This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/5A387584756311EEA256FD57C4F9AE02.roa
File:                     5A387584756311EEA256FD57C4F9AE02.roa (raw, json)
Hash identifier:          WlVbAYT9fiHzzxm704tgTYSSn+rIKNtEXDFFKehNTaE=
Subject key identifier:   09:AC:EB:F0:BC:9A:5E:3D:AB:A7:9A:73:02:F9:FF:1B:CC:A1:3A:BC
Certificate issuer:       /CN=A91BB921/serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B
Certificate serial:       018E
Authority key identifier: 08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/5A387584756311EEA256FD57C4F9AE02.roa
Signing time:             Wed 03 Dec 2025 02:33:00 +0000
ROA not before:           Wed 03 Dec 2025 02:33:00 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     147056
IP address blocks:        103.173.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl
                          rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB921, serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B
        Validity
            Not Before: Dec  3 02:33:00 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=692fa15c-150c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e2:6b:9d:ba:b7:77:f6:49:68:33:8e:eb:2b:
                    53:a8:a6:06:1c:96:31:9f:3c:eb:bb:f4:e0:2f:bb:
                    89:95:54:e6:9b:34:0f:d8:e8:d6:bc:76:85:d7:cf:
                    18:83:27:42:3e:a4:b3:19:73:c4:15:13:82:19:c1:
                    69:a2:85:e7:45:c5:0f:77:a5:49:b0:92:f1:d0:39:
                    43:ba:7a:7a:67:29:ee:30:37:56:3d:2a:a5:08:9b:
                    7e:5c:f7:a2:75:27:75:4a:b9:4f:6e:26:ad:67:d4:
                    e0:38:85:18:ba:56:dc:26:58:17:05:32:eb:77:84:
                    1a:05:10:3e:c3:60:8e:3e:b1:32:e4:25:fd:ea:5d:
                    72:57:68:75:5d:1f:ba:fc:93:2a:60:13:65:fe:2e:
                    fd:0e:2d:8c:c4:3d:d2:c0:40:5c:c4:b2:85:91:97:
                    e4:60:39:cd:e2:d9:5d:55:42:9e:05:b7:ad:61:75:
                    e5:40:de:3f:dc:f0:6d:de:4e:db:a1:bd:9e:7c:6e:
                    ca:aa:dc:2a:8e:87:28:28:11:ae:06:d1:3d:fa:61:
                    80:6f:a6:ff:fa:a4:bc:47:04:bd:93:94:a3:19:8a:
                    bc:91:01:e6:95:73:9e:35:f8:07:3c:9f:e1:1c:6f:
                    a2:79:9a:34:86:8f:52:0f:9c:f5:9d:e0:13:13:1c:
                    83:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AC:EB:F0:BC:9A:5E:3D:AB:A7:9A:73:02:F9:FF:1B:CC:A1:3A:BC
            X509v3 Authority Key Identifier:
                keyid:08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/5A387584756311EEA256FD57C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:5b:98:16:dc:86:23:6f:b7:fd:b9:fc:9e:76:d0:cb:1e:68:
         59:b5:a5:e0:4e:44:53:55:36:25:b1:7d:13:35:45:80:b8:bf:
         a0:05:69:6c:24:5e:9d:5a:b0:e6:ef:6c:f8:02:c8:9f:00:2e:
         fd:33:d8:c8:00:87:4e:6e:e0:fb:1b:31:0f:22:d1:e7:49:16:
         40:6b:8a:90:41:3b:0e:c0:30:e6:02:2e:e7:ea:15:80:fb:2c:
         79:67:b0:3f:52:eb:8b:50:9e:60:a1:c6:ab:62:30:ed:ff:1b:
         98:8d:f4:8a:6c:e4:aa:3c:4f:1a:f8:aa:e5:62:c3:b0:3a:83:
         a9:39:e8:1b:d4:53:ae:df:29:8f:1e:3b:7e:04:24:49:79:02:
         a4:21:60:b6:80:49:e3:2c:66:87:a0:e5:c5:2a:7f:9f:48:10:
         cb:37:45:8e:d3:4f:56:81:6b:e9:ff:bb:70:0c:40:63:cb:2d:
         31:80:17:b6:a9:d2:cc:7c:5f:db:7e:f3:fd:85:1f:61:36:5d:
         b0:ba:4b:82:90:13:9c:a4:b8:4c:21:81:bb:fe:e9:15:3b:36:
         4e:ae:9c:55:95:50:62:41:c3:c8:e4:e6:bc:47:fa:05:30:01:
         ba:05:c7:b5:1f:f2:2b:71:e8:06:1e:c8:b6:3e:f2:c8:00:43:
         c4:c2:d9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:50 2025 by rpki-client