This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/82C388B8492511EAB59F4F6EC4F9AE02.roa
File:                     82C388B8492511EAB59F4F6EC4F9AE02.roa (raw, json)
Hash identifier:          6puo5654uIKkHM+m/KHN4NrZ20YMvKyYbtg3n+CoQPA=
Subject key identifier:   75:FF:AC:4D:60:DA:BC:77:30:9C:17:EC:44:0F:AF:4D:78:35:55:F3
Certificate issuer:       /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE
Certificate serial:       0B4D
Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/82C388B8492511EAB59F4F6EC4F9AE02.roa
Signing time:             Wed 26 Nov 2025 18:39:20 +0000
ROA not before:           Wed 26 Nov 2025 18:39:20 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     45164
IP address blocks:        202.36.163.0/24 maxlen: 24
                          202.49.72.0/22 maxlen: 22
                          202.49.72.0/24 maxlen: 24
                          202.49.73.0/24 maxlen: 24
                          202.49.74.0/24 maxlen: 24
                          202.49.75.0/24 maxlen: 24
                          2001:df5:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl
                          rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2893 (0xb4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE
        Validity
            Not Before: Nov 26 18:39:20 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69274957-00da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8b:18:83:38:d4:98:d9:d1:d5:d7:e3:c3:e4:
                    53:08:d2:86:09:c9:03:19:51:6a:b8:1a:9b:f2:e9:
                    fe:d5:df:ad:a8:ad:d2:1c:d2:a0:d9:91:5f:98:45:
                    77:1a:b0:82:d5:dd:91:03:27:76:ca:ea:fe:6a:e4:
                    ef:bb:09:c5:ac:e4:8e:8b:af:bb:14:13:c5:73:14:
                    e2:21:e1:91:78:f8:ec:47:d6:a4:17:7d:8f:c1:af:
                    b9:28:40:29:00:9b:8f:d7:0c:35:4e:9a:4f:25:05:
                    55:07:1e:71:ba:4b:d2:8a:28:5b:e9:46:b6:4c:29:
                    62:25:1f:58:82:9e:2f:bc:2a:48:8c:12:d4:90:0b:
                    ab:79:81:ea:15:4e:03:0b:1f:c1:87:51:f7:ef:cf:
                    96:48:3d:31:23:86:98:21:7f:b0:71:76:93:eb:62:
                    40:56:ea:fb:fb:a7:4a:26:a3:82:ff:b9:7a:83:1e:
                    f5:69:74:b8:1a:d3:8f:e9:92:c8:01:cd:5d:32:6c:
                    80:3e:1c:39:b1:ea:0c:08:6b:3b:7b:86:5e:38:e7:
                    aa:65:6c:35:a5:c7:91:6c:56:f4:54:3e:d0:13:2e:
                    25:e6:47:a3:89:6a:99:a2:34:52:f8:6c:f4:61:d4:
                    8d:19:96:76:6b:96:ca:d4:1b:dc:e4:d1:6b:55:cf:
                    58:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FF:AC:4D:60:DA:BC:77:30:9C:17:EC:44:0F:AF:4D:78:35:55:F3
            X509v3 Authority Key Identifier:
                keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/82C388B8492511EAB59F4F6EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.36.163.0/24
                  202.49.72.0/22
                IPv6:
                  2001:df5:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:8e:2d:8c:9d:6f:08:de:09:9c:88:3a:15:b7:69:04:46:93:
         f0:dd:5d:20:7b:5a:f0:b8:44:94:7d:43:fc:b6:8c:eb:32:f4:
         8c:ab:fd:b6:5d:2c:aa:57:49:ae:22:6c:a1:9e:f9:78:85:61:
         1b:bd:ce:88:0b:33:0a:eb:03:f6:00:03:7a:fc:4f:79:55:b7:
         85:04:73:f6:98:c8:92:96:c8:78:fd:f3:14:f2:3f:e8:34:29:
         ce:bd:51:d1:d4:db:d3:3f:52:82:a1:f4:84:9a:c8:aa:23:2b:
         b8:0b:92:ac:61:f2:27:d3:41:af:a7:20:16:19:4b:31:48:53:
         8f:07:99:0b:1b:80:46:37:c0:2a:38:2c:19:01:b0:0d:36:c2:
         90:40:36:11:60:51:55:16:3c:c3:c3:bb:73:a5:88:9d:fe:c2:
         b4:7d:20:42:db:e1:95:83:fa:ae:bb:34:ba:5d:0c:2c:64:78:
         02:ee:db:93:94:4f:ed:90:40:6b:87:0f:7d:fb:3d:43:f3:87:
         b3:2a:2d:64:3e:d8:2e:71:15:31:1b:a8:2d:61:28:63:37:48:
         82:c4:0c:4d:9b:ff:82:c6:69:79:c0:7c:28:27:75:a0:a1:60:
         29:a5:45:d8:1a:c4:cf:1e:13:2f:c6:af:b7:65:ef:02:43:03:
         5f:2b:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:34:40 2025 by rpki-client