This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/A923DDA2BE0211F090AD9F13C4F9AE02.roa
File:                     A923DDA2BE0211F090AD9F13C4F9AE02.roa (raw, json)
Hash identifier:          rJPMOVrpncAhvub4ptLK3aMWfe/wCmar13ef6P+IuQs=
Subject key identifier:   B3:B1:D3:10:0D:75:08:4C:AD:6A:4A:8C:EE:59:62:8C:10:45:0F:CF
Certificate issuer:       /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial:       16C8
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/A923DDA2BE0211F090AD9F13C4F9AE02.roa
Signing time:             Mon 10 Nov 2025 06:58:28 +0000
ROA not before:           Mon 10 Nov 2025 06:58:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206283
IP address blocks:        103.27.20.0/24 maxlen: 24
                          175.111.6.0/24 maxlen: 24
                          2001:fe8:8f00::/40 maxlen: 40
                          2001:fe8:8f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
                          rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5832 (0x16c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
        Validity
            Not Before: Nov 10 06:58:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69118d14-6ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6f:c0:53:07:8e:1a:99:5e:06:55:22:75:64:
                    e6:54:be:38:b0:28:f7:a1:30:03:00:19:ee:c7:5b:
                    31:e9:aa:7b:bd:ac:d3:98:08:df:78:e3:a9:90:da:
                    d0:ac:3c:1a:4b:66:29:13:28:9d:b9:28:bf:28:05:
                    d8:47:17:06:cf:39:64:f8:5f:00:37:bf:d3:73:64:
                    4d:20:73:48:54:eb:19:a8:c3:44:73:e3:f5:1d:62:
                    8d:2a:7c:59:12:00:ec:6b:8a:d4:7d:ea:79:76:61:
                    16:f0:3a:1d:69:67:f1:13:e0:2d:11:b4:96:5e:d3:
                    0b:10:b1:88:1c:30:ac:84:a6:3f:26:b3:b2:d7:91:
                    d1:03:ec:04:3d:31:bd:70:fa:b0:b4:79:2a:be:70:
                    4f:79:17:48:15:ae:6e:a4:87:4a:90:07:43:6d:09:
                    9a:61:e1:52:ec:03:d8:85:d3:5e:7c:46:01:b6:f5:
                    c7:11:00:d2:ef:b0:13:66:f3:5d:9b:f3:fd:53:d4:
                    e9:b2:86:b4:48:ce:02:0c:57:89:91:f3:ca:ea:88:
                    3f:18:e1:b1:0b:ed:4d:74:01:a6:fa:64:2d:76:db:
                    71:8c:e1:b9:c1:62:53:4f:bf:fe:a9:ae:07:be:27:
                    13:d5:1b:e9:1e:62:07:1a:0a:82:18:5d:1e:fc:df:
                    ea:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B1:D3:10:0D:75:08:4C:AD:6A:4A:8C:EE:59:62:8C:10:45:0F:CF
            X509v3 Authority Key Identifier:
                keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/A923DDA2BE0211F090AD9F13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.20.0/24
                  175.111.6.0/24
                IPv6:
                  2001:fe8:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:86:47:6d:e4:9f:5a:c7:22:b3:68:a8:cd:44:31:3a:bb:5d:
         d7:d3:c5:1d:b3:20:50:b8:8b:f1:3a:fd:79:cc:ae:8c:5c:01:
         79:3b:d5:0f:23:22:72:bd:66:3c:29:b3:a4:77:cf:02:d8:19:
         e8:d9:c7:75:18:8f:60:fd:a5:e6:9a:56:19:cb:8e:8b:b4:d3:
         c6:2e:e4:4e:28:2b:15:f8:58:cf:05:ef:9e:46:e8:72:a3:f0:
         1b:14:a6:c7:87:f3:ab:d3:5f:2b:31:cf:cc:0a:f9:82:b1:47:
         08:10:a1:8d:2a:5f:64:04:e2:7f:c0:85:30:60:6d:b8:36:3a:
         16:d2:67:b9:9f:24:37:47:36:22:f7:6a:bc:81:71:54:c6:d9:
         42:ad:f0:90:ee:57:5f:f6:a5:39:54:90:9b:e0:d6:9a:74:81:
         04:7a:b9:40:4d:5c:8e:0d:9b:43:4b:90:12:7d:6b:71:45:aa:
         20:b2:9e:e2:da:ec:a2:be:c9:4b:d3:a6:cf:97:09:88:58:0d:
         96:18:75:88:1d:16:14:af:1e:bd:f1:69:42:4c:df:51:77:40:
         6a:23:d0:f1:03:0e:d2:66:fe:f3:75:fc:51:bf:61:13:53:17:
         6d:b3:69:10:32:38:a0:a9:7e:42:a8:04:35:98:3e:c9:9c:ab:
         33:f8:37:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:41:23 2025 by rpki-client