This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/03A57262CC8611EC8D238672C4F9AE02.roa
File:                     03A57262CC8611EC8D238672C4F9AE02.roa (raw, json)
Hash identifier:          9pNf0dwIuPczYfvhjcMKqy2b1PhaVhGL1FasXNfye9Y=
Subject key identifier:   FE:CA:A8:4C:0F:43:1B:05:9E:15:81:46:61:4D:85:CC:DF:4A:F1:4C
Certificate issuer:       /CN=A91C53EC/serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72
Certificate serial:       06B0
Authority key identifier: FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/03A57262CC8611EC8D238672C4F9AE02.roa
Signing time:             Wed 31 Dec 2025 22:18:45 +0000
ROA not before:           Wed 31 Dec 2025 22:18:45 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     136933
IP address blocks:        103.144.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl
                          rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1712 (0x6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C53EC, serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72
        Validity
            Not Before: Dec 31 22:18:45 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6955a145-945e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:02:9b:a9:a1:ce:54:5c:a4:69:83:8e:1a:23:
                    23:ee:75:8e:f0:e5:f3:32:c0:7d:b2:fe:9c:3b:b8:
                    0b:41:3f:d1:ce:bd:47:6c:ed:08:cb:7a:29:db:1f:
                    77:c5:a4:ec:d0:40:54:c2:fe:f3:6f:58:46:8e:4c:
                    fd:d5:fb:90:34:61:fd:8c:ad:0b:4c:74:84:40:53:
                    3e:7b:3e:c0:20:ad:7d:3d:8b:b7:60:6f:76:7f:ad:
                    d3:6f:9d:c1:2c:37:e0:16:4b:a4:8a:c8:0a:38:c3:
                    fd:c5:29:72:e6:39:d9:c1:1e:a3:2a:fb:f6:38:22:
                    9c:cb:b7:cb:3d:e1:9d:38:b7:f4:71:22:b9:15:b3:
                    26:b3:31:31:d9:1f:3f:44:88:62:31:dc:08:0a:1b:
                    9c:fc:68:8d:a2:f5:ac:2b:4d:31:e2:16:61:5b:79:
                    1c:ba:7c:52:02:ac:16:4f:67:e0:50:b5:29:5d:5f:
                    2f:87:c5:2f:ec:85:bf:f1:86:70:6a:d3:b4:0c:af:
                    96:fd:f7:fb:92:dd:2b:8f:aa:79:67:48:8b:d0:a4:
                    9f:80:67:10:66:75:b4:32:b0:a9:c0:db:f3:63:ba:
                    69:53:1b:f9:72:31:3d:ab:ee:c8:33:a9:ca:90:41:
                    db:22:21:97:81:fc:8c:df:73:8b:ad:2a:55:67:c6:
                    70:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CA:A8:4C:0F:43:1B:05:9E:15:81:46:61:4D:85:CC:DF:4A:F1:4C
            X509v3 Authority Key Identifier:
                keyid:FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/03A57262CC8611EC8D238672C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:c6:f9:45:a9:4d:76:55:07:70:75:6f:3e:09:cb:c4:75:ff:
         40:a4:a5:f9:b4:fb:f2:f9:09:47:02:60:ce:3e:44:5e:a4:81:
         43:2e:c4:2f:2a:bb:62:9b:fa:05:12:19:f9:f0:e7:bb:9d:19:
         ba:73:26:78:cd:c1:85:8d:9c:56:f4:cb:8d:b6:56:b4:50:87:
         dd:5e:b4:bb:1d:0c:33:f2:9b:1b:f5:d7:d7:ca:91:16:f8:2e:
         e2:c9:8c:9f:ea:6c:c4:4c:66:f9:f6:09:5d:d8:57:2f:ca:ee:
         8b:b1:e3:81:18:b1:d4:bf:6f:81:2b:a5:8b:5b:01:eb:39:50:
         61:d7:05:27:c4:5c:76:45:81:77:93:83:2a:01:0f:06:27:9e:
         93:90:77:1c:2a:63:c8:d8:bb:7d:86:50:8c:8e:ac:fc:fa:a1:
         4c:1f:7e:ef:3c:ba:9e:72:59:ba:74:94:13:01:36:ab:75:e3:
         d7:0d:72:f4:b4:52:01:9c:1c:1a:97:8e:b0:dd:2b:b7:b5:2d:
         e4:b5:d5:6c:8c:c1:d7:0c:f1:50:f1:6e:62:25:e8:23:3f:41:
         ef:38:2f:f0:13:92:c1:75:74:a0:76:97:bc:4f:31:7f:9e:42:
         5d:b1:1e:20:4f:c4:83:4d:a0:7c:95:63:d2:94:6d:7e:95:44:
         00:29:71:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:55 2026 by rpki-client