This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
File:                     42823846037411EEB6D5D751C4F9AE02.roa (raw, json)
Hash identifier:          rFCflbUAS4w1rxkJsyec/ty/xMjS3zn6kzJpj1c1YqE=
Subject key identifier:   42:A6:DC:22:3F:65:7E:F4:C0:4C:59:60:D8:09:62:A2:1C:0B:CA:ED
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4F36
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
Signing time:             Thu 27 Nov 2025 06:18:44 +0000
ROA not before:           Thu 27 Nov 2025 06:18:44 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149105
IP address blocks:        103.145.2.0/23 maxlen: 24
                          103.188.80.0/23 maxlen: 24
                          220.158.134.0/23 maxlen: 24
                          2400:8160::/48 maxlen: 48
                          2405:73c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20278 (0x4f36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Nov 27 06:18:44 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6927ed44-85a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:45:66:03:d4:a1:46:41:d8:46:73:40:f2:
                    7b:58:29:ec:8c:cb:da:50:bc:cf:dc:bf:a1:a1:b0:
                    fd:87:31:ba:a0:70:2d:f7:27:2a:70:8d:68:aa:19:
                    df:9c:73:b7:ce:c4:dc:ab:de:3b:10:5e:bf:3c:b2:
                    4e:6a:cb:26:29:2c:d9:70:26:f2:e5:46:43:a0:43:
                    f0:a5:c4:09:6e:63:2a:b8:d1:6d:73:4d:0e:bf:c4:
                    5b:13:9e:a4:d2:d6:3c:da:be:19:65:6e:f8:e1:d4:
                    6f:0d:c8:61:3a:b2:75:95:82:a3:11:72:78:ab:31:
                    92:1d:aa:7a:e0:15:37:7e:9f:4a:8f:2c:d4:06:af:
                    50:63:8a:d2:e3:04:a6:5a:31:8e:1e:35:c4:cf:c5:
                    c2:50:f3:82:81:97:40:44:8b:cb:a3:b8:28:f9:b8:
                    cf:80:f3:6c:97:c4:74:89:4d:45:da:97:d7:36:68:
                    3c:1e:1f:9d:17:a3:e2:ff:14:91:1c:9d:08:ca:e2:
                    f0:45:c1:5d:85:d2:b3:2c:c8:84:02:da:9e:ec:5a:
                    6a:dd:c3:8d:03:19:87:e7:d3:ed:ad:6b:86:3f:1d:
                    8f:6a:60:cd:e7:ae:82:8a:2d:44:da:ca:33:b2:37:
                    52:8a:a7:ee:0b:c2:c0:e3:63:93:06:ab:4e:f6:82:
                    8d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A6:DC:22:3F:65:7E:F4:C0:4C:59:60:D8:09:62:A2:1C:0B:CA:ED
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.2.0/23
                  103.188.80.0/23
                  220.158.134.0/23
                IPv6:
                  2400:8160::/48
                  2405:73c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:7c:41:c8:8c:f8:19:16:f0:c5:b3:c8:7a:b6:2f:6d:bf:f6:
         47:56:de:43:49:58:f1:f7:23:0f:67:cb:f2:8c:dd:5e:23:76:
         32:9d:11:42:d3:bb:33:75:9e:2e:57:8d:05:c2:29:2e:af:9f:
         e0:66:4b:58:42:2b:94:76:10:6e:86:99:9b:fa:63:e8:b8:14:
         3e:c0:c8:c5:e4:26:37:3b:ae:0e:d3:3f:61:00:fe:67:b3:96:
         30:f3:fc:31:66:8e:4b:80:aa:dd:35:b3:88:70:c6:50:84:ba:
         fb:f1:6a:40:fa:3b:ac:ca:f5:7c:45:5b:e0:ae:66:37:46:ef:
         b0:aa:8e:56:b2:83:c7:49:f8:6e:16:cd:51:e8:62:9b:a3:8e:
         f5:b4:76:2a:96:5b:3f:bc:98:25:23:05:36:c6:a5:b5:95:79:
         cd:ca:c0:d1:de:51:94:41:07:19:54:17:b6:27:f7:1a:9f:14:
         f8:29:d6:02:7c:ef:89:fb:b8:5f:72:1f:0c:6d:cf:fb:99:2b:
         c4:29:99:36:36:17:5d:67:5d:74:34:0f:45:aa:1c:f9:dc:3c:
         d6:a1:66:91:cb:96:a4:f5:fa:38:c3:0f:ad:02:9a:ad:05:48:
         48:4c:8f:6e:6e:71:98:fd:52:fb:2d:68:21:6c:82:02:c7:d4:
         ee:b8:36:6f
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgICTzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUxMTI3MDYxODQ0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI3ZWQ0NC04NWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAprBFZgPUoUZB2EZzQPJ7WCnsjMvaULzP3L+hobD9hzG6oHAt9ycqcI1oqhnf
nHO3zsTcq947EF6/PLJOassmKSzZcCby5UZDoEPwpcQJbmMquNFtc00Ov8RbE56k
0tY82r4ZZW744dRvDchhOrJ1lYKjEXJ4qzGSHap64BU3fp9KjyzUBq9QY4rS4wSm
WjGOHjXEz8XCUPOCgZdARIvLo7go+bjPgPNsl8R0iU1F2pfXNmg8Hh+dF6Pi/xSR
HJ0IyuLwRcFdhdKzLMiEAtqe7Fpq3cONAxmH59PtrWuGPx2PamDN566Cii1E2soz
sjdSiqfuC8LA42OTBqtO9oKN1wIDAQABo4ICuzCCArcwHQYDVR0OBBYEFEKm3CI/
ZX70wExZYNgJYqIcC8rtMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDI4MjM4NDYw
Mzc0MTFFRUI2RDVENzUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E
NjA0MBgEAgABMBIDBAFnkQIDBAFnvFADBAHcnoYwGAQCAAIwEgMHACQAgWAAAAMH
ACQFc8AAADANBgkqhkiG9w0BAQsFAAOCAQEAHnxByIz4GRbwxbPIerYvbb/2R1be
Q0lY8fcjD2fL8ozdXiN2Mp0RQtO7M3WeLleNBcIpLq+f4GZLWEIrlHYQboaZm/pj
6LgUPsDIxeQmNzuuDtM/YQD+Z7OWMPP8MWaOS4Cq3TWziHDGUIS6+/FqQPo7rMr1
fEVb4K5mN0bvsKqOVrKDx0n4bhbNUehim6OO9bR2KpZbP7yYJSMFNsaltZV5zcrA
0d5RlEEHGVQXtif3Gp8U+CnWAnzvifu4X3IfDG3P+5krxCmZNjYXXWdddDQPRaoc
+dw81qFmkcuWpPX6OMMPrQKarQVISEyPbm5xmP1S+y1oIWyCAsfU7rg2bw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:02:04 2025 by rpki-client