This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/541716E2B95411F0B8E2D868C4F9AE02.roa
File:                     541716E2B95411F0B8E2D868C4F9AE02.roa (raw, json)
Hash identifier:          49OldPmhail4+KLTmGY8H31/U23B1A/QMz8hdAFM8/U=
Subject key identifier:   C8:6D:3C:22:76:8F:50:68:17:B5:F8:EC:20:7D:71:9D:41:7D:9B:CA
Certificate issuer:       /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial:       0BD5
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/541716E2B95411F0B8E2D868C4F9AE02.roa
Signing time:             Tue 02 Dec 2025 18:50:31 +0000
ROA not before:           Tue 02 Dec 2025 18:50:31 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     148996
IP address blocks:        103.25.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
                          rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:27:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3029 (0xbd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
        Validity
            Not Before: Dec  2 18:50:31 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=692f34f7-e4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e7:75:42:a3:ea:cf:0d:08:8c:d4:fa:27:7b:
                    bc:38:54:bc:fc:81:16:2e:fb:f8:24:c2:b0:aa:99:
                    ab:d7:e5:6a:eb:ff:09:74:68:6e:29:b1:d0:83:a4:
                    2a:63:a1:98:76:08:0e:5c:2e:3b:6a:92:fa:19:0b:
                    e8:ba:84:c4:59:cf:1e:c7:2a:8e:cd:97:a2:ca:5a:
                    dc:84:3c:5c:14:5b:52:2e:df:22:2c:06:c0:6b:ca:
                    88:63:0c:18:3c:8e:da:60:3d:26:db:b3:fc:03:7e:
                    10:5d:32:fb:6b:2e:7f:d1:90:62:40:56:e5:7c:37:
                    39:2f:71:28:8a:da:ee:b3:19:b6:85:02:00:29:45:
                    64:89:d4:c6:6a:5e:ca:ee:3a:ab:39:58:23:f1:9a:
                    3e:28:09:86:ea:68:ec:b1:51:31:b1:21:21:ac:58:
                    69:c8:76:9b:1f:c3:cf:31:2e:e2:41:ec:8e:96:87:
                    53:12:84:49:d1:76:08:f3:36:53:41:7a:ab:44:28:
                    ab:eb:6c:1c:86:af:04:26:6e:8c:98:30:5c:eb:61:
                    c1:c5:db:2a:9a:5d:6f:a2:0c:06:65:5d:3c:b6:02:
                    59:fe:9e:90:33:d4:8b:3f:05:b1:45:80:0c:9b:8c:
                    61:98:d7:96:18:0a:bf:8d:c4:7f:18:98:27:cb:3f:
                    a8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6D:3C:22:76:8F:50:68:17:B5:F8:EC:20:7D:71:9D:41:7D:9B:CA
            X509v3 Authority Key Identifier:
                keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/541716E2B95411F0B8E2D868C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:00:3d:a1:ea:58:93:6a:82:63:fb:41:d6:08:3f:24:3f:4b:
         fd:0a:b7:d7:cc:e4:eb:d4:44:7e:98:82:e8:88:77:21:3d:75:
         c0:96:f5:62:ca:94:7a:72:07:1d:8d:c9:cd:a8:57:b8:79:97:
         ac:19:67:2b:dc:fd:9a:65:c0:df:66:15:9c:9f:e7:61:62:bd:
         74:e9:15:d9:fe:ee:d9:b0:61:09:74:67:3f:c3:36:b2:b1:f5:
         42:dc:33:e0:eb:65:52:c2:52:78:a0:6f:b1:aa:31:30:79:5d:
         b6:89:6b:f4:4d:ac:d8:2b:fd:75:1d:63:19:1b:97:ff:4e:a4:
         02:59:3f:6b:4a:78:c6:59:cf:08:23:40:a2:67:86:69:cb:5e:
         38:36:db:80:97:ef:64:a8:9e:da:3f:74:42:32:09:13:ef:b5:
         fd:56:01:8d:59:9e:dd:8d:10:ff:92:84:79:2c:3a:e1:21:8f:
         2c:07:33:d3:ec:f2:21:eb:46:0c:9b:9b:ec:20:68:69:bc:06:
         10:10:7f:23:79:45:ae:cd:f7:91:ef:e6:37:43:04:91:a7:64:
         3d:e8:bb:f2:a0:8a:ca:1a:8f:e8:de:3f:96:fc:b2:45:01:4a:
         46:87:19:1a:ce:92:b5:16:30:9a:8c:a0:8a:92:d3:cf:5c:12:
         b8:ac:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:20 2025 by rpki-client