This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A46317803F5211EBB1B1701FC4F9AE02.roa
File:                     A46317803F5211EBB1B1701FC4F9AE02.roa (raw, json)
Hash identifier:          Q4VBl6t7IxgDUfIveQUTPQulCitna2Ej85qnHBLGKO8=
Subject key identifier:   5D:93:56:CA:73:A4:28:BA:2A:CD:07:81:62:DF:03:45:EF:2E:A8:96
Certificate issuer:       /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Certificate serial:       0797
Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A46317803F5211EBB1B1701FC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 20:53:46 +0000
ROA not before:           Fri 28 Nov 2025 20:53:46 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137525
IP address blocks:        103.111.168.0/22 maxlen: 23
                          110.238.160.0/20 maxlen: 21
                          110.238.160.0/22 maxlen: 22
                          110.238.168.0/22 maxlen: 22
                          110.238.176.0/21 maxlen: 21
                          110.238.180.0/22 maxlen: 22
                          110.238.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1943 (0x797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
        Validity
            Not Before: Nov 28 20:53:46 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692a0bda-5f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:1e:0e:3a:3b:aa:2b:67:83:65:17:b9:23:
                    78:20:b7:57:16:03:4f:7f:68:4a:c3:3e:fb:91:72:
                    d0:d1:30:c5:d7:e8:3e:1e:60:47:1c:d6:b3:09:00:
                    e8:ec:33:93:3b:b8:41:67:fa:6d:41:b9:33:50:5a:
                    26:20:2b:9c:80:4c:15:5d:a4:8e:6c:96:3f:81:35:
                    51:18:01:54:cf:0a:49:91:c1:62:d3:b9:65:8d:e8:
                    b5:85:98:b5:0d:8a:2d:d5:26:ac:2f:51:89:72:c9:
                    e5:c3:78:40:1c:d9:bb:47:ac:c5:8a:c9:c6:df:3b:
                    7d:e1:ef:de:5d:6d:da:97:47:b1:55:eb:0a:28:ac:
                    f0:b9:e2:23:f2:eb:4d:37:6b:e6:c1:30:3b:20:d0:
                    dc:a6:f8:0c:5d:81:de:99:7b:bb:73:1a:bf:a8:97:
                    eb:95:90:90:62:0a:7c:c8:9b:12:3a:33:3f:29:7f:
                    f1:44:44:2b:c8:20:e8:1c:6e:72:7b:bd:8a:89:2e:
                    97:e4:82:70:86:38:ad:ce:7c:49:07:73:d1:3e:a6:
                    a1:91:a0:de:2b:e3:81:8c:ce:64:18:f9:d2:a4:03:
                    ec:bb:7d:38:ae:dc:24:43:d3:da:c4:4a:bc:f3:e8:
                    11:ad:91:c2:39:b7:ac:3c:03:9d:61:61:e9:d2:12:
                    26:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:93:56:CA:73:A4:28:BA:2A:CD:07:81:62:DF:03:45:EF:2E:A8:96
            X509v3 Authority Key Identifier:
                keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A46317803F5211EBB1B1701FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.168.0/22
                  110.238.160.0-110.238.183.255

    Signature Algorithm: sha256WithRSAEncryption
         21:a3:6e:ab:ff:70:bd:18:6e:4d:42:b7:0a:db:c6:73:7e:49:
         90:40:32:cc:4a:51:50:02:6d:28:e5:ed:e7:b4:ed:1c:a1:26:
         d4:9d:15:23:df:53:a3:36:f5:85:14:66:6c:79:32:8b:99:5a:
         83:4b:de:1a:ac:a9:e3:6d:81:a1:99:66:16:be:cf:1f:13:6a:
         d4:ed:6c:fe:3f:55:5c:fd:a1:04:38:35:43:75:18:c6:14:52:
         95:ff:c8:64:67:2e:6a:85:02:77:f7:94:6c:d0:df:7f:43:4d:
         3c:6e:71:00:ec:21:1b:0f:dd:8c:97:64:3f:b7:b5:18:67:83:
         55:d8:7a:64:45:dc:77:f5:a6:89:8d:c1:9b:aa:92:9f:8e:23:
         5e:9f:42:dd:c0:86:55:5c:f3:61:a1:ea:6c:67:ea:9e:d2:80:
         de:cc:c6:bf:34:c3:2d:48:22:ec:d6:92:89:31:cd:eb:19:01:
         54:b7:33:c7:ca:1f:72:19:a5:e4:9f:c2:34:6c:0b:be:13:99:
         34:d1:47:f2:ff:14:dd:1e:38:4a:a5:83:94:fc:08:ff:13:c3:
         09:1e:2f:52:7c:92:3d:f9:db:2f:9d:77:66:fd:71:0e:cc:9d:
         0a:bd:4e:45:82:56:b6:4a:a6:bc:17:87:00:4e:5c:25:f7:cb:
         3e:3f:2f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:34:37 2025 by rpki-client