This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/82B99B1C6B9F11F09CD3A334C4F9AE02.roa
File:                     82B99B1C6B9F11F09CD3A334C4F9AE02.roa (raw, json)
Hash identifier:          X7kxe5tASpLZd1QCRc9L8JdIwUW7kRfM+3Yt3hVMA6k=
Subject key identifier:   3C:F4:49:F9:94:EC:03:33:A0:19:6C:F0:51:26:AA:3A:23:61:02:D8
Certificate issuer:       /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
Certificate serial:       025A
Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/82B99B1C6B9F11F09CD3A334C4F9AE02.roa
Signing time:             Wed 03 Dec 2025 00:30:57 +0000
ROA not before:           Wed 03 Dec 2025 00:30:57 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132707
IP address blocks:        103.37.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl
                          rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
        Validity
            Not Before: Dec  3 00:30:57 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=692f84c1-9620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cc:d2:de:9e:a9:e3:0c:3f:5f:e8:37:e0:dc:
                    d0:fc:3e:5d:a1:f1:2c:02:73:25:13:85:86:bc:f2:
                    7b:fb:16:d0:a5:ff:eb:d7:d0:db:c1:32:e4:da:ed:
                    66:7a:2f:6f:f5:23:9d:88:fd:e2:df:1c:c2:86:68:
                    de:0e:36:fe:2f:36:40:3e:93:d3:bf:c4:64:0c:7b:
                    33:25:c6:a8:c7:1a:6b:2a:fb:b2:15:37:96:9b:f1:
                    4c:5a:0d:d0:96:cc:3d:0b:ce:9b:b0:2b:6b:2f:11:
                    71:2d:c8:a1:57:77:08:06:94:9e:c1:10:ed:d0:ba:
                    e2:0e:53:6b:fc:1d:f7:4a:8f:86:91:74:af:2b:37:
                    dd:7b:6b:d5:68:a1:92:30:96:8a:cd:f2:20:41:c8:
                    b2:55:51:d5:2e:42:f9:0e:3d:a7:d2:2d:5a:8a:95:
                    e2:d0:97:19:4a:79:b1:91:21:a4:16:26:be:13:76:
                    37:f4:bc:28:84:95:c0:2d:21:be:71:34:9e:63:50:
                    d3:f6:7f:fd:08:9a:5e:95:bd:b2:6f:20:41:33:83:
                    29:ce:ec:fc:e2:25:a3:8d:e6:b3:5c:18:c6:52:80:
                    89:fa:6a:69:90:6c:46:9f:8c:c7:83:e2:fc:08:01:
                    70:4a:fe:47:01:91:be:f7:fd:19:3f:d9:f9:13:c7:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F4:49:F9:94:EC:03:33:A0:19:6C:F0:51:26:AA:3A:23:61:02:D8
            X509v3 Authority Key Identifier:
                keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/82B99B1C6B9F11F09CD3A334C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:51:e3:1c:06:6b:48:e7:5f:d1:1c:cb:dc:ec:c8:bf:29:2f:
         ec:be:f4:5d:f8:64:a7:da:6e:9a:c3:19:72:8f:30:6f:19:5c:
         7b:a9:7d:29:07:f6:72:6c:2e:82:40:c0:bd:c4:2f:04:95:fc:
         e9:ad:a5:b1:d5:e2:6c:99:6b:e3:c8:12:c3:c1:02:60:9a:89:
         2c:6e:ca:f0:ba:e2:2b:48:1c:58:57:39:0c:04:b7:05:45:a4:
         49:66:cc:94:12:9e:a1:4b:5f:1e:43:6c:96:ce:11:6a:77:7e:
         93:4a:98:bf:87:d4:05:77:8f:ac:64:db:13:65:79:2f:df:0e:
         90:29:23:8f:d0:28:f1:89:68:8a:58:77:15:74:47:f0:bf:66:
         e6:96:4a:aa:79:59:d7:bd:a1:e4:1e:94:b4:79:46:8b:4f:19:
         f7:70:2c:ae:4e:47:80:77:6c:fa:02:22:c9:44:b7:02:2e:a6:
         4b:2d:70:2a:e4:14:f3:52:4e:30:e3:40:ea:ca:fc:82:e3:38:
         37:b6:c8:12:07:cb:5a:76:6c:cc:f3:27:8c:56:1f:06:3b:db:
         c5:96:a8:80:50:99:e9:dc:ec:97:36:e9:78:1b:33:bd:c1:e7:
         f7:98:fc:cd:ae:c9:e6:90:5b:dd:64:b1:8e:69:6b:cb:57:b3:
         52:b1:62:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:55:24 2025 by rpki-client