This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/A1D678CACD1D11EEBBCDB72BC4F9AE02.roa
File:                     A1D678CACD1D11EEBBCDB72BC4F9AE02.roa (raw, json)
Hash identifier:          zemkN5BROCdSUhbupRjiSnNtwcSlinI7FQCHVicj5PI=
Subject key identifier:   44:87:1A:12:B1:E3:76:6D:18:EC:70:AB:98:5C:F3:27:E5:DC:08:56
Certificate issuer:       /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Certificate serial:       0826
Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/A1D678CACD1D11EEBBCDB72BC4F9AE02.roa
Signing time:             Fri 14 Nov 2025 20:11:07 +0000
ROA not before:           Fri 14 Nov 2025 20:11:06 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141226
IP address blocks:        103.5.108.0/22 maxlen: 24
                          103.156.192.0/23 maxlen: 24
                          163.47.188.0/22 maxlen: 24
                          202.36.209.0/24 maxlen: 24
                          2407:c9c0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
                          rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2086 (0x826)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
        Validity
            Not Before: Nov 14 20:11:06 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69178cda-c260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:41:bf:fd:5e:53:c2:20:b6:c8:a1:7e:cd:
                    d9:d4:2e:6f:8e:9c:ce:d2:5a:20:0a:79:6f:04:d1:
                    53:df:3a:c8:68:32:ea:68:8e:89:0e:08:42:4c:c4:
                    48:85:f0:25:3d:52:00:e4:70:52:d8:43:7e:02:8c:
                    12:4c:59:3f:6a:65:e7:66:e0:1e:42:fa:fa:70:ce:
                    a7:dd:0e:66:a6:f2:e4:f0:3c:84:36:22:e9:48:9f:
                    d9:3a:f2:d1:fa:86:63:56:af:6d:6f:39:8a:05:22:
                    e9:95:76:61:d0:3d:44:0d:fc:4f:25:4e:94:d0:14:
                    ef:25:77:13:ec:d0:7f:33:fe:08:f8:24:09:f2:93:
                    f9:75:6e:6f:8d:ed:c5:3e:3a:b9:39:97:2d:6c:a6:
                    f0:9c:cc:45:38:92:57:c0:e2:4e:a3:11:73:5e:c2:
                    7f:27:f7:5f:a4:f5:e3:72:79:f2:0c:5b:0c:4b:88:
                    ca:d5:de:e8:0c:e0:63:5b:4f:0c:23:30:a5:62:e4:
                    79:c7:24:0c:0e:2e:61:ea:46:1a:0f:28:bc:04:cb:
                    31:22:cd:12:69:0d:f7:e4:23:2f:e8:85:95:e0:65:
                    5d:d0:da:f4:e8:cb:06:6e:05:14:69:81:70:75:cd:
                    63:2b:44:39:4a:6e:60:91:b1:fd:c3:13:77:82:b3:
                    a4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:87:1A:12:B1:E3:76:6D:18:EC:70:AB:98:5C:F3:27:E5:DC:08:56
            X509v3 Authority Key Identifier:
                keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/A1D678CACD1D11EEBBCDB72BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.108.0/22
                  103.156.192.0/23
                  163.47.188.0/22
