This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/52216250493611EAA0968624C4F9AE02.roa
File:                     52216250493611EAA0968624C4F9AE02.roa (raw, json)
Hash identifier:          y5jVPDMadEy/JM6FxqloNmeP9XdJ1KdXIhF/JvMZygo=
Subject key identifier:   44:8F:90:FD:B9:ED:4E:AD:45:E4:FF:07:B8:71:38:84:07:00:70:62
Certificate issuer:       /CN=A91B85FC/serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205
Certificate serial:       0B37
Authority key identifier: 57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/52216250493611EAA0968624C4F9AE02.roa
Signing time:             Thu 30 Oct 2025 19:38:33 +0000
ROA not before:           Thu 30 Oct 2025 19:38:33 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     133583
IP address blocks:        103.76.32.0/22 maxlen: 22
                          2407:6080::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl
                          rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B85FC, serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205
        Validity
            Not Before: Oct 30 19:38:33 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6903beb9-d6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:de:60:90:9f:9a:98:77:b1:4a:2e:1d:c8:6f:
                    d3:0c:d2:c3:ca:ec:88:31:07:c9:64:2e:48:41:be:
                    99:61:46:2b:f7:ca:0d:61:39:58:f2:25:51:19:58:
                    6a:90:fb:2c:72:06:43:a7:c6:2b:82:3f:96:40:3f:
                    f7:22:71:d2:41:76:48:5c:97:d9:20:eb:77:a2:90:
                    d8:95:f6:c8:8e:46:19:73:85:ba:29:9c:53:c2:c9:
                    a0:e4:1f:ed:a5:59:51:21:07:0c:50:ee:e2:4a:f7:
                    8b:8f:d9:79:7f:31:fa:e5:31:c5:22:18:38:a9:41:
                    07:20:e5:e6:7f:51:ca:5c:17:36:2d:a7:30:65:af:
                    9c:bd:df:e9:e7:23:62:21:eb:93:ea:2d:9e:48:82:
                    76:ca:eb:dd:21:f2:e8:59:eb:9f:82:4a:18:57:f8:
                    a1:5f:65:0c:52:dc:26:1d:83:51:e4:bc:86:07:bf:
                    74:bf:be:91:40:fb:b5:84:60:47:0a:41:3c:c2:b7:
                    85:e5:db:d1:40:ad:06:8e:93:77:46:6c:8f:92:a5:
                    49:bf:68:96:e7:ce:d6:18:b4:4f:34:16:c7:99:87:
                    1c:9c:c2:e9:ea:bc:29:fa:ec:09:61:37:ac:26:19:
                    c9:e8:36:a2:bb:21:c7:3d:63:99:6e:cd:fd:73:65:
                    fd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8F:90:FD:B9:ED:4E:AD:45:E4:FF:07:B8:71:38:84:07:00:70:62
            X509v3 Authority Key Identifier:
                keyid:57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/52216250493611EAA0968624C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.32.0/22
                IPv6:
                  2407:6080::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:f5:56:b1:aa:95:a2:07:24:8d:a3:60:71:e3:ff:aa:34:8d:
         c0:1b:94:15:9c:6a:5d:ff:88:e2:40:1f:71:34:51:0a:de:d8:
         6b:fe:fc:88:c6:38:ce:00:74:df:dd:0f:f1:52:0c:99:b6:7c:
         90:c1:db:33:28:e4:16:ae:22:4d:5c:e2:2f:a5:d4:77:b6:c0:
         ed:e1:fc:34:34:6d:bb:19:05:13:06:2a:bc:39:db:a2:d9:52:
         c2:50:87:59:5b:85:a5:36:d1:a6:bd:0f:75:c0:3f:6e:3d:92:
         76:18:f8:31:47:ce:5b:a2:b7:15:db:b7:ca:81:43:8d:de:2b:
         a8:41:4a:d1:4a:c5:47:88:38:a1:de:c9:c8:84:08:c6:b6:3a:
         d7:46:7a:cd:ca:1f:ff:af:51:2a:93:e6:36:ff:c2:b9:75:20:
         d6:63:b5:63:9c:11:6c:c2:33:b3:a3:fc:80:f2:70:1b:9e:68:
         e1:31:ec:d4:af:d1:9c:91:40:98:53:4c:9f:d2:f3:4e:d8:99:
         5d:5b:a6:40:aa:00:b6:5b:6c:de:9b:a6:3a:c9:6c:d2:7f:aa:
         b3:61:93:a7:60:b1:19:16:58:c9:57:27:c9:16:0d:b0:65:c8:
         e2:d9:9a:49:e6:a6:6e:fd:07:17:3c:33:89:43:35:dc:f6:9d:
         8a:a1:66:73
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjg1RkMxMTAvBgNVBAUTKDU3NEY2RDU2NjRFQTlCREYzMTVDRjY0QzhFNUU2N0Qy
NjM4M0MyMDUwHhcNMjUxMDMwMTkzODMzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTAzYmViOS1kNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzd5gkJ+amHexSi4dyG/TDNLDyuyIMQfJZC5IQb6ZYUYr98oNYTlY8iVRGVhq
kPsscgZDp8Yrgj+WQD/3InHSQXZIXJfZIOt3opDYlfbIjkYZc4W6KZxTwsmg5B/t
pVlRIQcMUO7iSveLj9l5fzH65THFIhg4qUEHIOXmf1HKXBc2LacwZa+cvd/p5yNi
IeuT6i2eSIJ2yuvdIfLoWeufgkoYV/ihX2UMUtwmHYNR5LyGB790v76RQPu1hGBH
CkE8wreF5dvRQK0GjpN3RmyPkqVJv2iW587WGLRPNBbHmYccnMLp6rwp+uwJYTes
JhnJ6DaiuyHHPWOZbs39c2X9KwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFESPkP25
7U6tReT/B7hxOIQHAHBiMB8GA1UdIwQYMBaAFFdPbVZk6pvfMVz2TI5eZ9Jjg8IF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODVGQy84ODE2RUZGODQ5
MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05OHhYUFpNamw1bjBtT0R3
Z1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1YwOXRWbVRxbTk4eFhQWk1qbDVuMG1PRHdnVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qjg1RkMvODgxNkVGRjg0OTM0MTFFQUFEODRCRjFFQzRGOUFFMDIvNTIyMTYyNTA0
OTM2MTFFQUEwOTY4NjI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnTCAwDQQCAAIwBwMFACQHYIAwDQYJKoZIhvcNAQELBQAD
ggEBAJH1VrGqlaIHJI2jYHHj/6o0jcAblBWcal3/iOJAH3E0UQre2Gv+/IjGOM4A
dN/dD/FSDJm2fJDB2zMo5BauIk1c4i+l1He2wO3h/DQ0bbsZBRMGKrw526LZUsJQ
h1lbhaU20aa9D3XAP249knYY+DFHzluitxXbt8qBQ43eK6hBStFKxUeIOKHeyciE
CMa2OtdGes3KH/+vUSqT5jb/wrl1INZjtWOcEWzCM7Oj/IDycBueaOEx7NSv0ZyR
QJhTTJ/S807YmV1bpkCqALZbbN6bpjrJbNJ/qrNhk6dgsRkWWMlXJ8kWDbBlyOLZ
mknmpm79Bxc8M4lDNdz2nYqhZnM=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:11 2025 by rpki-client