This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C27C0758916B11EF81BBB521C4F9AE02.roa
File:                     C27C0758916B11EF81BBB521C4F9AE02.roa (raw, json)
Hash identifier:          Vjh1VAZ738287Oy9sbJSSWiD91WDdB9vOg9OFW8tMQ4=
Subject key identifier:   11:9A:F2:C5:D5:29:1C:1B:C0:06:51:0C:96:A3:E3:CD:75:7B:5B:94
Certificate issuer:       /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial:       01E5
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C27C0758916B11EF81BBB521C4F9AE02.roa
Signing time:             Fri 05 Dec 2025 20:25:39 +0000
ROA not before:           Fri 05 Dec 2025 20:25:39 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     53813
IP address blocks:        101.2.192.0/24 maxlen: 24
                          101.2.193.0/24 maxlen: 24
                          101.2.194.0/24 maxlen: 24
                          101.2.195.0/24 maxlen: 24
                          101.2.196.0/24 maxlen: 24
                          101.2.197.0/24 maxlen: 24
                          101.2.198.0/24 maxlen: 24
                          101.2.199.0/24 maxlen: 24
                          101.2.200.0/24 maxlen: 24
                          101.2.201.0/24 maxlen: 24
                          101.2.202.0/23 maxlen: 24
                          101.2.204.0/23 maxlen: 24
                          101.2.206.0/24 maxlen: 24
                          101.2.207.0/24 maxlen: 24
                          101.2.208.0/24 maxlen: 24
                          101.2.209.0/24 maxlen: 24
                          101.2.215.0/24 maxlen: 24
                          101.2.216.0/23 maxlen: 24
                          101.2.220.0/23 maxlen: 24
                          101.2.222.0/23 maxlen: 24
                          101.2.224.0/23 maxlen: 24
                          101.2.226.0/23 maxlen: 24
                          101.2.228.0/23 maxlen: 24
                          101.2.230.0/23 maxlen: 24
                          101.2.232.0/23 maxlen: 24
                          101.2.234.0/23 maxlen: 24
                          101.2.236.0/23 maxlen: 24
                          101.2.238.0/23 maxlen: 24
                          101.2.240.0/24 maxlen: 24
                          101.2.241.0/24 maxlen: 24
                          175.107.128.0/23 maxlen: 24
                          175.107.130.0/23 maxlen: 24
                          175.107.132.0/23 maxlen: 24
                          175.107.134.0/24 maxlen: 24
                          175.107.140.0/23 maxlen: 24
                          175.107.142.0/23 maxlen: 24
                          175.107.144.0/23 maxlen: 24
                          175.107.146.0/23 maxlen: 24
                          175.107.148.0/23 maxlen: 24
                          175.107.150.0/23 maxlen: 24
                          175.107.152.0/23 maxlen: 24
                          175.107.154.0/23 maxlen: 24
                          175.107.156.0/23 maxlen: 24
                          175.107.158.0/23 maxlen: 24
                          175.107.160.0/23 maxlen: 24
                          175.107.162.0/23 maxlen: 24
                          175.107.164.0/23 maxlen: 24
                          175.107.166.0/23 maxlen: 24
                          175.107.190.0/24 maxlen: 24
                          2400:7aa0:1200::/40 maxlen: 48
                          2400:7aa0:1300::/40 maxlen: 48
                          2400:7aa0:1400::/40 maxlen: 48
                          2400:7aa0:1500::/40 maxlen: 48
                          2400:7aa0:1600::/40 maxlen: 48
                          2400:7aa0:1700::/40 maxlen: 48
                          2400:7aa0:1800::/40 maxlen: 48
                          2400:7aa0:1900::/40 maxlen: 48
                          2400:7aa0:1a00::/40 maxlen: 48
                          2400:7aa0:1b00::/40 maxlen: 48
                          2400:7aa0:1c00::/40 maxlen: 48
