This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/9EC3DA0CABC311F0B5C5583DC4F9AE02.roa
File:                     9EC3DA0CABC311F0B5C5583DC4F9AE02.roa (raw, json)
Hash identifier:          2zozSPDx04yxBo1WhaEzc27J/w3MqI9UcdjsXWDV7UQ=
Subject key identifier:   2F:CD:CA:6C:79:4E:17:8D:8E:BA:1B:4F:71:AF:3B:00:60:82:0E:F2
Certificate issuer:       /CN=A91B9790/serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71
Certificate serial:       0103
Authority key identifier: 89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/9EC3DA0CABC311F0B5C5583DC4F9AE02.roa
Signing time:             Fri 05 Dec 2025 03:43:15 +0000
ROA not before:           Fri 05 Dec 2025 03:43:15 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     26658
IP address blocks:        103.199.244.0/22 maxlen: 24
                          203.82.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl
                          rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9790, serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71
        Validity
            Not Before: Dec  5 03:43:15 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=693254d3-a2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:15:27:27:bf:bc:bb:91:30:33:e0:2f:54:
                    a1:eb:98:56:45:81:9e:40:a4:06:7a:b2:55:dc:87:
                    9e:b6:ab:5a:af:2a:fb:3d:f1:ff:55:d5:2f:6f:78:
                    b2:a7:a0:f7:56:fe:0d:4d:ea:3d:2d:b6:8b:9e:11:
                    7a:55:1a:02:a9:da:09:75:41:ae:5f:50:a1:62:89:
                    a4:52:63:c2:7d:4e:db:c8:29:23:e1:c5:ac:8f:d4:
                    0e:9b:07:22:a1:c6:6c:f1:f5:9d:c4:98:c8:8d:29:
                    6e:bb:7a:0b:04:cc:45:9c:c8:72:07:32:89:cb:9d:
                    80:5d:c9:6e:dd:75:93:3a:4e:6d:24:c0:f5:71:e7:
                    37:cf:65:bb:1f:91:d7:d0:7a:e5:dc:91:bb:f2:d3:
                    ba:6b:0a:7a:f3:16:97:39:75:05:35:a9:d5:83:ed:
                    88:3b:4f:69:52:fd:e3:f8:1b:da:1a:0e:6a:ae:d6:
                    f8:a6:c9:7d:57:72:e8:5f:a8:b9:d0:bc:94:2b:c5:
                    1b:6b:76:64:33:58:bd:34:e5:10:72:12:f6:0e:74:
                    97:ac:95:1b:f7:d0:1f:46:e6:59:1b:29:9a:cb:7e:
                    e9:7b:91:ce:c0:ea:1f:5b:70:cb:4c:e5:59:da:d8:
                    0a:a9:dc:12:86:34:98:50:df:65:24:97:67:b4:b1:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CD:CA:6C:79:4E:17:8D:8E:BA:1B:4F:71:AF:3B:00:60:82:0E:F2
            X509v3 Authority Key Identifier:
                keyid:89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/9EC3DA0CABC311F0B5C5583DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.199.244.0/22
                  203.82.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:8b:db:b5:e1:9b:91:dd:95:48:22:c3:d2:72:e8:fe:c1:10:
         d2:5f:74:75:e7:61:20:6f:93:5e:7e:8d:5c:ee:b3:69:03:b6:
         b6:38:e6:71:e5:3f:31:13:86:38:ce:0b:19:8c:c3:88:ea:10:
         fa:f8:10:ff:e9:cd:7c:84:0d:a6:fb:68:62:43:49:37:30:2c:
         2e:37:da:5d:c4:b6:1b:da:5b:fe:89:fb:3a:c5:0f:20:39:d6:
         b3:62:4b:06:42:b2:20:53:0c:f2:ed:e7:af:f2:8b:a0:35:ad:
         f7:79:4e:7d:b3:e3:ba:ad:61:cb:97:4d:c3:89:fb:90:f2:11:
         0f:10:82:ea:7f:31:3d:44:7d:55:34:4d:a1:e3:ed:eb:35:d2:
         b9:76:04:66:2d:27:a6:12:5e:37:48:36:da:af:52:42:17:e4:
         27:a1:0e:88:8c:3e:8d:9b:6b:cb:8a:9a:fc:e8:25:ad:71:d4:
         40:05:80:14:88:1b:03:b3:dd:89:38:73:ac:76:8a:cf:60:39:
         d1:07:39:b4:fa:20:ff:b6:da:af:49:09:9c:73:76:6e:16:f2:
         da:e6:fd:ae:90:eb:ad:12:a2:cb:72:6f:3b:b8:c8:bc:3a:f0:
         d3:7f:5c:d7:e4:07:f3:65:4c:ae:5d:1d:fc:bd:0a:d2:31:40:
         38:f4:ad:97
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjk3OTAxMTAvBgNVBAUTKDg5NDI4OUFENDBFRTdFNjI2RjVDRDgyRkNFQzU0MDZE
QjkxRTFFNzEwHhcNMjUxMjA1MDM0MzE1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMyNTRkMy1hMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArtwVJye/vLuRMDPgL1Sh65hWRYGeQKQGerJV3Ieetqtaryr7PfH/VdUvb3iy
p6D3Vv4NTeo9LbaLnhF6VRoCqdoJdUGuX1ChYomkUmPCfU7byCkj4cWsj9QOmwci
ocZs8fWdxJjIjSluu3oLBMxFnMhyBzKJy52AXclu3XWTOk5tJMD1cec3z2W7H5HX
0Hrl3JG78tO6awp68xaXOXUFNanVg+2IO09pUv3j+BvaGg5qrtb4psl9V3LoX6i5
0LyUK8Uba3ZkM1i9NOUQchL2DnSXrJUb99AfRuZZGymay37pe5HOwOofW3DLTOVZ
2tgKqdwShjSYUN9lJJdntLEanwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFC/Nymx5
TheNjrobT3GvOwBggg7yMB8GA1UdIwQYMBaAFIlCia1A7n5ib1zYL87FQG25Hh5x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTc5MC83MTgwNUJBQzVB
RTIxMUVGQUVCMDMxMkVDNEY5QUUwMi9pVUtKclVEdWZtSnZYTmd2enNWQWJia2VI
bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lVS0pyVUR1Zm1KdlhOZ3Z6c1ZBYmJrZUhuRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qjk3OTAvNzE4MDVCQUM1QUUyMTFFRkFFQjAzMTJFQzRGOUFFMDIvOUVDM0RBMENB
QkMzMTFGMEI1QzU1ODNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnx/QDBALLUhwwDQYJKoZIhvcNAQELBQADggEBAK+L27Xh
m5HdlUgiw9Jy6P7BENJfdHXnYSBvk15+jVzus2kDtrY45nHlPzEThjjOCxmMw4jq
EPr4EP/pzXyEDab7aGJDSTcwLC432l3EthvaW/6J+zrFDyA51rNiSwZCsiBTDPLt
56/yi6A1rfd5Tn2z47qtYcuXTcOJ+5DyEQ8Qgup/MT1EfVU0TaHj7es10rl2BGYt
J6YSXjdINtqvUkIX5CehDoiMPo2ba8uKmvzoJa1x1EAFgBSIGwOz3Yk4c6x2is9g
OdEHObT6IP+22q9JCZxzdm4W8trm/a6Q660Sostybzu4yLw68NN/XNfkB/NlTK5d
Hfy9CtIxQDj0rZc=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:43:06 2025 by rpki-client