This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/05F05A76D07B11F08779390AC4F9AE02.roa
File:                     05F05A76D07B11F08779390AC4F9AE02.roa (raw, json)
Hash identifier:          Q2R6kOtvbxsH3oFbkhguF0VwHUz9HOgTiQs+lXag3vY=
Subject key identifier:   42:62:7C:B7:52:C8:BF:6D:19:39:E6:94:8C:F0:2F:0A:C2:24:DD:E8
Certificate issuer:       /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24
Certificate serial:       04CB
Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/05F05A76D07B11F08779390AC4F9AE02.roa
Signing time:             Wed 03 Dec 2025 19:05:58 +0000
ROA not before:           Wed 03 Dec 2025 19:05:58 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     149035
IP address blocks:        103.177.54.0/24 maxlen: 24
                          2001:df0:1d40::/48 maxlen: 56
                          2001:df0:1d41::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEF20, serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24
        Validity
            Not Before: Dec  3 19:05:58 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=69308a16-4e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c5:0e:ec:dd:45:9d:f3:72:c2:bb:52:8d:d6:
                    0e:31:bc:36:cc:17:49:df:db:98:0d:a6:bf:0d:17:
                    03:59:f3:be:d6:32:a2:8e:9a:6b:ff:80:0e:9f:6a:
                    12:db:35:c4:9f:0f:28:02:6a:a7:80:b9:c9:26:d1:
                    df:c6:13:af:79:bd:5b:e0:fb:46:bf:69:e2:69:97:
                    33:e0:dc:97:e2:af:fd:76:1f:45:18:25:a8:b8:90:
                    42:bb:67:8e:14:5e:77:02:56:a4:36:31:fa:d8:f4:
                    62:5f:e0:15:d2:57:39:3f:27:18:e7:e8:eb:d7:2e:
                    b4:e1:c1:b0:a2:ca:34:7f:c3:b2:12:91:36:00:04:
                    ee:95:94:e6:cc:75:c1:ce:59:a8:15:26:6d:d7:e4:
                    0a:3a:90:a6:a9:b5:a8:a2:77:90:67:b0:2b:2f:8d:
                    37:f4:b9:1f:9e:76:45:b3:1f:4a:35:bf:08:a2:51:
                    a3:6b:7f:82:b3:ed:3b:32:11:d2:35:35:b1:15:94:
                    1a:6c:b8:a5:39:e5:71:91:01:3f:a9:d9:f9:de:41:
                    1b:2e:83:81:10:cf:26:1c:da:a3:36:3f:4a:de:86:
                    92:94:a3:b9:1a:18:9f:b3:29:02:6b:c0:57:c3:9f:
                    81:93:a4:1e:9b:54:b8:7e:c1:f1:6d:f0:42:bd:8b:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:62:7C:B7:52:C8:BF:6D:19:39:E6:94:8C:F0:2F:0A:C2:24:DD:E8
            X509v3 Authority Key Identifier:
                keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/05F05A76D07B11F08779390AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.54.0/24
                IPv6:
                  2001:df0:1d40::/47

    Signature Algorithm: sha256WithRSAEncryption
         9a:5d:5b:e7:ae:a4:ed:0b:95:f0:b9:90:09:8b:12:b5:f6:9c:
         c5:40:12:cc:e9:cd:ad:27:e6:b7:0e:27:50:c1:9f:85:f1:11:
         59:fc:97:77:07:9b:75:cd:73:b8:bb:23:d8:dd:ca:4c:43:7e:
         fd:a7:4b:a2:11:9a:27:4d:ea:fb:18:d4:47:fe:d9:18:05:49:
         52:7a:91:ae:fd:b2:08:b5:09:41:c2:74:8b:16:f2:24:0b:7b:
         20:2a:58:f9:10:4c:aa:a3:e1:28:b7:34:05:55:de:f6:83:19:
         99:54:2a:4c:dd:8b:1a:69:ce:44:e9:2e:44:66:77:3f:a0:e8:
         f2:8a:8c:21:9d:59:ca:f8:f7:c2:26:00:98:bc:3e:d4:1a:3a:
         2b:36:48:a9:27:ca:91:aa:7d:a1:75:d0:0d:94:68:ae:9c:c9:
         56:97:91:5f:b5:0c:6e:9a:e6:32:ba:31:d3:98:b0:f8:2b:30:
         b3:d7:98:ea:79:a9:ef:8d:30:f8:99:76:5e:44:13:d3:42:79:
         01:8a:eb:01:89:bd:9a:4f:b8:74:13:35:99:2e:3f:14:c2:3d:
         d9:b8:b3:4f:3a:85:82:b8:05:15:b5:3f:2f:90:74:dd:69:64:
         6b:5b:64:1a:0f:8b:45:d7:ea:a6:ef:9d:d0:ac:59:da:74:47:
         dc:8c:d7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:01:13 2025 by rpki-client