This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/F2FD03E4CB3211F08B73F33CC4F9AE02.roa
File:                     F2FD03E4CB3211F08B73F33CC4F9AE02.roa (raw, json)
Hash identifier:          eafs/wPS9m35JWCg2L50cH9A4hVIgy6eQW+XBulFt7U=
Subject key identifier:   BE:C1:8A:9F:FB:3A:47:E4:0F:1B:C8:2F:5D:6F:FF:AF:E6:F5:41:FD
Certificate issuer:       /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Certificate serial:       02D3
Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/F2FD03E4CB3211F08B73F33CC4F9AE02.roa
Signing time:             Fri 28 Nov 2025 20:15:37 +0000
ROA not before:           Fri 28 Nov 2025 20:15:37 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     142618
IP address blocks:        103.111.38.0/24 maxlen: 24
                          103.111.39.0/24 maxlen: 24
                          2402:3b60::/32 maxlen: 32
                          2402:3b60::/48 maxlen: 48
                          2402:3b60:30::/48 maxlen: 48
                          2402:3b60:31::/48 maxlen: 48
                          2402:3b60:32::/48 maxlen: 48
                          2402:3b60:33::/48 maxlen: 48
                          2402:3b60:34::/48 maxlen: 48
                          2402:3b60:35::/48 maxlen: 48
                          2402:3b60:36::/48 maxlen: 48
                          2402:3b60:37::/48 maxlen: 48
                          2402:3b60:38::/48 maxlen: 48
                          2402:3b60:39::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
                          rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
        Validity
            Not Before: Nov 28 20:15:37 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=692a02e9-86ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:28:da:aa:6a:f2:da:1c:1f:30:bc:ae:d0:f9:
                    df:02:0b:f3:c3:99:d6:54:8f:fd:26:f8:cf:1b:60:
                    0f:43:ef:e5:65:67:32:49:29:43:c0:a5:e0:5f:b1:
                    d0:85:90:68:37:60:5b:b8:e4:3d:50:7d:10:c4:9b:
                    64:83:5f:a3:43:c8:d4:b0:f9:bf:e1:d4:64:f6:14:
                    ca:36:dd:81:81:47:df:83:67:1e:1d:dd:54:94:dc:
                    dc:d1:d7:db:c1:0e:f0:3b:0f:e8:8c:fd:1d:95:2c:
                    d9:6a:0d:a9:24:68:5d:31:cd:34:a9:a1:28:fb:fc:
                    1f:74:f7:c5:f9:ed:7a:b9:7e:b5:df:a9:4f:7a:f0:
                    b9:8e:53:4a:31:dd:95:02:45:ee:e3:14:4e:40:78:
                    54:76:8b:1a:6d:d6:e1:c0:b5:80:41:4f:f9:f5:56:
                    3d:82:98:21:88:5d:b0:9e:67:f9:13:a1:9f:cb:6c:
                    f9:86:c8:d7:45:51:c7:1c:27:62:a5:28:c3:9e:28:
                    01:5e:75:f9:32:8d:86:4d:85:f0:4d:56:1a:44:9b:
                    5d:7b:c1:49:f3:34:16:da:ef:01:52:26:aa:dc:fe:
                    82:29:3b:6c:03:1e:c4:66:81:b5:ff:cb:ac:04:49:
                    28:fc:1a:af:d1:62:a1:7d:99:0b:e5:83:93:23:91:
                    a6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C1:8A:9F:FB:3A:47:E4:0F:1B:C8:2F:5D:6F:FF:AF:E6:F5:41:FD
            X509v3 Authority Key Identifier:
                keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/F2FD03E4CB3211F08B73F33CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.38.0/23
                IPv6:
                  2402:3b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:e1:d3:5b:26:ab:fe:35:6b:bc:5f:cf:2d:48:c3:11:15:0b:
         d9:f6:54:70:2b:fc:bd:e7:48:e9:41:77:8a:58:90:df:23:8d:
         84:ff:17:ff:09:1a:7b:ad:75:bc:db:f9:53:c5:02:7e:31:67:
         24:e2:e4:62:03:47:3d:d9:6f:03:37:cd:0d:25:d0:34:0f:da:
         96:d0:36:79:46:9a:8f:48:bc:1e:51:00:af:70:a5:3a:88:83:
         9e:15:4d:e4:27:1e:58:47:f1:e7:e5:32:e1:b3:52:a8:00:d0:
         f4:33:82:fc:01:ad:f2:79:d4:f0:ae:26:5a:51:68:1d:91:10:
         23:a6:b7:7e:3f:22:c4:57:9d:4f:b4:0a:97:be:0f:11:3d:75:
         be:82:67:0a:2b:d1:de:3a:5f:63:77:f3:6c:09:7f:16:44:10:
         7b:52:c5:a5:47:0f:1f:f1:78:82:ba:e0:3f:29:d8:67:db:ea:
         c7:74:ff:3c:b1:70:cc:95:84:bc:21:9d:fe:71:17:78:52:30:
         f6:a7:d2:7c:70:af:e5:34:60:0c:41:9e:80:5b:d0:bb:7c:d0:
         00:a5:76:43:cf:6a:d4:97:a8:b1:6c:d3:fb:82:a7:9e:57:42:
         f6:a0:4d:d5:eb:a3:6d:6d:db:00:54:0f:e7:e5:6c:13:23:f0:
         cd:83:31:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:29:52 2025 by rpki-client