This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/FF738C40C00311F08A308247C4F9AE02.roa
File:                     FF738C40C00311F08A308247C4F9AE02.roa (raw, json)
Hash identifier:          1Apw4AJ7fbg96hSH1vSGow4MtfZsaVvW6vsiE2l6l74=
Subject key identifier:   3F:26:CF:73:A5:06:4E:DE:B6:EB:82:0C:B9:C3:94:8D:A9:13:80:20
Certificate issuer:       /CN=A91C705E/serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1
Certificate serial:       031F
Authority key identifier: 83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/FF738C40C00311F08A308247C4F9AE02.roa
Signing time:             Wed 12 Nov 2025 23:46:13 +0000
ROA not before:           Wed 12 Nov 2025 23:46:13 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137967
IP address blocks:        103.190.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl
                          rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799 (0x31f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C705E, serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1
        Validity
            Not Before: Nov 12 23:46:13 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69151c45-dbfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ae:e8:ad:32:13:d8:4a:bd:34:57:7b:6b:2b:
                    ba:f5:05:e5:f5:49:ff:e3:fc:1a:08:96:82:5d:d0:
                    cc:1e:46:77:26:7b:a7:8f:6e:45:f7:bd:31:53:7a:
                    f9:1e:24:d6:46:e3:c4:93:94:f0:9d:1c:45:cc:21:
                    e4:ab:97:7f:0a:b9:8d:5a:e5:08:21:d9:68:a3:6c:
                    83:3f:37:27:70:3a:ac:a6:fd:45:d5:e0:0d:e6:9f:
                    09:36:2d:47:ec:45:14:97:7e:56:48:ad:c7:12:df:
                    8a:ea:1c:57:b8:39:20:34:37:32:2c:bb:49:6f:35:
                    56:c3:b2:fc:22:2d:0b:e2:e7:ba:41:c1:7b:07:81:
                    23:9e:7c:f0:4e:9a:26:0c:4b:9e:e8:44:14:ce:62:
                    97:2d:65:9c:1f:b7:c9:84:a2:3b:fa:5d:f6:da:af:
                    37:f9:5f:83:fd:86:4f:a7:26:c4:7e:8b:81:b8:b9:
                    68:00:d7:81:15:66:c4:c6:a4:30:29:ff:43:5b:5b:
                    dd:19:89:17:f6:24:b3:f0:23:56:0a:88:cc:c8:59:
                    25:9b:21:9b:f9:d2:8e:86:c5:c1:0b:18:c5:67:05:
                    68:06:db:cf:d7:3b:35:44:65:5a:04:f2:7c:c8:73:
                    d9:63:b2:fc:13:fe:65:ff:b2:62:bc:c5:fa:d8:2d:
                    90:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:26:CF:73:A5:06:4E:DE:B6:EB:82:0C:B9:C3:94:8D:A9:13:80:20
            X509v3 Authority Key Identifier:
                keyid:83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/FF738C40C00311F08A308247C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:9e:84:82:69:49:48:8b:be:09:a8:78:97:5c:46:ad:50:78:
         c8:e6:d9:6f:46:43:cd:5c:b5:6a:3c:6e:4e:77:3a:98:92:5f:
         95:53:e5:ef:77:ec:ae:8b:4f:2b:6f:b1:c6:eb:69:a5:61:6f:
         29:db:fd:e8:8d:43:47:28:45:97:85:a8:50:7b:bb:28:bf:b4:
         e5:84:30:4e:cc:20:19:a1:a4:c6:c9:64:4b:4e:f9:4b:c8:2f:
         4f:cd:29:c8:d3:a2:7f:dd:f4:e1:1e:07:db:7a:af:5e:c4:1a:
         63:92:f3:ef:8d:f4:96:2b:2e:f5:81:fa:af:f0:f0:84:9b:26:
         13:4b:65:cc:02:7e:2e:3f:92:2d:2b:4a:46:a2:40:da:f6:10:
         a2:ef:87:b6:44:af:bf:c0:22:55:09:5d:76:a1:60:ea:b6:80:
         09:ac:75:c7:9c:90:08:07:35:27:00:6f:54:49:61:e5:0b:fa:
         2e:94:c2:ed:9a:81:f9:0c:bd:84:64:d2:c1:0f:64:90:ac:71:
         02:fe:b2:17:ce:66:69:41:17:fa:d0:40:c8:db:95:f5:8a:33:
         61:61:eb:b9:51:67:f1:3d:2d:8f:5f:c6:5c:82:94:9d:a7:86:
         0d:ab:17:b5:80:8d:26:a5:90:03:01:b5:e6:64:30:d5:c8:4b:
         1e:90:bf:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:13:29 2025 by rpki-client