This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/A0841A68D0D511EC81001E73C4F9AE02.roa
File:                     A0841A68D0D511EC81001E73C4F9AE02.roa (raw, json)
Hash identifier:          RiHqUd66nfKg9bYuuoXV02nBPSlEq4ADYP42Ecnza24=
Subject key identifier:   8C:B6:96:56:13:93:85:23:A8:3F:05:6B:C9:3F:33:DF:B9:59:BE:56
Certificate issuer:       /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Certificate serial:       039F
Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/A0841A68D0D511EC81001E73C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 23:38:16 +0000
ROA not before:           Thu 04 Dec 2025 23:38:16 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132742
IP address blocks:        103.80.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
                          rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927 (0x39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE6C5, serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
        Validity
            Not Before: Dec  4 23:38:16 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69321b68-076a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:76:e2:18:85:b0:b4:b3:00:bf:0a:2f:77:
                    3f:00:55:b5:8c:3c:5b:6b:f1:c8:60:ef:78:50:a6:
                    69:af:33:65:06:5d:1d:c0:69:05:b6:a8:0f:43:fd:
                    72:16:cd:04:c0:92:47:13:21:6b:fc:48:06:54:54:
                    cc:24:e0:9e:7b:b5:5e:61:6e:b3:08:84:5b:dc:fa:
                    d8:66:df:f5:57:ea:77:0f:9d:eb:0a:0c:eb:c6:48:
                    46:5d:ba:2b:e8:e1:9b:ce:ea:65:32:a0:ad:23:e1:
                    25:fc:5a:f0:c2:83:29:3f:e8:64:1a:0b:df:30:57:
                    fc:07:dc:8b:ea:99:09:e3:e1:56:dd:c2:e0:e5:f9:
                    7a:ab:6f:63:9d:81:9d:30:c6:9d:90:0e:5a:65:81:
                    a0:03:29:10:7a:0a:21:63:84:21:4f:c0:95:6c:8d:
                    d4:a5:f9:65:84:88:cb:f9:c9:f9:f6:96:4d:be:e8:
                    a9:68:dd:16:8a:59:78:dd:59:da:35:b0:e5:d2:ae:
                    f3:eb:3b:f6:1f:b2:7b:66:5f:63:89:b4:02:54:92:
                    18:b6:1d:b7:29:70:c2:1d:f0:75:42:0d:96:56:23:
                    cc:7d:b7:1f:3f:ab:52:dc:5f:87:e9:61:2a:5c:44:
                    ba:ee:15:6d:66:1f:ea:fe:aa:29:a4:14:57:be:ea:
                    f2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B6:96:56:13:93:85:23:A8:3F:05:6B:C9:3F:33:DF:B9:59:BE:56
            X509v3 Authority Key Identifier:
                keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/A0841A68D0D511EC81001E73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dd:a3:93:80:66:36:10:36:67:57:9d:c3:47:5d:4f:18:83:a4:
         52:ee:e4:f3:7f:0b:f3:8b:e4:93:c1:b3:4c:4b:65:45:53:d7:
         0d:47:3b:1d:ac:ac:90:85:71:d7:1f:33:b6:e4:94:de:1f:4a:
         c0:16:49:9c:6d:7e:3b:a8:99:a7:d8:93:cf:e0:c0:33:b6:c1:
         f4:b0:30:8b:b4:5c:08:ac:48:bc:06:b9:20:1b:35:d0:9b:ce:
         b4:fb:bf:9a:6a:e3:44:72:a0:db:14:8b:41:61:8a:11:a0:0e:
         8a:85:f4:3a:23:87:c3:b4:40:d3:38:b0:c4:73:66:ae:a1:c4:
         65:32:97:4c:be:17:6c:b1:d8:df:d2:fb:3c:9b:61:82:f7:04:
         97:ab:71:c0:34:a4:d6:dc:2f:06:96:55:6d:6b:b9:ad:2f:e9:
         9f:c8:f9:a4:de:2e:9b:2e:54:9c:9a:ab:19:d6:b6:96:0a:b5:
         e5:6a:a1:a7:09:ad:d7:48:53:60:ab:1e:9e:32:f5:9a:af:bc:
         83:82:f3:39:40:47:3f:ba:9a:94:73:c4:fd:bf:86:5a:eb:c5:
         f5:f5:32:a5:84:36:69:89:5d:3b:3b:79:46:23:0e:94:8d:10:
         41:24:c2:46:81:2e:51:25:52:3c:2c:16:4b:ae:82:a9:81:67:
         5f:87:c1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:35:33 2025 by rpki-client