This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/8F6D3D583AEA11EC84E6634EC4F9AE02.roa
File:                     8F6D3D583AEA11EC84E6634EC4F9AE02.roa (raw, json)
Hash identifier:          0Xwi/bmW9haZc7tjAjEkhhMp/mPsR+cSlzidnrV+hJs=
Subject key identifier:   11:F1:79:45:D6:6F:7D:05:A2:12:C8:18:9E:B1:AD:8C:DD:BD:A6:57
Certificate issuer:       /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Certificate serial:       0DA9
Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/8F6D3D583AEA11EC84E6634EC4F9AE02.roa
Signing time:             Sat 22 Nov 2025 17:37:45 +0000
ROA not before:           Sat 22 Nov 2025 17:37:45 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     63916
IP address blocks:        27.122.56.0/24 maxlen: 24
                          27.122.57.0/24 maxlen: 24
                          27.122.58.0/24 maxlen: 24
                          27.122.59.0/24 maxlen: 24
                          43.239.156.0/22 maxlen: 22
                          43.239.156.0/23 maxlen: 23
                          43.239.156.0/24 maxlen: 24
                          43.239.157.0/24 maxlen: 24
                          43.239.158.0/23 maxlen: 23
                          43.239.158.0/24 maxlen: 24
                          43.239.159.0/24 maxlen: 24
                          43.245.196.0/23 maxlen: 23
                          43.245.196.0/24 maxlen: 24
                          43.245.197.0/24 maxlen: 24
                          43.245.198.0/24 maxlen: 24
                          43.245.199.0/24 maxlen: 24
                          43.251.157.0/24 maxlen: 24
                          43.251.158.0/24 maxlen: 24
                          43.251.159.0/24 maxlen: 24
                          103.1.152.0/24 maxlen: 24
                          103.1.153.0/24 maxlen: 24
                          103.1.154.0/24 maxlen: 24
                          103.1.155.0/24 maxlen: 24
                          103.10.196.0/24 maxlen: 24
                          103.10.198.0/24 maxlen: 24
                          103.35.72.0/22 maxlen: 22
                          103.35.72.0/24 maxlen: 24
                          103.35.73.0/24 maxlen: 24
                          103.35.74.0/24 maxlen: 24
                          103.35.75.0/24 maxlen: 24
                          103.68.223.0/24 maxlen: 24
                          103.71.254.0/24 maxlen: 24
                          103.72.4.0/23 maxlen: 24
                          182.161.32.0/22 maxlen: 22
                          182.161.32.0/24 maxlen: 24
                          182.161.33.0/24 maxlen: 24
                          182.161.34.0/24 maxlen: 24
                          182.161.35.0/24 maxlen: 24
                          202.144.192.0/22 maxlen: 22
                          202.144.192.0/24 maxlen: 24
                          202.144.193.0/24 maxlen: 24
                          202.144.194.0/24 maxlen: 24
                          202.144.195.0/24 maxlen: 24
                          2402:c480::/32 maxlen: 32
                          2402:c480:3000::/48 maxlen: 48
                          2402:c480:3001::/48 maxlen: 48
                          2402:c480:3002::/48 maxlen: 48
                          2402:c480:3003::/48 maxlen: 48
                          2402:c480:3004::/48 maxlen: 48
                          2402:c480:5000::/48 maxlen: 48
                          2402:c480:6000::/48 maxlen: 48
                          2402:c480:6001::/48 maxlen: 48
                          2402:c480:6002::/48 maxlen: 48
                          2402:c480:7000::/48 maxlen: 48
                          2402:c480:7001::/48 maxlen: 48
