This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/1AD64F18D23411EAAFD6AA3AC4F9AE02.roa
File:                     1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (raw, json)
Hash identifier:          wdVUeFPPp5Pt9fuTweBdrE45i6lKsYNin+xhFp9XCWU=
Subject key identifier:   89:69:9B:2D:5F:9F:ED:7A:59:3E:F4:D5:1E:FE:33:26:B5:02:E8:F3
Certificate issuer:       /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial:       16CB
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/1AD64F18D23411EAAFD6AA3AC4F9AE02.roa
Signing time:             Mon 10 Nov 2025 07:01:27 +0000
ROA not before:           Mon 10 Nov 2025 07:01:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     198381
IP address blocks:        103.27.23.0/24 maxlen: 24
                          175.111.1.0/24 maxlen: 24
                          175.111.8.0/24 maxlen: 24
                          175.111.9.0/24 maxlen: 24
                          175.111.10.0/23 maxlen: 23
                          175.111.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
                          rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5835 (0x16cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
        Validity
            Not Before: Nov 10 07:01:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69118dc6-24f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:68:4f:e4:0d:86:56:9e:78:f4:be:02:f8:
                    ad:4f:02:ff:69:f1:2b:b7:b1:07:e9:7c:ef:32:6a:
                    00:dd:0d:10:c9:6f:f5:ad:20:33:8e:31:ca:95:2e:
                    cd:ab:db:df:1a:24:60:60:60:ad:62:32:bf:4f:04:
                    67:ce:6b:81:2f:69:e2:e5:9a:89:76:db:3d:ef:4e:
                    4b:05:dd:11:ab:d0:86:7b:a4:67:63:40:2d:73:50:
                    16:2e:9a:e5:e5:fa:60:e8:a6:6c:2b:93:af:9e:98:
                    1b:9a:ef:c1:cd:29:48:27:4d:34:17:7c:4c:9e:19:
                    a3:50:1d:28:a4:2b:aa:05:67:81:50:01:e5:90:06:
                    5d:0f:8c:b1:ce:1d:da:34:e9:fc:4b:fc:f9:dc:23:
                    6f:ec:e1:e3:d5:6a:9a:86:ce:ea:21:46:d4:f0:61:
                    53:c1:61:48:2b:53:52:0f:5a:d9:fe:31:6d:97:3d:
                    2b:52:99:59:ce:34:bb:2f:e8:d6:d0:dc:ad:c8:61:
                    9a:aa:91:01:4d:20:5c:d3:47:f7:f1:91:27:33:3d:
                    c7:be:66:50:64:7d:65:9b:d2:73:67:af:53:f1:00:
                    e7:89:58:b4:9b:58:bc:94:cb:d4:7b:12:74:0e:7f:
                    7a:06:4f:fc:a8:d4:e6:bc:f4:cf:9f:10:68:4a:2d:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:69:9B:2D:5F:9F:ED:7A:59:3E:F4:D5:1E:FE:33:26:B5:02:E8:F3
            X509v3 Authority Key Identifier:
                keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/1AD64F18D23411EAAFD6AA3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.23.0/24
                  175.111.1.0/24
                  175.111.8.0-175.111.13.255

    Signature Algorithm: sha256WithRSAEncryption
         1e:40:e0:77:15:3b:19:ea:3d:5a:2a:1a:7e:76:dd:51:e3:00:
         07:60:7a:ff:bf:0c:ff:c9:36:10:7d:e1:73:7c:75:ca:f4:38:
         f8:3b:71:72:7a:dd:68:5f:fa:56:75:81:df:69:ec:e7:1d:37:
         21:42:7f:23:56:5e:c5:4f:6a:d0:db:19:fc:23:44:ca:9c:8a:
         89:cf:4a:9a:49:fb:a0:40:f9:2d:c2:d5:8a:d1:f7:34:90:f4:
         24:62:e2:57:0b:98:79:be:47:0b:d3:c4:7e:69:14:5a:79:28:
         3c:29:07:89:00:94:fc:f0:4f:ce:a8:6d:a9:a2:6d:fe:31:58:
         ba:87:1c:02:d3:5c:49:60:a0:32:d9:00:a2:51:76:da:02:32:
         0d:bc:e3:6b:f2:d9:7d:ff:95:92:77:82:8d:e1:f9:d4:b4:1d:
         18:76:15:4c:b4:54:7b:98:02:90:1b:02:09:22:fe:a7:ee:68:
         a2:bf:cd:7a:f1:b5:6d:cf:d1:50:72:9c:de:7e:d7:f1:71:00:
         9b:40:fb:58:25:89:a7:7a:92:d3:0e:af:5c:85:7b:75:2d:34:
         17:4a:d1:16:4c:3c:50:05:b5:4c:19:94:37:56:ca:c1:92:ec:
         2f:22:03:87:7b:fa:b7:ee:ad:91:c4:d8:9d:c6:4f:3e:88:fa:
         2f:bf:63:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:01:59 2025 by rpki-client