This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/52636904771911F083181320C4F9AE02.roa
File:                     52636904771911F083181320C4F9AE02.roa (raw, json)
Hash identifier:          /N8Je2h9Ml0PEQGrFc9NWTNF1W+nc4xwFKtdjj8nfho=
Subject key identifier:   8F:D0:2C:0A:5A:54:6F:31:8C:A7:A0:FF:66:A3:40:EC:66:2D:31:71
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0CAF
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/52636904771911F083181320C4F9AE02.roa
Signing time:             Fri 05 Dec 2025 02:32:37 +0000
ROA not before:           Fri 05 Dec 2025 02:32:37 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     401783
IP address blocks:        103.7.208.0/24 maxlen: 24
                          103.7.211.0/24 maxlen: 24
                          160.20.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3247 (0xcaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Dec  5 02:32:37 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69324445-b8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:63:71:a1:1f:bd:9d:62:2c:6e:49:b5:ae:77:
                    a4:51:c0:b0:55:18:3b:2c:94:20:1f:35:e8:04:a0:
                    b4:3b:65:f3:35:7e:93:6d:09:44:74:c9:ee:f6:bb:
                    fa:59:85:ad:2d:65:fd:97:55:d4:7a:9c:3d:25:08:
                    28:c3:10:a7:c1:33:29:35:90:ce:f0:1b:e8:d1:26:
                    21:35:16:dc:cc:90:6b:72:e1:85:e3:49:eb:5f:6e:
                    d8:70:e5:ae:b9:9e:e7:23:f4:b3:98:03:b9:2a:08:
                    94:09:f6:81:92:62:9a:2a:78:2a:fd:14:d1:7d:72:
                    79:cd:62:ae:ad:a3:fc:11:18:ed:9b:47:13:ec:40:
                    d6:de:49:f7:d8:78:c4:4c:3c:59:c3:1d:d6:55:79:
                    72:ef:d9:b1:ce:e4:ae:06:b9:18:22:f1:f3:96:27:
                    ec:3c:f1:4a:fe:94:d8:09:0c:46:bd:59:c7:a9:7c:
                    8e:87:40:79:4e:88:d8:b8:91:e1:86:df:ec:ac:f7:
                    25:5a:06:34:59:a8:d8:02:37:ea:38:be:64:dd:e7:
                    16:2f:ed:c1:75:9a:5b:24:8c:48:f3:0a:d7:7d:a4:
                    e0:57:12:28:10:9d:b7:aa:15:bf:2a:91:49:2c:2e:
                    27:4f:43:7e:f5:09:5c:b6:96:6a:bc:9c:af:9f:e0:
                    79:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D0:2C:0A:5A:54:6F:31:8C:A7:A0:FF:66:A3:40:EC:66:2D:31:71
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/52636904771911F083181320C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.208.0/24
                  103.7.211.0/24
                  160.20.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:a3:67:16:7f:c2:d2:45:5b:cf:2e:54:aa:93:46:2c:89:35:
         65:86:0a:d5:86:99:62:e9:be:0b:55:ed:4a:17:b8:a0:b8:d1:
         18:34:d1:17:77:ee:23:7c:3f:d0:a0:4b:47:fa:f6:b3:4a:ac:
         92:8d:77:72:9e:14:43:6c:07:12:7d:78:0e:07:e7:03:64:91:
         a8:25:e0:1f:c4:9a:a2:e1:f9:5e:70:c4:e5:dd:d9:27:56:89:
         ca:b0:61:94:87:9f:2e:54:cf:5e:9b:ab:01:9d:47:83:80:48:
         0f:32:4b:97:e0:7d:96:3c:87:76:19:3a:aa:b2:16:71:e5:86:
         3b:61:92:93:5b:61:60:c4:16:f0:98:97:d3:48:a2:91:6a:d2:
         f5:44:cc:ab:4f:16:86:8e:7a:b3:b7:ca:b7:72:05:00:eb:f2:
         70:1a:d4:8a:a3:7d:c9:79:7b:c5:0b:31:f1:fd:0c:78:9a:37:
         ea:f3:0a:b0:0e:b0:da:7b:e3:ed:3a:c8:27:6f:d6:f1:7e:49:
         a4:5e:d0:e3:5c:16:05:6f:ad:f7:69:cd:98:9e:ad:ed:50:b1:
         72:ae:c9:a9:0c:49:87:68:f8:ff:af:72:9c:1a:0f:34:b3:34:
         57:71:36:3d:dc:0b:72:c5:03:df:e0:75:ce:f0:26:7d:8c:aa:
         cf:ff:1a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:45:58 2025 by rpki-client