This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/F1A4DAD6403211EEB47BF84AC4F9AE02.roa
File:                     F1A4DAD6403211EEB47BF84AC4F9AE02.roa (raw, json)
Hash identifier:          hCaEHcBdoIMMETd+9Y0USawajb5aMQdvIAqk8snhxdQ=
Subject key identifier:   63:38:64:A7:82:58:B4:4E:6A:30:8E:B1:29:16:EF:2D:C1:54:9B:7A
Certificate issuer:       /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial:       01BF
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/F1A4DAD6403211EEB47BF84AC4F9AE02.roa
Signing time:             Sun 21 Dec 2025 02:23:52 +0000
ROA not before:           Sun 21 Dec 2025 02:23:52 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     150683
IP address blocks:        103.255.66.0/24 maxlen: 24
                          103.255.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
                          rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
        Validity
            Not Before: Dec 21 02:23:52 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69475a38-b9e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:30:4a:c7:55:97:f6:a6:ea:ad:7d:41:3a:
                    cc:3a:62:21:0f:a8:f8:8c:2b:df:fc:d8:09:fc:8e:
                    4e:16:b8:f6:3a:55:f0:97:77:a9:8f:15:49:73:11:
                    d7:8f:d6:1d:51:0e:42:a9:10:ca:37:e2:3d:4c:0b:
                    23:f7:91:86:c6:96:b5:ff:03:28:ca:07:36:83:44:
                    1f:33:fb:36:5e:e6:e1:fd:95:e9:c5:25:0c:92:c8:
                    0d:84:a6:53:17:23:9d:ae:b2:8e:6a:b2:37:9c:8e:
                    be:16:26:61:d4:dc:f0:52:04:f0:a3:5d:61:c9:fa:
                    8c:36:2b:8c:0b:98:09:3e:46:3d:ec:0b:9f:5b:60:
                    27:34:ae:41:96:21:bc:25:41:97:8f:e3:c6:f9:78:
                    80:bb:69:30:76:51:2d:41:11:29:e8:82:ae:44:b3:
                    46:84:b9:8a:17:0c:9b:77:f7:f8:cb:7f:2e:10:e6:
                    43:b2:c0:af:c6:48:32:fa:d7:49:00:58:60:9f:8c:
                    fa:88:09:03:90:5c:3f:95:fd:b0:f8:53:8c:ca:89:
                    51:0d:8f:3a:5a:ad:97:15:bf:fa:f5:ad:74:fd:70:
                    aa:e7:45:ea:61:a0:24:0c:7e:60:d6:46:bb:f4:c0:
                    74:eb:59:0c:19:9c:76:d7:be:b2:94:65:ce:c7:bd:
                    01:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:38:64:A7:82:58:B4:4E:6A:30:8E:B1:29:16:EF:2D:C1:54:9B:7A
            X509v3 Authority Key Identifier:
                keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/F1A4DAD6403211EEB47BF84AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:9a:57:af:ef:ee:64:71:cf:00:02:5c:ac:1d:4b:cd:83:cf:
         19:77:59:55:80:71:26:40:fe:04:6a:ee:6a:48:a3:47:1e:d8:
         8c:c8:f1:59:c1:f1:8f:0e:2c:33:2a:d9:34:40:13:11:df:f4:
         8e:75:2b:40:aa:59:98:f8:51:90:3a:8e:e6:5f:5f:52:df:79:
         bc:83:99:ae:a3:c7:5a:0b:6f:57:8f:d9:ec:21:fd:31:13:4c:
         48:12:78:b8:2d:fe:25:c6:a8:57:67:6a:bd:f9:6c:f1:2a:50:
         df:0e:d4:f2:52:ef:6b:a1:90:63:29:83:7b:48:59:dc:91:0f:
         8c:10:1c:14:6b:69:21:69:2c:c0:d4:44:52:50:f0:52:d2:e6:
         64:3c:2d:5a:b2:ad:09:94:68:5b:0d:e1:13:b8:ec:47:2c:d0:
         00:da:f2:05:a1:e7:dd:82:05:ea:29:c1:22:a2:ba:f3:fa:a9:
         07:98:f9:f1:04:43:ad:20:e1:33:69:5f:07:51:16:73:a8:19:
         72:b7:13:59:8f:b7:0c:e7:0f:ad:d9:ce:d2:72:b1:03:8b:d5:
         9c:f0:db:19:8c:e3:30:2c:1a:a7:68:82:67:47:6e:d6:ec:62:
         61:6a:af:d1:16:8a:40:24:9d:ef:79:43:ba:28:d8:0d:3a:78:
         0a:a0:0f:00
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QzkyOEQxMTAvBgNVBAUTKDFFNjAxM0FGMUY4NTY0RUFBMDA5N0RCMUYyMTY4NzRD
NEI3ODY3MEUwHhcNMjUxMjIxMDIyMzUyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQ3NWEzOC1iOWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArxswSsdVl/am6q19QTrMOmIhD6j4jCvf/NgJ/I5OFrj2OlXwl3epjxVJcxHX
j9YdUQ5CqRDKN+I9TAsj95GGxpa1/wMoygc2g0QfM/s2Xubh/ZXpxSUMksgNhKZT
FyOdrrKOarI3nI6+FiZh1NzwUgTwo11hyfqMNiuMC5gJPkY97AufW2AnNK5BliG8
JUGXj+PG+XiAu2kwdlEtQREp6IKuRLNGhLmKFwybd/f4y38uEOZDssCvxkgy+tdJ
AFhgn4z6iAkDkFw/lf2w+FOMyolRDY86Wq2XFb/69a10/XCq50XqYaAkDH5g1ka7
9MB061kMGZx2176ylGXOx70BcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGM4ZKeC
WLROajCOsSkW7y3BVJt6MB8GA1UdIwQYMBaAFB5gE68fhWTqoAl9sfIWh0xLeGcO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4RC82MUExREYyRTQw
MzIxMUVFQkRBNTA5NEFDNEY5QUUwMi9IbUFUcngtRlpPcWdDWDJ4OGhhSFRFdDRa
dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0htQVRyeC1GWk9xZ0NYMng4aGFIVEV0NFp3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzkyOEQvNjFBMURGMkU0MDMyMTFFRUJEQTUwOTRBQzRGOUFFMDIvRjFBNERBRDY0
MDMyMTFFRUI0N0JGODRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFn/0IwDQYJKoZIhvcNAQELBQADggEBAJCaV6/v7mRxzwAC
XKwdS82Dzxl3WVWAcSZA/gRq7mpIo0ce2IzI8VnB8Y8OLDMq2TRAExHf9I51K0Cq
WZj4UZA6juZfX1LfebyDma6jx1oLb1eP2ewh/TETTEgSeLgt/iXGqFdnar35bPEq
UN8O1PJS72uhkGMpg3tIWdyRD4wQHBRraSFpLMDURFJQ8FLS5mQ8LVqyrQmUaFsN
4RO47Ecs0ADa8gWh592CBeopwSKiuvP6qQeY+fEEQ60g4TNpXwdRFnOoGXK3E1mP
twznD63ZztJysQOL1Zzw2xmM4zAsGqdogmdHbtbsYmFqr9EWikAkne95Q7oo2A06
eAqgDwA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:02 2026 by rpki-client