This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/E5E9F8B8D0F711F0ACA5A85AC4F9AE02.roa
File:                     E5E9F8B8D0F711F0ACA5A85AC4F9AE02.roa (raw, json)
Hash identifier:          L+R5MmpKGufoqG5JJ77d6wpZuVDjwC3CDe/wMrgik6c=
Subject key identifier:   CA:AC:12:69:FB:63:7D:21:05:FC:19:00:2C:A7:18:D7:4E:B9:0A:F2
Certificate issuer:       /CN=A91B13FE/serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
Certificate serial:       67
Authority key identifier: 52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/E5E9F8B8D0F711F0ACA5A85AC4F9AE02.roa
Signing time:             Thu 04 Dec 2025 09:59:18 +0000
ROA not before:           Thu 04 Dec 2025 09:59:18 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     141988
IP address blocks:        165.101.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl
                          rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13FE, serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
        Validity
            Not Before: Dec  4 09:59:18 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69315b76-895b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5a:4a:c0:01:e9:26:12:ac:c6:4d:52:c1:da:
                    8d:97:82:64:7a:3c:22:b7:9c:0c:23:ab:45:04:f8:
                    c4:2e:e8:54:15:3c:1f:32:39:86:2d:c2:5a:31:00:
                    8f:be:a6:e4:cb:bc:99:1e:93:bf:94:6f:fe:37:93:
                    91:98:b1:aa:c7:a2:12:c8:1e:26:f3:86:7b:2c:cb:
                    75:1a:22:de:81:8a:f8:ef:d4:cc:86:bd:da:a4:08:
                    98:50:45:44:2a:9f:a7:35:a7:0b:10:ba:7f:99:3f:
                    65:03:ec:93:a6:6f:1b:a2:c0:67:23:3c:7d:42:5a:
                    6f:0c:a8:e2:78:06:64:37:8e:69:2a:51:52:f0:da:
                    5a:5f:b0:5d:f5:44:65:d1:62:ba:66:34:7d:c1:db:
                    bb:38:3c:64:80:b5:2e:20:60:26:c1:89:47:05:52:
                    55:ce:dc:b8:b5:4c:70:64:d6:d7:c6:a5:33:74:82:
                    d6:48:e3:44:55:33:52:8f:c9:78:15:f7:ab:5d:66:
                    79:61:e8:3a:4e:99:5d:41:16:a6:78:9f:30:c9:e5:
                    4f:42:f6:4d:2d:84:61:53:46:a7:90:04:78:89:41:
                    60:c1:18:a9:87:1c:6e:67:76:c2:95:25:17:63:e0:
                    f4:c4:bd:6e:77:4e:25:79:e4:a8:54:ff:00:c9:37:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AC:12:69:FB:63:7D:21:05:FC:19:00:2C:A7:18:D7:4E:B9:0A:F2
            X509v3 Authority Key Identifier:
                keyid:52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/E5E9F8B8D0F711F0ACA5A85AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:75:e0:e2:a1:8d:49:1a:f5:43:90:49:d4:c9:74:57:32:86:
         76:9c:39:2a:47:09:39:3d:21:d7:a2:41:72:09:8b:2d:63:fa:
         d8:1f:e9:28:86:a7:d2:f3:76:79:0f:9e:cf:35:6a:b3:2a:d5:
         b5:82:73:bb:4a:a4:08:e4:72:4c:6b:6a:13:ec:90:e3:06:a6:
         bf:35:c1:c2:e1:8c:d4:35:35:2e:2e:7a:72:4d:bc:a8:24:37:
         85:a8:c9:fa:86:ac:68:0b:67:70:73:69:63:6a:26:af:7f:63:
         af:f9:01:1c:b2:89:17:e1:11:11:61:a7:b2:3a:ec:ee:d9:bf:
         e0:1b:50:90:a6:56:16:ef:0d:9c:2a:3c:24:ff:21:2f:de:30:
         9a:d6:4d:bb:26:fd:b8:c2:ce:9f:b9:4c:94:32:2d:c5:3a:60:
         3b:d2:31:3c:a2:3a:7a:8b:d6:f9:07:ca:5f:7d:ff:9b:45:fc:
         6e:f1:bc:7d:19:6a:e5:ad:51:a2:8d:23:6b:01:b1:85:e2:a0:
         ca:bb:3c:4a:c8:87:c8:a2:f0:d3:2b:97:ad:20:fa:f5:c2:61:
         dc:29:51:0c:ef:97:bd:e0:20:34:6d:c6:6b:8b:b8:0b:f4:2b:
         aa:f0:4d:cf:93:79:f6:c7:09:57:45:1e:e7:41:21:77:f9:97:
         57:2f:fe:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:18:11 2025 by rpki-client