This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/25E05BFAE59911F08BE09E95496F56BC.roa
File:                     25E05BFAE59911F08BE09E95496F56BC.roa (raw, json)
Hash identifier:          2U1GEFtQb6N5UWQCPZfAqkeRTmL/nMptsXy7c4HqcW0=
Subject key identifier:   A8:60:74:61:A3:6A:5C:81:2C:6B:04:07:DC:BB:9F:A9:00:21:D7:40
Certificate issuer:       /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Certificate serial:       0550
Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/25E05BFAE59911F08BE09E95496F56BC.roa
Signing time:             Tue 30 Dec 2025 16:03:58 +0000
ROA not before:           Tue 30 Dec 2025 16:03:58 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     58821
IP address blocks:        103.134.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
                          rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1360 (0x550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
        Validity
            Not Before: Dec 30 16:03:58 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6953f7ed-eadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:b9:59:9c:ac:90:0f:0e:8c:53:57:9b:0a:
                    8c:48:82:5b:47:7c:af:dd:fc:e3:de:95:e9:e9:25:
                    4e:69:83:3c:27:c8:64:32:2a:ea:2f:67:13:9a:4b:
                    f9:fe:2d:2f:fd:7a:3f:93:e1:70:be:6c:02:8e:80:
                    6f:4b:e1:b7:79:07:4b:fe:2a:37:41:19:18:80:8f:
                    0b:7b:53:e2:91:db:b8:a8:1f:e5:50:3f:6b:83:05:
                    56:66:d3:b7:01:6b:a9:4b:18:23:c5:84:75:d6:20:
                    15:f5:c5:2c:c4:30:93:1b:8f:45:e1:e3:c4:58:21:
                    6a:a4:56:8f:31:92:3c:3c:4a:19:cb:7a:51:dd:f6:
                    4c:1e:54:1c:e8:5a:34:72:c5:3f:d5:c3:c4:5a:c3:
                    4b:50:a1:ee:f0:6f:86:8e:a7:91:56:31:8f:d2:d5:
                    c7:d6:fd:5d:18:a1:70:dc:e3:f9:76:e2:43:44:5e:
                    48:cd:83:07:20:1f:2a:47:fd:65:19:90:4b:83:b2:
                    08:ac:71:74:74:e4:e3:ef:8b:ac:78:3c:40:93:20:
                    bd:4e:74:51:04:33:0d:6f:e3:a3:e2:7c:95:e9:04:
                    9f:fd:55:df:e7:15:46:b5:5a:8a:72:7b:9c:56:57:
                    4d:dc:68:c0:a4:f0:9e:fd:86:40:79:70:36:77:9b:
                    4f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:60:74:61:A3:6A:5C:81:2C:6B:04:07:DC:BB:9F:A9:00:21:D7:40
            X509v3 Authority Key Identifier:
                keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/25E05BFAE59911F08BE09E95496F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:be:cd:18:ba:6c:58:2e:df:cc:5b:d8:5a:48:91:61:04:1a:
         e6:a3:b0:70:40:25:bc:4f:76:83:dd:4c:13:1a:c8:57:a3:9f:
         46:e6:b1:29:de:28:74:52:e6:81:6c:2a:d0:25:ec:f6:69:9c:
         22:e0:a2:85:9b:ad:63:70:b8:04:4c:9e:78:e7:cc:1e:fb:97:
         b9:98:e1:48:e4:2f:5a:dd:62:b5:c4:78:49:53:e6:db:25:bc:
         bf:01:d3:78:57:94:42:67:c4:7e:5b:d1:be:ee:0e:bb:16:05:
         12:71:6d:4e:00:47:70:62:cc:57:f5:a8:0d:72:10:c8:ae:07:
         c1:50:9f:58:1d:39:31:41:a8:95:8e:3e:a3:66:d6:16:0e:ca:
         7a:69:ba:8e:6b:a6:d9:9a:1c:37:77:b8:33:ae:29:21:61:50:
         6d:71:15:79:9f:a7:52:75:b6:61:50:b1:bd:9f:ff:a2:f6:c2:
         50:6d:98:da:94:84:e4:b6:1d:f9:5b:20:76:93:c3:f1:42:91:
         e4:c5:92:29:0e:a4:6f:9f:15:97:0a:83:65:34:b0:a7:c6:87:
         63:1f:60:d0:89:5b:d6:e2:be:7f:c3:4e:cd:e7:16:62:b4:c9:
         bd:2b:61:97:f2:ef:95:19:1c:a3:13:1f:fc:41:12:3d:73:45:
         0c:5f:56:3a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw
NzBDN0YzRUQwHhcNMjUxMjMwMTYwMzU4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTUzZjdlZC1lYWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuPC5WZyskA8OjFNXmwqMSIJbR3yv3fzj3pXp6SVOaYM8J8hkMirqL2cTmkv5
/i0v/Xo/k+FwvmwCjoBvS+G3eQdL/io3QRkYgI8Le1Pikdu4qB/lUD9rgwVWZtO3
AWupSxgjxYR11iAV9cUsxDCTG49F4ePEWCFqpFaPMZI8PEoZy3pR3fZMHlQc6Fo0
csU/1cPEWsNLUKHu8G+GjqeRVjGP0tXH1v1dGKFw3OP5duJDRF5IzYMHIB8qR/1l
GZBLg7IIrHF0dOTj74useDxAkyC9TnRRBDMNb+Oj4nyV6QSf/VXf5xVGtVqKcnuc
VldN3GjApPCe/YZAeXA2d5tPVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKhgdGGj
alyBLGsEB9y7n6kAIddAMB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy
MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4
LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzBDOUIvQTQ2RTk4OUEzMjJCMTFFQzk3RjhDRjdDQzRGOUFFMDIvMjVFMDVCRkFF
NTk5MTFGMDhCRTA5RTk1NDk2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnhkowDQYJKoZIhvcNAQELBQADggEBAFW+zRi6bFgu38xb
2FpIkWEEGuajsHBAJbxPdoPdTBMayFejn0bmsSneKHRS5oFsKtAl7PZpnCLgooWb
rWNwuARMnnjnzB77l7mY4UjkL1rdYrXEeElT5tslvL8B03hXlEJnxH5b0b7uDrsW
BRJxbU4AR3BizFf1qA1yEMiuB8FQn1gdOTFBqJWOPqNm1hYOynppuo5rptmaHDd3
uDOuKSFhUG1xFXmfp1J1tmFQsb2f/6L2wlBtmNqUhOS2HflbIHaTw/FCkeTFkikO
pG+fFZcKg2U0sKfGh2MfYNCJW9bivn/DTs3nFmK0yb0rYZfy75UZHKMTH/xBEj1z
RQxfVjo=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:54:38 2026 by rpki-client