This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/57CB703EBCED11F0A3B2C039C4F9AE02.roa
File:                     57CB703EBCED11F0A3B2C039C4F9AE02.roa (raw, json)
Hash identifier:          MH6wsYDU+7B4vBy0zb2eprwe8/XNCjBzLMel9f7LB3Q=
Subject key identifier:   45:57:57:CA:F5:31:60:E7:C9:4E:C2:6C:CE:E0:F9:93:86:E4:31:62
Certificate issuer:       /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
Certificate serial:       01E2
Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/57CB703EBCED11F0A3B2C039C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 21:53:22 +0000
ROA not before:           Sat 08 Nov 2025 21:53:22 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     140499
IP address blocks:        103.130.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl
                          rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0E6A, serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
        Validity
            Not Before: Nov  8 21:53:22 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=690fbbd1-909a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:be:26:61:4f:ac:b3:03:c1:48:b4:09:17:
                    e2:23:12:d1:4c:01:e3:5e:6d:15:13:0e:1f:0c:6c:
                    cc:21:0b:c5:d3:8b:de:29:4d:ce:57:47:10:91:64:
                    34:19:05:78:4e:89:54:43:aa:1d:6b:39:b7:ac:d2:
                    51:d5:de:92:25:37:6d:3f:09:8d:33:44:87:03:2e:
                    1d:1b:cd:64:fb:5d:34:bf:2c:35:c8:ff:fc:dc:dd:
                    51:ab:d7:84:5c:a4:69:82:af:dd:c4:29:8e:a9:45:
                    13:56:a3:c9:8c:e3:5b:f1:9c:6b:95:e3:8c:38:5f:
                    e0:86:4f:f3:93:ea:6d:07:b6:97:a5:76:cc:e9:a2:
                    b5:b6:17:be:fd:1b:62:3f:30:92:59:da:c6:d2:14:
                    01:1f:85:cb:f0:4c:d5:80:13:86:09:66:0b:9a:2d:
                    6f:b3:3b:a7:d3:4b:12:22:a4:77:4e:5b:57:5d:37:
                    03:fe:40:76:89:19:05:2a:ac:09:d1:d8:4d:c1:6c:
                    73:f7:b7:79:3c:fd:9b:e3:4f:25:dd:06:4b:b4:3c:
                    43:ec:25:b1:a1:bf:1f:93:2c:21:d9:d6:98:19:c1:
                    94:e9:1c:04:b1:db:cc:8a:b2:bd:97:31:9c:07:65:
                    04:58:ab:82:ac:0b:38:43:5d:5e:e2:d0:ed:a0:d3:
                    3a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:57:57:CA:F5:31:60:E7:C9:4E:C2:6C:CE:E0:F9:93:86:E4:31:62
            X509v3 Authority Key Identifier:
                keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/57CB703EBCED11F0A3B2C039C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:6b:01:8b:33:f4:fa:b7:26:6e:df:1b:93:c1:26:db:9a:a1:
         c7:28:5a:5a:de:ec:51:70:94:18:fe:a8:b1:5c:38:17:04:8f:
         28:9e:85:8a:6d:c8:2c:f8:c8:07:7c:97:66:73:b5:61:64:ca:
         a3:e6:94:03:d4:6c:be:47:df:69:9c:e1:ab:65:f5:46:d9:96:
         aa:5e:3e:32:7c:5d:cb:e0:f4:8f:af:bf:da:76:23:3d:f3:d2:
         56:dc:ca:ac:dd:66:87:78:00:36:41:52:dd:2c:b6:c4:97:01:
         39:bf:23:58:cc:1e:ca:45:eb:13:d3:f3:fe:48:7f:7d:69:bb:
         e4:30:33:9b:86:b1:33:08:9d:6e:93:93:d7:b1:b1:a3:46:fd:
         33:26:b3:69:93:9f:81:7b:7c:83:9c:48:e5:0c:e9:53:87:ab:
         a4:f0:97:21:5e:26:c1:17:8f:01:ed:b7:9d:2e:74:67:38:23:
         5d:53:e5:fa:fa:3c:0c:b1:34:b3:cf:ab:49:c1:2b:44:9e:91:
         1a:2d:a6:af:2f:8e:2b:0c:7a:4f:03:d8:b5:11:33:0d:5a:4b:
         2a:15:c5:53:26:61:70:30:b7:dd:25:f5:3c:9f:f7:41:91:fd:
         ba:41:eb:5b:78:af:e7:fa:63:c3:fc:92:dd:92:59:85:6c:a6:
         37:84:c5:e7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBFNkExMTAvBgNVBAUTKEY1NDU5Q0JBMzFGOTMzRjkwNzNCNTE0QzlDQkJFQzM0
RjZFRDJFNEEwHhcNMjUxMTA4MjE1MzIyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OTBmYmJkMS05MDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsu6+JmFPrLMDwUi0CRfiIxLRTAHjXm0VEw4fDGzMIQvF04veKU3OV0cQkWQ0
GQV4TolUQ6odazm3rNJR1d6SJTdtPwmNM0SHAy4dG81k+100vyw1yP/83N1Rq9eE
XKRpgq/dxCmOqUUTVqPJjONb8ZxrleOMOF/ghk/zk+ptB7aXpXbM6aK1the+/Rti
PzCSWdrG0hQBH4XL8EzVgBOGCWYLmi1vszun00sSIqR3TltXXTcD/kB2iRkFKqwJ
0dhNwWxz97d5PP2b408l3QZLtDxD7CWxob8fkywh2daYGcGU6RwEsdvMirK9lzGc
B2UEWKuCrAs4Q11e4tDtoNM6yQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEVXV8r1
MWDnyU7CbM7g+ZOG5DFiMB8GA1UdIwQYMBaAFPVFnLox+TP5BztRTJy77DT27S5K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU2QS80QzI4MUJCRTEx
QTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1fa0hPMUZNbkx2c05QYnRM
a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlVV2N1akg1TV9rSE8xRk1uTHZzTlBidExrby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzBFNkEvNEMyODFCQkUxMUE2MTFFRUIzMzQ2OTI2QzRGOUFFMDIvNTdDQjcwM0VC
Q0VEMTFGMEEzQjJDMDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABngu8wDQYJKoZIhvcNAQELBQADggEBALRrAYsz9Pq3Jm7f
G5PBJtuaoccoWlre7FFwlBj+qLFcOBcEjyiehYptyCz4yAd8l2ZztWFkyqPmlAPU
bL5H32mc4atl9UbZlqpePjJ8Xcvg9I+vv9p2Iz3z0lbcyqzdZod4ADZBUt0stsSX
ATm/I1jMHspF6xPT8/5If31pu+QwM5uGsTMInW6Tk9exsaNG/TMms2mTn4F7fIOc
SOUM6VOHq6TwlyFeJsEXjwHtt50udGc4I11T5fr6PAyxNLPPq0nBK0SekRotpq8v
jisMek8D2LURMw1aSyoVxVMmYXAwt90l9Tyf90GR/bpB61t4r+f6Y8P8kt2SWYVs
pjeExec=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:14:14 2025 by rpki-client