This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/5CE70ACC074E11ED99CF6642C4F9AE02.roa
File:                     5CE70ACC074E11ED99CF6642C4F9AE02.roa (raw, json)
Hash identifier:          2ErCU/J+DpquU4qqc3TwXCkDxCXKfSH2bvg7aekBShk=
Subject key identifier:   E3:1A:1D:12:25:4B:86:3E:9A:DF:85:1A:1B:44:37:1F:6D:0A:06:8A
Certificate issuer:       /CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448
Certificate serial:       02E0
Authority key identifier: 02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/5CE70ACC074E11ED99CF6642C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 23:46:20 +0000
ROA not before:           Sat 08 Nov 2025 23:46:20 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     63843
IP address blocks:        103.41.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl
                          rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 23:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736 (0x2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA044, serialNumber=025AFE9195482049F25093EB898115C6BD371448
        Validity
            Not Before: Nov  8 23:46:20 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690fd64b-381a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e8:2c:b5:a3:2d:13:d8:ba:4f:a9:94:49:38:
                    da:d3:4d:35:16:89:d7:ff:cc:e1:1e:d7:1e:4d:fa:
                    6e:dc:ad:60:3c:81:a6:d2:eb:57:08:f0:e8:25:ab:
                    e3:cb:a1:9d:f3:25:fa:4c:f6:ac:22:13:e6:c5:70:
                    d1:83:ce:68:4b:6b:ef:c1:da:b1:e5:b6:ff:da:7b:
                    5c:ee:e0:d7:81:c8:6c:9b:26:3a:17:7e:53:3a:41:
                    da:34:5e:90:65:5d:dd:2f:ed:5e:50:71:1d:36:d7:
                    cc:20:ef:05:d2:3b:41:8f:ba:61:b6:ab:d1:fb:6f:
                    b6:58:2f:a7:26:22:e6:ce:a6:83:5d:18:cd:77:3a:
                    d3:b9:e4:d5:e9:61:2b:d1:28:b8:d8:a2:6a:bd:6e:
                    82:b8:e3:c2:98:5a:26:43:cb:d7:0c:d4:2e:7d:a3:
                    a0:e4:55:7c:91:03:a9:8b:20:20:e2:ef:4a:82:75:
                    a7:18:dd:cc:4f:65:46:c6:90:b2:a5:11:d3:f2:7a:
                    7d:41:61:cc:f3:76:e4:17:c8:74:d0:fb:94:c7:73:
                    83:5f:3f:5e:65:3a:82:31:de:d1:cd:1d:7a:b1:96:
                    9c:0d:3b:70:68:4c:15:b8:f1:a5:0d:72:cc:0f:64:
                    a6:48:50:db:81:d0:a2:67:80:f2:4a:4b:a5:0e:0c:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1A:1D:12:25:4B:86:3E:9A:DF:85:1A:1B:44:37:1F:6D:0A:06:8A
            X509v3 Authority Key Identifier:
                keyid:02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/5CE70ACC074E11ED99CF6642C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f3:3f:c3:6a:76:11:83:5d:be:9f:7d:97:ad:05:1e:ce:1c:
         57:36:bc:73:63:dc:77:ae:e3:88:af:c1:0e:fb:6f:c6:23:61:
         d7:56:de:50:c6:77:19:9c:c0:21:2f:0b:1a:14:4e:29:2c:b2:
         96:77:17:a8:46:76:80:d6:a5:59:03:5e:6e:a8:47:77:31:b3:
         d1:65:23:98:f2:d7:09:37:3e:d2:3b:df:d3:0c:a6:0c:81:e8:
         2e:f4:9b:a9:7f:39:ec:ae:d5:47:4b:a3:3c:42:9f:87:55:7e:
         eb:78:1a:b4:81:63:6e:56:93:99:22:3d:8d:69:d7:ec:e4:c7:
         58:3d:df:3f:49:65:eb:f6:12:67:f9:e0:1d:e8:74:16:95:89:
         60:50:b4:3f:9b:3e:61:60:7d:d5:de:a3:9f:89:49:39:2a:b2:
         11:aa:7e:4f:eb:d0:cb:44:03:36:28:39:58:8b:df:3e:32:ae:
         1f:77:ba:ff:a5:70:08:b2:0f:d1:96:fe:31:62:a6:ac:d8:90:
         a8:89:7b:56:e3:73:21:cf:4a:9d:21:24:12:29:4e:f5:fc:07:
         40:56:83:db:07:ec:00:29:ae:06:5f:75:50:d5:de:93:e8:f0:
         eb:7a:25:90:6f:1b:09:91:8e:1d:10:58:37:6c:64:33:e8:03:
         b0:63:f3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:45:38 2025 by rpki-client