPM08Rt9Ggo
Ev2D1Ya63zSAy74LIknTfkTOawIDAQABo4ICtTCCArEwHQYDVR0OBBYEFCIEHEBa
Ho1TWQI+lbTZ2E3BJMSyMB8GA1UdIwQYMBaAFOg6WbiBzh5XNdGt3Ni64F5TuFPQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0JCMS9FQTFCMjJFMDFE
OTYxMUUyOTgwNkM1N0YwOEIwMkNEMi82RHBadUlIT0hsYzEwYTNjMkxyZ1hsTzRV
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZEcFp1SUhPSGxjMTBhM2MyTHJnWGxPNFU5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTNCQjEvRUExQjIyRTAxRDk2MTFFMjk4MDZDNTdGMDhCMDJDRDIvMEIzRkM1OENC
MERBMTFFNUE4QzhCRjEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E
MDAuMBIEAgABMAwDBABnCggDBADLDOswGAQCAAIwEgMHACABDfACGAMHACABDffo
ADANBgkqhkiG9w0BAQsFAAOCAQEAKzAat/7JvyUBKiLF+R31lxF0bSPqa79NyVfl
qjOdQA8DlsQJHzim8n6jXvmxQeQMkDJCb6N+2c8tJUVnG2CVuZHnPUL7zzB12fI9
jLkRZnS4PpnRaqDhCr76EyjfwofF0ChhOVuHZ4Y5TooGYQwbs7L2HefciIIIPvd1
kSTuaF9fIPyYH8RffNHacJODTG2sRrLSiF9MNQFedUDXg3cS5O38UC9h1oleBbB6
y0aR24q9/4NJczguid4maw2kdxXwrbY8sRgqTvbXsslntE4T4gfT8K+Kn06kwC/c
Glll5jkyO8KGMAy2qiK8+BQKt2KXUHagnZ40659+aWVYGkAijA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:43 2026 by rpki-client