This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/60CAF672CAC211F08083F41BC4F9AE02.roa
File:                     60CAF672CAC211F08083F41BC4F9AE02.roa (raw, json)
Hash identifier:          kiwqoX3h4ubEB/f3uAb3AdDh++JWYwrrl7T90TiKXzs=
Subject key identifier:   B6:D1:A7:EF:C9:91:05:C0:07:A7:00:C4:2F:62:44:E1:21:03:D6:16
Certificate issuer:       /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Certificate serial:       0BB9
Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/60CAF672CAC211F08083F41BC4F9AE02.roa
Signing time:             Wed 26 Nov 2025 12:21:05 +0000
ROA not before:           Wed 26 Nov 2025 12:21:05 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     202736
IP address blocks:        103.101.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
                          rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3001 (0xbb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
        Validity
            Not Before: Nov 26 12:21:05 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6926f0b0-81f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:bc:cb:d7:54:82:8d:66:1f:76:e2:77:98:
                    9b:96:01:a3:e8:20:20:8d:8b:cc:11:4c:12:5c:c5:
                    17:52:2b:72:16:1c:70:8e:31:3a:ee:97:b0:55:af:
                    dc:32:d1:07:d6:28:64:48:6a:f8:39:fe:ee:7b:7e:
                    34:96:1e:2e:9b:37:8b:98:64:b9:37:5f:ef:f8:23:
                    e8:9b:31:f8:4f:28:ac:cf:8d:48:d1:7c:56:42:94:
                    0e:1b:c8:35:f8:69:46:8a:f9:25:c2:b5:a1:57:e9:
                    6e:9a:26:2c:16:e3:c4:df:4b:a0:01:3e:92:70:00:
                    95:24:fd:2c:53:2b:be:a1:d9:1d:14:4b:e1:e9:5d:
                    8c:a8:86:b3:b4:64:0c:d6:35:d7:eb:89:8b:65:ea:
                    d8:ba:ae:0b:33:df:6d:7f:2d:a2:dc:c5:4b:17:2a:
                    bb:58:e9:3b:da:1f:f9:1b:fe:a6:6b:35:87:b0:5a:
                    f5:a9:ee:40:b1:7b:17:a8:01:78:74:8d:47:e7:ec:
                    64:08:03:7b:66:70:35:b1:db:95:16:56:63:45:1a:
                    48:22:de:cd:fb:4e:ab:96:2d:aa:b7:eb:44:de:9a:
                    f3:03:b1:c6:e5:29:63:04:15:19:fb:64:57:1a:70:
                    65:af:ab:e5:c8:72:64:e7:4d:e5:a3:46:27:10:81:
                    be:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D1:A7:EF:C9:91:05:C0:07:A7:00:C4:2F:62:44:E1:21:03:D6:16
            X509v3 Authority Key Identifier:
                keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/60CAF672CAC211F08083F41BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:28:ae:c7:cc:71:25:f7:fc:f8:56:5e:27:0f:92:a3:2c:66:
         62:3a:9c:d9:f2:0a:a1:76:c8:7c:51:46:e8:03:02:6f:17:4c:
         32:80:46:92:72:c1:3f:f2:5c:cc:93:c3:86:38:53:6e:8b:19:
         c4:1a:2c:af:9d:d6:99:45:dd:62:ac:67:0e:88:8d:44:8e:e4:
         6f:c7:5c:07:11:17:e0:48:31:a5:d0:4b:35:0c:37:eb:d8:da:
         36:fc:e4:e1:2c:a9:5c:fe:45:ca:75:fa:c2:ec:8f:4f:9e:13:
         27:9c:2d:c9:ab:5c:2c:f8:27:3f:64:a3:9d:33:b4:ac:9f:00:
         fa:ec:c2:7b:91:85:e3:ab:86:92:86:8c:7b:3e:85:5c:8d:39:
         b5:86:db:2f:aa:be:40:c7:50:dc:a1:ed:c0:94:12:98:2b:2d:
         d3:ba:bd:9c:9e:c5:c2:03:79:00:c2:51:3a:de:31:cd:b7:ed:
         1f:c6:e8:4f:dc:a9:6c:5d:cd:c8:37:bc:30:9e:11:1d:24:e7:
         28:b3:5d:64:67:66:42:76:b5:b8:3c:20:4f:7f:d3:33:cc:78:
         a1:5b:96:2e:4e:99:d4:93:94:75:90:cb:c6:4d:53:f1:9b:e7:
         38:ed:1d:8b:26:5d:a3:f9:ea:54:dd:3a:c6:36:8b:b8:f0:2c:
         e9:fa:91:aa
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB
RkI1RTJCQjIwHhcNMjUxMTI2MTIyMTA1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI2ZjBiMC04MWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQu8y9dUgo1mH3bid5iblgGj6CAgjYvMEUwSXMUXUityFhxwjjE67pewVa/c
MtEH1ihkSGr4Of7ue340lh4umzeLmGS5N1/v+CPomzH4Tyisz41I0XxWQpQOG8g1
+GlGivklwrWhV+lumiYsFuPE30ugAT6ScACVJP0sUyu+odkdFEvh6V2MqIaztGQM
1jXX64mLZerYuq4LM99tfy2i3MVLFyq7WOk72h/5G/6mazWHsFr1qe5AsXsXqAF4
dI1H5+xkCAN7ZnA1sduVFlZjRRpIIt7N+06rli2qt+tE3przA7HG5SljBBUZ+2RX
GnBlr6vlyHJk503lo0YnEIG+JwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLbRp+/J
kQXAB6cAxC9iROEhA9YWMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4
NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjU2RjAvN0Q2N0U0RDQzODRDMTFFQUJFQTJEQjcxQzRGOUFFMDIvNjBDQUY2NzJD
QUMyMTFGMDgwODNGNDFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnZTIwDQYJKoZIhvcNAQELBQADggEBAIsorsfMcSX3/PhW
XicPkqMsZmI6nNnyCqF2yHxRRugDAm8XTDKARpJywT/yXMyTw4Y4U26LGcQaLK+d
1plF3WKsZw6IjUSO5G/HXAcRF+BIMaXQSzUMN+vY2jb85OEsqVz+Rcp1+sLsj0+e
EyecLcmrXCz4Jz9ko50ztKyfAPrswnuRheOrhpKGjHs+hVyNObWG2y+qvkDHUNyh
7cCUEpgrLdO6vZyexcIDeQDCUTreMc237R/G6E/cqWxdzcg3vDCeER0k5yizXWRn
ZkJ2tbg8IE9/0zPMeKFbli5OmdSTlHWQy8ZNU/Gb5zjtHYsmXaP56lTdOsY2i7jw
LOn6kao=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:15:52 2025 by rpki-client