                          2402:c480:8000::/48 maxlen: 48
                          2402:c480:8001::/48 maxlen: 48
                          2402:c480:8003::/48 maxlen: 48
                          2402:c480:8208::/48 maxlen: 48
                          2402:c480:8412::/48 maxlen: 48
                          2402:c480:9000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
                          rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3497 (0xda9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
        Validity
            Not Before: Nov 22 17:37:45 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6921f4e9-1949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:50:9d:21:ce:4d:ac:ca:85:08:f4:f4:83:28:
                    ec:80:51:47:0b:37:8c:4d:98:b5:91:f6:f0:12:e4:
                    28:32:7e:33:be:7d:f6:b9:23:9c:20:64:e4:0e:75:
                    d4:c4:69:eb:7b:0e:40:1f:19:90:1c:43:f8:f9:00:
                    9b:81:50:b1:1e:fe:46:6a:fb:59:b5:f3:3b:b5:2d:
                    5f:80:df:24:7e:3d:78:99:6b:b3:10:5e:23:7e:e3:
                    1e:88:c6:35:ac:79:1d:ff:45:1e:41:74:d0:9b:2e:
                    56:c3:41:ac:7c:36:5f:bb:c9:d9:07:f3:46:61:16:
                    75:21:e0:2c:d3:55:a7:9b:7b:1a:be:32:79:36:b7:
                    f6:3c:a7:ea:68:05:77:b7:94:27:a1:36:6c:95:07:
                    c8:63:94:28:7a:c2:3a:e1:2b:cf:a1:45:97:4d:7a:
                    f6:11:ba:e3:8e:57:45:8f:8d:76:39:ee:bc:78:ac:
                    07:fb:33:94:0c:43:32:10:d6:88:ce:3c:90:86:6f:
                    52:a9:e8:59:b7:ec:74:ee:5a:f7:d9:2b:12:2c:7b:
                    3a:6e:61:90:5b:89:45:b7:95:4b:8b:67:9d:54:b4:
                    3d:aa:dc:7a:70:99:5b:82:b7:70:e0:02:d9:3e:26:
                    d4:d1:53:ed:49:ae:47:1f:50:42:ed:43:ac:1d:92:
                    63:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F1:79:45:D6:6F:7D:05:A2:12:C8:18:9E:B1:AD:8C:DD:BD:A6:57
            X509v3 Authority Key Identifier:
                keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/8F6D3D583AEA11EC84E6634EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.122.56.0/22
                  43.239.156.0/22
                  43.245.196.0/22
                  43.251.157.0-43.251.159.255
                  103.1.152.0/22
                  103.10.196.0/24
                  103.10.198.0/24
                  103.35.72.0/22
                  103.68.223.0/24
                  103.71.254.0/24
                  103.72.4.0/23
                  182.161.32.0/22
                  202.144.192.0/22
                IPv6:
                  2402:c480::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:58:7d:31:4a:b5:b1:96:4c:29:bf:fe:8b:44:7d:8e:fa:09:
         f8:70:71:fb:13:da:f4:22:74:99:aa:3b:6f:26:75:74:ec:07:
         46:fa:04:09:4e:c1:28:73:41:4e:b9:ee:72:58:08:50:69:54:
         bc:dc:2d:bc:b0:de:30:96:3a:98:89:f3:4f:d2:65:98:c5:43:
         e3:88:c2:0a:82:6c:52:ce:0e:f3:8f:14:5f:0c:b5:ae:29:eb:
         c4:a7:62:18:d0:14:56:b9:ad:bb:82:11:03:3a:ab:70:9f:a4:
         88:52:68:9d:c4:b1:f2:85:8f:6f:eb:65:27:b5:ef:26:c8:fb:
         b0:e4:11:71:6a:b0:70:9b:ee:73:44:e8:f1:4d:45:92:e7:5a:
         df:94:9c:4d:c3:56:5e:da:13:dd:d2:dd:e2:cc:00:a8:a6:1c:
         40:8f:d8:ee:5a:6e:cb:c3:3f:68:9e:97:02:c0:c3:2e:5f:ad:
         27:f5:a2:d4:61:9d:72:a6:23:2d:32:7d:34:3d:b4:c9:be:34:
         92:e3:e6:42:f7:a9:33:28:93:10:4c:f0:b4:ef:34:ac:88:fd:
         8f:eb:dd:97:d2:69:a3:ba:e4:1d:0c:76:cb:ff:2a:ef:f5:43:
         91:a8:be:ec:24:49:3a:75:ca:60:4a:9f:76:e1:39:1b:ea:f3:
         dd:d5:ff:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:29:13 2025 by rpki-client