This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/DE524D283F0511EBBB4C174FC4F9AE02.roa
File:                     DE524D283F0511EBBB4C174FC4F9AE02.roa (raw, json)
Hash identifier:          9y2PLOoP6HTZK+GgN3HIiVDUhJfC7wKwjv4WwTdzxQs=
Subject key identifier:   5B:9B:26:D5:58:53:44:64:91:E0:F9:1B:56:6B:BC:19:66:D0:46:1B
Certificate issuer:       /CN=A91C8BEE/serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98
Certificate serial:       0769
Authority key identifier: 69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/DE524D283F0511EBBB4C174FC4F9AE02.roa
Signing time:             Tue 18 Nov 2025 20:42:40 +0000
ROA not before:           Tue 18 Nov 2025 20:42:40 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139347
IP address blocks:        103.157.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl
                          rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1897 (0x769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8BEE, serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98
        Validity
            Not Before: Nov 18 20:42:40 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691cda40-02c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f1:9f:ac:16:86:6c:fa:32:91:ae:9f:69:54:
                    ae:d5:d1:a4:13:cd:f3:23:8e:a1:8f:a8:05:a0:43:
                    4b:b2:0a:0c:a6:ac:7b:25:cf:68:fc:20:78:3b:f6:
                    cb:d3:4a:17:be:f4:b7:47:15:7c:2b:22:eb:cd:d2:
                    2a:de:2f:bf:c4:09:42:02:e1:c4:a5:7a:e7:7b:e1:
                    01:16:1c:18:14:dc:42:0f:54:c4:d6:98:3b:8b:15:
                    c9:59:91:b4:ea:96:75:8e:fd:47:4f:6a:51:09:d3:
                    83:81:15:5e:16:34:bd:0a:26:53:c2:89:28:fa:5d:
                    25:8a:63:a4:4d:3e:99:93:e9:05:4f:8f:f5:4c:a0:
                    e2:dd:d5:86:07:f8:a0:a8:c2:e1:3b:8d:e4:b2:0b:
                    f5:fb:ae:33:d7:ff:1a:0d:d4:37:3d:42:40:06:d4:
                    6f:67:97:69:60:d8:44:b4:30:0f:c7:64:bd:e8:01:
                    1d:ba:92:d0:32:09:ee:80:b6:ff:a2:0b:e6:1f:d0:
                    1a:5d:9a:98:08:e2:cb:71:48:b4:2f:c4:33:46:3f:
                    86:8f:9d:51:42:ec:9b:19:08:a7:4f:7d:5e:38:9d:
                    d4:5e:af:c0:00:40:bc:a8:18:29:86:90:88:2d:20:
                    75:dc:6c:b4:f3:b9:28:53:28:43:ab:ae:3f:10:f2:
                    18:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9B:26:D5:58:53:44:64:91:E0:F9:1B:56:6B:BC:19:66:D0:46:1B
            X509v3 Authority Key Identifier:
                keyid:69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/DE524D283F0511EBBB4C174FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:10:b1:71:52:71:8c:b9:60:d3:ec:ac:fc:90:e5:70:c4:bc:
         ee:fa:36:cd:25:f5:3d:6c:d1:91:c0:38:76:bd:56:22:65:55:
         37:c9:3a:89:20:b8:14:00:ac:27:46:a5:7d:8c:b9:0b:b2:4e:
         66:ad:47:01:95:e9:91:e1:1c:38:4c:e4:57:72:b7:b0:2d:9b:
         ad:07:e5:5b:87:cc:71:47:5c:14:94:61:be:51:00:d1:2b:3d:
         15:d0:08:95:00:27:80:f4:c3:f7:a0:e5:5a:55:72:f7:0a:a1:
         e2:68:8a:30:d3:a1:3c:7c:6f:78:e8:29:db:b8:7a:ed:bd:af:
         a4:fc:af:3c:87:09:25:bf:ec:d6:60:8e:e4:86:f4:03:38:2e:
         a7:37:08:4b:8d:2e:84:3a:8d:59:43:dd:a6:60:e0:c6:7b:fb:
         94:57:e8:9b:21:3a:63:fe:29:8a:f2:bd:66:53:48:2c:e8:5a:
         2b:28:14:43:61:f9:28:1b:c0:50:03:2e:1e:c9:59:7b:88:80:
         c1:58:f3:78:1d:c4:17:10:f0:43:e1:e9:9c:be:66:c2:30:b3:
         0b:11:16:2f:6c:67:c9:c1:d5:e9:0d:ab:f5:61:39:f5:2e:6b:
         ef:61:78:57:70:d0:c6:8a:80:dd:93:88:3b:4e:b7:84:bf:50:
         de:6c:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:32:12 2025 by rpki-client