                  202.36.209.0/24
                IPv6:
                  2407:c9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:89:9a:e3:bc:58:fc:00:31:49:bb:04:bb:de:2a:5d:d8:d4:
         08:de:2d:f9:71:ae:38:10:01:3f:62:89:d0:71:bc:cc:6a:06:
         06:62:5c:9e:fa:2e:07:1e:9f:f5:30:b8:a4:9c:89:43:42:78:
         8b:15:e2:a2:6d:fb:af:c6:47:be:43:61:3a:da:cc:19:d7:b3:
         34:98:fb:f4:48:5f:5e:f6:3d:da:e7:48:28:11:ef:44:cf:5d:
         6b:d2:c3:e9:8f:1f:46:30:32:0f:11:91:58:1d:aa:14:df:af:
         ba:55:6c:05:58:a4:a6:25:69:96:5b:ed:77:ff:94:64:c0:d7:
         b4:ed:d9:ad:51:9e:17:a6:7c:b3:32:6b:68:c2:94:47:e7:6f:
         3f:cf:79:12:f1:de:d5:40:07:43:42:d6:92:bb:92:15:85:cc:
         c8:c4:f3:cc:ff:8e:48:c4:35:0a:a0:a1:65:28:bf:4b:29:68:
         9d:81:92:30:be:3d:5c:13:4d:34:e4:c8:3b:04:f3:aa:7f:df:
         48:9f:b3:c7:8e:1a:5d:c7:a6:0c:fe:df:0a:dd:51:57:eb:a1:
         b2:93:2a:15:aa:1d:63:86:3e:0f:e0:fa:fa:b4:51:6d:0b:09:
         7c:75:2a:59:89:a7:20:11:21:73:21:8c:be:2f:cb:bd:8e:a3:
         f3:31:15:b0
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICCCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkY4QzMxMTAvBgNVBAUTKDZBNERCQkEzNkQ0Qzc2N0Q1QkQ3MkI2RUU5NzBBODAw
MEZDNTQ5NUUwHhcNMjUxMTE0MjAxMTA2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTE3OGNkYS1jMjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1nRBv/1eU8Igtsihfs3Z1C5vjpzO0logCnlvBNFT3zrIaDLqaI6JDghCTMRI
hfAlPVIA5HBS2EN+AowSTFk/amXnZuAeQvr6cM6n3Q5mpvLk8DyENiLpSJ/ZOvLR
+oZjVq9tbzmKBSLplXZh0D1EDfxPJU6U0BTvJXcT7NB/M/4I+CQJ8pP5dW5vje3F
Pjq5OZctbKbwnMxFOJJXwOJOoxFzXsJ/J/dfpPXjcnnyDFsMS4jK1d7oDOBjW08M
IzClYuR5xyQMDi5h6kYaDyi8BMsxIs0SaQ335CMv6IWV4GVd0Nr06MsGbgUUaYFw
dc1jK0Q5Sm5gkbH9wxN3grOkqwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFESHGhKx
43ZtGOxwq5hc8yfl3AhWMB8GA1UdIwQYMBaAFGpNu6NtTHZ9W9crbulwqAAPxUle
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhDMy9EMEUzM0ZBNDAy
QzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRuMWIxeXR1NlhDb0FBX0ZT
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FrMjdvMjFNZG4xYjF5dHU2WENvQUFfRlNWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkY4QzMvRDBFMzNGQTQwMkMzMTFFQjhBREMzMjM4QzRGOUFFMDIvQTFENjc4Q0FD
RDFEMTFFRUJCQ0RCNzJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E
MTAvMB4EAgABMBgDBAJnBWwDBAFnnMADBAKjL7wDBADKJNEwDQQCAAIwBwMFACQH
ycAwDQYJKoZIhvcNAQELBQADggEBABqJmuO8WPwAMUm7BLveKl3Y1AjeLflxrjgQ
AT9iidBxvMxqBgZiXJ76Lgcen/UwuKSciUNCeIsV4qJt+6/GR75DYTrazBnXszSY
+/RIX172PdrnSCgR70TPXWvSw+mPH0YwMg8RkVgdqhTfr7pVbAVYpKYlaZZb7Xf/
lGTA17Tt2a1RnhemfLMya2jClEfnbz/PeRLx3tVAB0NC1pK7khWFzMjE88z/jkjE
NQqgoWUov0spaJ2BkjC+PVwTTTTkyDsE86p/30ifs8eOGl3Hpgz+3wrdUVfrobKT
KhWqHWOGPg/g+vq0UW0LCXx1KlmJpyARIXMhjL4vy72Oo/MxFbA=
-----END CERTIFICATE-----
Generated at Sun Dec 7 15:55:23 2025 by rpki-client