This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/F2CD19D6E96011EF8940367DC4F9AE02.roa
File:                     F2CD19D6E96011EF8940367DC4F9AE02.roa (raw, json)
Hash identifier:          ++9L+NGOaw5DrKySyO8La0vQc8M3tYnN6EhjONDGSUQ=
Subject key identifier:   5A:90:42:F7:6F:F5:4C:EF:90:8A:F8:EA:B4:28:55:10:BA:B9:40:E3
Certificate issuer:       /CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D
Certificate serial:       A2
Authority key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/F2CD19D6E96011EF8940367DC4F9AE02.roa
Signing time:             Wed 05 Nov 2025 06:51:02 +0000
ROA not before:           Wed 05 Nov 2025 06:51:02 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     50049
IP address blocks:        43.250.52.0/22 maxlen: 22
                          43.250.52.0/24 maxlen: 24
                          43.250.53.0/24 maxlen: 24
                          43.250.54.0/24 maxlen: 24
                          43.250.55.0/24 maxlen: 24
                          103.41.176.0/22 maxlen: 22
                          103.41.176.0/24 maxlen: 24
                          103.41.177.0/24 maxlen: 24
                          103.41.178.0/24 maxlen: 24
                          103.41.179.0/24 maxlen: 24
                          103.147.152.0/24 maxlen: 24
                          2406:4fc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F68, serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D
        Validity
            Not Before: Nov  5 06:51:02 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690af3d6-7477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a9:df:d4:9b:a8:e1:c0:59:0f:4e:40:dd:aa:
                    8d:2e:be:af:fa:3e:d2:70:1b:b2:2e:9f:86:a7:54:
                    5b:a2:84:66:8f:c4:c7:5b:4b:6d:6e:ee:1f:ad:c7:
                    e2:28:01:6e:be:7c:05:68:21:a7:d5:4a:8f:69:7f:
                    cb:53:f1:bd:2a:43:b9:59:35:ba:54:62:f3:b9:ec:
                    8e:ea:da:2d:41:0c:7d:c9:bd:7d:44:2c:87:b8:4f:
                    28:ad:c2:9a:50:ec:2b:f4:88:46:2f:7c:12:12:01:
                    70:40:f5:43:64:b1:2c:67:1a:c0:cb:f1:d2:5e:82:
                    24:19:5d:14:96:eb:7d:5c:41:f2:56:b3:75:47:41:
                    df:e2:07:71:c4:38:4c:b9:a3:a4:1b:e1:2d:db:14:
                    69:9a:54:ee:7f:fc:2b:d8:d9:d5:03:c5:0d:5c:53:
                    58:99:55:24:bd:ec:dd:63:d1:14:ca:0a:64:39:f4:
                    65:f2:7f:39:60:7c:e8:42:7e:e9:16:cd:ea:13:48:
                    d6:7a:99:60:3f:e4:c3:3e:95:11:8e:aa:87:66:70:
                    5e:d2:6a:bf:3a:45:b2:b6:c4:20:59:9a:de:ce:0b:
                    4a:d8:f6:fb:6c:d0:65:15:cc:4a:68:07:fe:e1:c7:
                    3a:77:1c:7d:4a:55:90:23:e3:33:3b:8b:5e:45:9b:
                    7f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:90:42:F7:6F:F5:4C:EF:90:8A:F8:EA:B4:28:55:10:BA:B9:40:E3
            X509v3 Authority Key Identifier:
                keyid:62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/F2CD19D6E96011EF8940367DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.250.52.0/22
                  103.41.176.0/22
                  103.147.152.0/24
                IPv6:
                  2406:4fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:c5:c1:10:a3:39:5b:87:49:f8:82:26:57:75:41:54:a7:99:
         bd:f8:95:b7:33:13:a0:0f:10:52:55:80:20:d2:71:0f:a3:ad:
         5b:27:20:3a:ed:23:52:ba:a0:7b:ef:17:46:30:02:ec:6a:91:
         01:74:e4:08:a3:5b:91:3d:da:ad:ea:cb:4f:aa:7e:88:c1:51:
         61:42:a9:ea:42:60:79:6a:65:96:d8:e5:ee:f2:79:91:aa:d6:
         f7:99:3d:23:e3:3b:85:47:a6:13:8c:1c:f3:8e:62:01:ea:50:
         92:c8:e2:b1:2c:0e:f2:a8:d0:31:e6:01:a2:33:87:27:c6:d0:
         97:3c:66:1b:e9:80:77:f4:ca:6b:6c:27:28:d9:cb:df:c9:86:
         dc:3b:73:ed:1b:6d:57:63:81:6d:77:b6:40:bc:a7:0b:84:ad:
         54:ab:45:8c:9b:30:43:d0:68:e6:fd:80:a9:dc:86:33:07:63:
         9c:45:87:fe:80:37:28:6e:ef:d7:1c:86:cb:24:9b:e9:30:2d:
         6c:29:47:95:42:77:27:bc:16:d7:98:d3:0d:01:60:75:16:74:
         e7:ed:7a:cd:a5:c0:3d:6a:45:10:8e:c8:cb:3f:4d:0b:aa:cb:
         be:73:db:f3:ed:66:aa:30:c1:f2:ef:ad:fc:ab:e2:97:5c:d7:
         ff:4f:a2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:43 2025 by rpki-client