This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/E2F80382E56711F089CF515C3D6F56BC.roa
File:                     E2F80382E56711F089CF515C3D6F56BC.roa (raw, json)
Hash identifier:          COxSSrr03M/GTT5titqiQmo3N45HAGkYaa4V4JcZ58w=
Subject key identifier:   70:BF:3D:A6:4D:20:D6:21:51:BE:2A:7D:50:F4:89:6B:1F:E5:AD:48
Certificate issuer:       /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Certificate serial:       1B
Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/E2F80382E56711F089CF515C3D6F56BC.roa
Signing time:             Tue 30 Dec 2025 10:11:20 +0000
ROA not before:           Tue 30 Dec 2025 10:11:20 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     54801
IP address blocks:        103.143.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
                          rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
        Validity
            Not Before: Dec 30 10:11:20 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6953a548-3999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:97:ae:e8:e7:07:6f:55:a8:bb:ae:f0:e2:
                    14:11:98:af:d2:7c:93:2e:c3:ce:39:fb:1c:b7:b8:
                    f9:03:66:a7:88:94:2b:63:47:d6:74:c5:26:99:73:
                    a1:03:55:d8:31:3a:28:7b:82:cf:83:ab:22:d0:88:
                    5e:f3:c6:23:9e:03:ae:12:84:a2:17:d8:c3:cd:44:
                    8e:a8:73:7e:12:c1:bb:8d:64:b1:e7:64:c0:1c:00:
                    f1:a7:62:1e:23:b9:b0:94:91:9c:6b:86:4e:73:21:
                    d0:11:33:e5:66:c9:c4:55:83:9a:4e:b1:47:19:da:
                    42:aa:5d:d0:1b:03:51:ad:b0:a4:bd:86:2d:bc:a0:
                    fd:1c:dd:8f:a3:c4:5f:08:54:17:18:da:e6:8b:ba:
                    ab:10:49:3b:af:d2:14:c4:03:78:a6:6e:2c:88:98:
                    ba:00:46:f5:6f:31:5c:c1:b7:2d:99:79:09:bf:97:
                    a3:04:d5:4b:ad:42:62:25:58:85:c0:31:b2:ab:80:
                    fa:68:0c:18:c6:df:51:15:16:df:55:76:dd:c7:5a:
                    86:b2:7e:c8:fc:50:9b:7e:d6:13:fe:48:07:1f:4d:
                    41:76:59:05:39:06:09:6e:6c:5a:f3:89:8e:58:51:
                    1c:5c:a6:a9:b3:19:cd:2b:f1:0e:ce:cf:9a:84:9c:
                    c0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BF:3D:A6:4D:20:D6:21:51:BE:2A:7D:50:F4:89:6B:1F:E5:AD:48
            X509v3 Authority Key Identifier:
                keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/E2F80382E56711F089CF515C3D6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:c7:3b:16:1e:06:db:e7:dc:87:eb:26:cd:64:59:0b:92:74:
         f7:95:7b:15:87:6b:37:f6:9a:d8:3b:24:58:38:ea:98:18:2f:
         e4:38:bd:c8:1a:11:a1:32:12:03:a8:12:ff:ed:b5:4a:5c:06:
         a8:63:7b:3c:a3:e7:be:7e:c9:ec:06:29:58:1f:57:b6:7e:9b:
         c2:74:8f:09:c1:6b:4f:72:2f:2e:c3:9b:9e:f3:c3:4c:f3:57:
         66:f1:22:05:9b:99:61:08:4b:8d:bc:ef:e6:1a:36:cf:3c:e7:
         e2:51:f0:28:84:5e:77:34:a8:34:38:8b:f3:13:4d:90:3d:3d:
         b5:66:f5:4a:a5:55:2b:13:37:52:97:21:60:5d:0d:f7:5a:25:
         61:72:74:ea:5a:5a:fe:a0:c6:6b:dd:57:60:be:74:12:0a:d7:
         ce:f2:69:f6:34:3a:b6:ba:80:95:83:b6:8f:ad:42:cb:e1:16:
         55:d6:86:e0:fa:17:0d:0f:e3:b6:b1:8d:f0:5f:c5:e8:44:79:
         eb:29:ea:2c:8b:0d:26:f8:0a:33:f5:82:7e:35:a7:70:87:d9:
         ac:a2:34:72:88:76:b0:a0:26:51:3b:f3:0c:43:68:1b:3e:2a:
         aa:1f:87:a3:56:50:f7:df:33:5a:3d:fd:38:a0:a9:72:e4:37:
         e2:f0:bd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:54:00 2026 by rpki-client