This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/6091D05229FC11EB861CCA7FC4F9AE02.roa
File:                     6091D05229FC11EB861CCA7FC4F9AE02.roa (raw, json)
Hash identifier:          Oj9FhDR2K8lUe60n7u+qOlovqsf3jgizM0Z5FPXWMH0=
Subject key identifier:   39:BE:E1:7C:9D:C8:05:A1:C7:5E:09:E7:30:3F:94:0B:B9:E2:3D:00
Certificate issuer:       /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
Certificate serial:       07A7
Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/6091D05229FC11EB861CCA7FC4F9AE02.roa
Signing time:             Thu 04 Dec 2025 20:34:26 +0000
ROA not before:           Thu 04 Dec 2025 20:34:26 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139751
IP address blocks:        103.158.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl
                          rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1959 (0x7a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D536E, serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
        Validity
            Not Before: Dec  4 20:34:26 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6931f052-3786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:e3:43:59:44:f9:e9:a3:91:1b:47:f7:bc:
                    0a:66:bd:84:16:ae:28:9b:a6:f3:6d:83:67:dc:92:
                    24:6c:c8:c7:1a:fc:34:3e:fb:34:05:bf:0a:15:d0:
                    ed:67:1d:39:53:98:1c:7c:d0:5b:55:6d:5c:00:38:
                    ed:5c:79:98:8e:e4:4d:39:31:92:b7:18:23:61:80:
                    4d:f0:2f:37:2f:c0:b2:37:11:d1:e2:e1:3b:18:8b:
                    97:59:ec:ab:be:a4:a8:f5:6a:dd:d4:20:43:c6:11:
                    65:cf:1b:5b:09:8d:c9:d7:2c:51:db:54:ae:5c:1c:
                    25:45:c3:5e:05:88:2a:8e:ed:ac:12:97:0e:7a:7d:
                    68:04:0b:8c:e2:ac:a2:ff:65:80:0a:a9:f1:94:d1:
                    67:79:59:57:08:57:a3:75:83:a0:5a:b8:a1:4f:23:
                    dd:20:cc:f4:ab:ed:7b:3e:bb:7d:f1:6e:3c:7d:62:
                    1a:a5:d3:dd:14:5b:c7:de:d9:9c:32:8e:81:58:f6:
                    d4:ab:89:83:fa:f4:9a:81:cb:56:37:e3:b3:5c:2b:
                    57:e4:78:75:92:af:52:0b:61:81:52:f0:e3:6f:fb:
                    13:f7:07:b5:51:d3:af:25:c2:47:4e:12:8e:d7:b0:
                    32:e0:3f:8d:4a:58:97:f0:ac:6e:97:62:9b:b9:53:
                    76:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BE:E1:7C:9D:C8:05:A1:C7:5E:09:E7:30:3F:94:0B:B9:E2:3D:00
            X509v3 Authority Key Identifier:
                keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/6091D05229FC11EB861CCA7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:0b:db:b8:66:3c:3c:8b:a8:90:1a:67:2d:2e:47:25:c3:74:
         3f:ea:6e:65:eb:bc:92:2d:11:10:d1:79:0a:4f:2a:f6:30:4e:
         67:99:5f:49:0f:45:74:40:d2:02:97:41:a4:6b:76:f7:39:3d:
         74:4d:be:6c:68:67:f0:44:85:a3:7e:ef:8d:78:e4:0f:98:a3:
         77:a4:db:92:25:39:26:af:10:7f:06:b8:c8:35:bd:f8:fa:8b:
         0b:78:ea:de:38:4b:22:b6:63:46:6d:89:67:76:28:4c:1d:fe:
         d9:e3:d8:fd:65:6f:ea:a5:f3:59:6c:47:be:07:76:6a:43:72:
         f0:49:73:50:b6:7a:13:20:47:5c:8b:eb:93:45:83:5c:15:1f:
         3a:45:bd:da:64:89:12:bf:46:05:55:f8:ff:2f:6a:cc:95:31:
         5c:d0:55:a8:89:4c:f5:f5:a3:02:2e:a7:9a:ff:f6:06:39:ee:
         84:97:55:db:bd:f8:dc:a9:8d:9d:0a:0f:62:85:b5:a8:66:24:
         94:36:f0:8f:2f:d7:b0:17:aa:df:82:54:2f:8e:ad:18:08:36:
         ca:65:b1:88:46:77:f6:3e:dc:a9:f3:17:c3:ec:fe:ea:01:47:
         70:39:3e:d7:71:9f:e0:de:06:01:01:33:9b:80:bb:81:8c:69:
         ff:50:41:23
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUzNkUxMTAvBgNVBAUTKEY3MzQzMzNCNUJCNTRGQkE4ODJCMjMyRkQyNTMyNTJF
N0VBMEJCQzAwHhcNMjUxMjA0MjAzNDI2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMxZjA1Mi0zNzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAygrjQ1lE+emjkRtH97wKZr2EFq4om6bzbYNn3JIkbMjHGvw0Pvs0Bb8KFdDt
Zx05U5gcfNBbVW1cADjtXHmYjuRNOTGStxgjYYBN8C83L8CyNxHR4uE7GIuXWeyr
vqSo9Wrd1CBDxhFlzxtbCY3J1yxR21SuXBwlRcNeBYgqju2sEpcOen1oBAuM4qyi
/2WACqnxlNFneVlXCFejdYOgWrihTyPdIMz0q+17Prt98W48fWIapdPdFFvH3tmc
Mo6BWPbUq4mD+vSagctWN+OzXCtX5Hh1kq9SC2GBUvDjb/sT9we1UdOvJcJHThKO
17Ay4D+NSliX8Kxul2KbuVN2xQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDm+4Xyd
yAWhx14J5zA/lAu54j0AMB8GA1UdIwQYMBaAFPc0MztbtU+6iCsjL9JTJS5+oLvA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTM2RS9BNkQ3NDhGQTI5
RkExMUVCQkM2NUFGN0RDNEY5QUUwMi85elF6TzF1MVQ3cUlLeU12MGxNbExuNmd1
OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzl6UXpPMXUxVDdxSUt5TXYwbE1sTG42Z3U4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDUzNkUvQTZENzQ4RkEyOUZBMTFFQkJDNjVBRjdEQzRGOUFFMDIvNjA5MUQwNTIy
OUZDMTFFQjg2MUNDQTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnniIwDQYJKoZIhvcNAQELBQADggEBAC0L27hmPDyLqJAa
Zy0uRyXDdD/qbmXrvJItERDReQpPKvYwTmeZX0kPRXRA0gKXQaRrdvc5PXRNvmxo
Z/BEhaN+74145A+Yo3ek25IlOSavEH8GuMg1vfj6iwt46t44SyK2Y0ZtiWd2KEwd
/tnj2P1lb+ql81lsR74HdmpDcvBJc1C2ehMgR1yL65NFg1wVHzpFvdpkiRK/RgVV
+P8vasyVMVzQVaiJTPX1owIup5r/9gY57oSXVdu9+NypjZ0KD2KFtahmJJQ28I8v
17AXqt+CVC+OrRgINsplsYhGd/Y+3KnzF8Ps/uoBR3A5Ptdxn+DeBgEBM5uAu4GM
af9QQSM=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:00:02 2025 by rpki-client