                          2400:7aa0:1d00::/40 maxlen: 40
                          2400:7aa0:1e00::/40 maxlen: 48
                          2400:7aa0:1f00::/40 maxlen: 48
                          2400:7aa0:2200::/40 maxlen: 48
                          2400:7aa0:2300::/40 maxlen: 48
                          2400:7aa0:2400::/40 maxlen: 48
                          2400:7aa0:2500::/40 maxlen: 48
                          2400:7aa0:2600::/40 maxlen: 48
                          2400:7aa0:2800::/40 maxlen: 48
                          2400:7aa0:2900::/40 maxlen: 48
                          2400:7aa0:2b00::/40 maxlen: 48
                          2400:7aa0:2c00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 20:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
        Validity
            Not Before: Dec  5 20:25:39 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69333fc3-bc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:47:34:05:27:66:2e:db:eb:69:53:38:2a:
                    60:6d:86:8f:5c:64:a2:b2:0f:a1:cb:2c:bb:30:dd:
                    f8:7d:92:6b:97:7a:dd:f0:6e:b7:25:52:be:67:52:
                    30:c7:d2:1f:e7:83:07:ac:1d:ed:a8:ee:a0:da:a6:
                    64:69:30:61:64:1a:35:5d:cf:b1:da:2e:23:b1:6f:
                    ba:e7:a4:1c:73:fe:01:4e:6c:c3:da:b8:c9:27:86:
                    81:11:d3:f1:b7:45:31:34:c9:f3:88:20:a7:62:43:
                    d6:94:bf:76:10:eb:ea:4f:d6:b2:12:0b:0a:aa:44:
                    45:1a:7b:12:61:97:82:fd:ed:1d:b7:8e:2e:65:ad:
                    53:61:30:2f:7a:0e:75:ec:20:0c:da:a4:22:b4:c7:
                    db:f9:c1:dc:fc:d8:11:16:89:29:99:f2:ce:33:07:
                    92:40:3d:79:5e:6c:76:82:a3:e3:96:68:41:19:1e:
                    5d:a9:7c:6d:5d:40:da:e4:ec:26:67:4a:9c:e7:76:
                    1c:95:15:f1:1a:d0:d6:99:1a:0f:3c:51:ee:df:c0:
                    62:b1:78:00:35:f3:b8:37:ae:04:c9:92:4b:02:23:
                    19:e2:45:26:38:26:fd:3e:9e:1f:a5:6f:95:e4:0e:
                    32:f8:1c:03:a3:ce:71:e4:48:61:52:a4:20:0d:bf:
                    1c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9A:F2:C5:D5:29:1C:1B:C0:06:51:0C:96:A3:E3:CD:75:7B:5B:94
            X509v3 Authority Key Identifier:
                keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C27C0758916B11EF81BBB521C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.2.192.0-101.2.209.255
                  101.2.215.0-101.2.217.255
                  101.2.220.0-101.2.241.255
                  175.107.128.0-175.107.134.255
                  175.107.140.0-175.107.167.255
                  175.107.190.0/24
                IPv6:
                  2400:7aa0:1200::-2400:7aa0:1fff:ffff:ffff:ffff:ffff:ffff
                  2400:7aa0:2200::-2400:7aa0:26ff:ffff:ffff:ffff:ffff:ffff
                  2400:7aa0:2800::/39
                  2400:7aa0:2b00::-2400:7aa0:2cff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         51:9f:3d:5f:95:a6:4c:73:25:dd:8f:1e:6d:2e:3c:9f:f3:4e:
         57:a8:ab:6a:2a:76:88:45:93:6d:56:21:f9:0e:50:43:bd:88:
         a3:1c:98:bb:d7:33:6a:71:28:c9:26:66:b9:b5:49:41:ed:c8:
         22:59:4c:5d:84:78:3f:3c:d1:df:51:fb:1c:2f:6a:11:db:ad:
         20:84:48:bc:85:55:23:78:b5:ec:97:dd:58:69:ca:29:7b:2b:
         c4:69:42:84:a1:ad:1e:67:43:9d:22:b7:31:86:1f:fa:83:62:
         77:43:e5:7b:0c:d1:b2:ef:c3:63:9b:79:17:cc:1a:f6:0c:31:
         9a:da:c3:4e:3c:92:a4:dd:ee:03:65:f7:ad:9e:81:c9:0a:47:
         d0:84:66:48:3a:46:1a:3c:3d:2d:f6:62:8f:db:fd:a9:05:96:
         fb:0d:67:57:88:91:9a:96:2a:94:4b:69:01:56:53:f1:04:78:
         bc:bc:d7:67:09:ba:40:3a:d3:61:8e:8d:4a:1d:f1:36:97:ab:
         f7:22:03:14:5c:ab:d5:90:df:3b:4f:e7:e8:59:74:1f:b5:9c:
         e3:e3:28:92:fc:a1:c4:c8:cd:88:fe:7f:60:71:73:05:79:82:
         ee:82:ee:98:82:88:e3:2c:9f:ae:7a:f5:3f:21:4f:c0:11:55:
         fb:fd:90:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:15:18 2025 by rpki-client