This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8304B142B34711EC90A6DA67C4F9AE02.roa
File:                     8304B142B34711EC90A6DA67C4F9AE02.roa (raw, json)
Hash identifier:          3vUZjFTkW2synuvsfLkZE7Uj9BWq6GQxB8oRjg8f8YA=
Subject key identifier:   60:A3:7E:1A:99:89:97:E1:0C:D5:C1:46:B7:BD:9F:A8:1F:64:1F:DC
Certificate issuer:       /CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1
Certificate serial:       03B7
Authority key identifier: F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8304B142B34711EC90A6DA67C4F9AE02.roa
Signing time:             Fri 14 Nov 2025 23:16:14 +0000
ROA not before:           Fri 14 Nov 2025 23:16:14 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139726
IP address blocks:        103.144.52.0/23 maxlen: 23
                          103.144.52.0/24 maxlen: 24
                          103.144.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl
                          rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951 (0x3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B49C0, serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1
        Validity
            Not Before: Nov 14 23:16:14 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6917b83e-c8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:12:81:59:8a:a1:65:ec:b4:69:a0:1c:b6:34:
                    7e:5f:29:ef:23:7e:c5:1b:45:7d:ab:37:cd:ab:e8:
                    f3:08:11:14:dc:05:c1:9b:13:ac:67:da:84:67:09:
                    30:5d:00:e1:ef:db:42:01:72:67:5d:e0:46:88:71:
                    9c:68:d7:64:f6:60:6a:c3:19:2d:8e:45:ea:ef:40:
                    7c:47:91:e6:e9:b1:af:09:24:e3:87:3c:1e:62:19:
                    4a:b1:47:ed:5b:2e:6d:81:03:4e:1b:78:16:55:9f:
                    00:1f:e8:d5:e4:1b:90:b0:57:aa:fa:54:57:be:00:
                    2a:c9:c4:8e:4a:bc:24:26:98:82:d9:d4:29:d3:fe:
                    fb:01:8d:af:72:a9:98:76:6d:51:d0:81:ae:d6:c8:
                    e5:be:fd:45:f4:25:c0:b6:af:0e:9b:75:a3:ab:0f:
                    23:96:f3:ec:9d:41:56:09:ff:85:95:59:5e:b7:75:
                    91:bf:c4:1d:d0:ff:57:20:27:01:d3:2a:f3:c4:61:
                    cf:90:19:38:f7:18:7e:a4:fa:3f:89:b8:41:80:c0:
                    1f:69:49:d0:da:c7:c9:ef:bf:ed:93:b2:95:fb:2c:
                    35:ce:fc:b9:ec:59:18:cb:0f:7e:f7:2c:a8:58:ef:
                    a7:73:b0:c0:fe:d8:a3:e8:53:0f:62:45:13:f0:7a:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A3:7E:1A:99:89:97:E1:0C:D5:C1:46:B7:BD:9F:A8:1F:64:1F:DC
            X509v3 Authority Key Identifier:
                keyid:F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8304B142B34711EC90A6DA67C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:63:29:6a:b3:a5:66:73:5d:dd:02:aa:7c:1d:0d:a2:8a:69:
         2a:48:81:e5:ed:3d:e7:86:43:45:1b:cf:b1:ec:fe:c9:5b:c6:
         f4:23:dc:97:74:d5:0b:ba:6b:fd:56:5a:cb:d0:a8:13:42:f4:
         47:d5:71:ce:fa:0e:d3:a1:63:78:c3:76:2e:66:e2:d5:c5:9f:
         a1:c2:63:af:1a:84:81:ff:69:77:a8:a0:0b:02:84:d5:da:a4:
         3a:a8:71:de:c0:da:ff:de:06:d7:92:c2:d0:ed:3d:db:1d:41:
         7a:fe:c7:af:c1:3e:73:41:fe:53:38:00:07:7e:e1:7c:a3:47:
         4d:77:ed:db:0a:28:7d:25:c7:b1:4d:b0:22:37:27:fd:f0:6d:
         28:2c:d8:4c:a9:c9:08:d7:cc:e5:6a:08:14:a7:fa:ca:d7:45:
         fd:10:31:2b:26:f1:df:18:ac:a5:6d:88:be:a7:a5:f0:b4:47:
         fd:db:74:b0:b4:57:ad:fd:9b:81:2b:1d:04:ca:d2:4a:4a:40:
         71:c4:84:68:54:bd:94:b3:0b:78:49:fa:93:40:dc:eb:aa:2b:
         5f:11:f5:49:d5:7c:bb:c6:31:d2:b7:36:ef:68:47:db:a5:c6:
         e7:3b:51:f6:2f:71:05:0e:ff:83:ef:4c:fe:65:d4:86:e9:88:
         c2:c6:5b:a0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQ5QzAxMTAvBgNVBAUTKEYxNTAxOTIwQTU1RjNBN0MyNzEwMzkxNDlGRkEyOEE3
QzFDQzM4RjEwHhcNMjUxMTE0MjMxNjE0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTE3YjgzZS1jOGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3RKBWYqhZey0aaActjR+XynvI37FG0V9qzfNq+jzCBEU3AXBmxOsZ9qEZwkw
XQDh79tCAXJnXeBGiHGcaNdk9mBqwxktjkXq70B8R5Hm6bGvCSTjhzweYhlKsUft
Wy5tgQNOG3gWVZ8AH+jV5BuQsFeq+lRXvgAqycSOSrwkJpiC2dQp0/77AY2vcqmY
dm1R0IGu1sjlvv1F9CXAtq8Om3Wjqw8jlvPsnUFWCf+FlVlet3WRv8Qd0P9XICcB
0yrzxGHPkBk49xh+pPo/ibhBgMAfaUnQ2sfJ77/tk7KV+yw1zvy57FkYyw9+9yyo
WO+nc7DA/tij6FMPYkUT8HpT/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGCjfhqZ
iZfhDNXBRre9n6gfZB/cMB8GA1UdIwQYMBaAFPFQGSClXzp8JxA5FJ/6KKfBzDjx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlDMC82Q0IzODM1OEIz
NDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9ud25FRGtVbl9vb3A4SE1P
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhWQVpJS1ZmT253bkVEa1VuX29vcDhITU9QRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjQ5QzAvNkNCMzgzNThCMzQ0MTFFQ0FCQ0UyQTYyQzRGOUFFMDIvODMwNEIxNDJC
MzQ3MTFFQzkwQTZEQTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnkDQwDQYJKoZIhvcNAQELBQADggEBAJhjKWqzpWZzXd0C
qnwdDaKKaSpIgeXtPeeGQ0Ubz7Hs/slbxvQj3Jd01Qu6a/1WWsvQqBNC9EfVcc76
DtOhY3jDdi5m4tXFn6HCY68ahIH/aXeooAsChNXapDqocd7A2v/eBteSwtDtPdsd
QXr+x6/BPnNB/lM4AAd+4XyjR0137dsKKH0lx7FNsCI3J/3wbSgs2EypyQjXzOVq
CBSn+srXRf0QMSsm8d8YrKVtiL6npfC0R/3bdLC0V639m4ErHQTK0kpKQHHEhGhU
vZSzC3hJ+pNA3OuqK18R9UnVfLvGMdK3Nu9oR9ulxuc7UfYvcQUO/4PvTP5l1Ibp
iMLGW6A=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:36:51 2025 by rpki-client