This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/213BB0A4643F11EFA96FA34CC4F9AE02.roa
File:                     213BB0A4643F11EFA96FA34CC4F9AE02.roa (raw, json)
Hash identifier:          Y4VXX3UILqwHq8yyfjwTwmaLqav+QncPuO7UtgFy4pw=
Subject key identifier:   BF:B8:FB:2B:F8:69:E6:78:AC:29:A3:A4:07:40:19:79:63:37:A9:67
Certificate issuer:       /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Certificate serial:       073A
Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/213BB0A4643F11EFA96FA34CC4F9AE02.roa
Signing time:             Tue 27 Aug 2024 06:39:38 +0000
ROA not before:           Tue 27 Aug 2024 06:39:38 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     9723
IP address blocks:        1.178.0.0/20 maxlen: 24
                          1.178.64.0/20 maxlen: 24
                          1.178.80.0/20 maxlen: 24
                          1.178.96.0/20 maxlen: 24
                          1.178.144.0/20 maxlen: 20
                          1.178.144.0/21 maxlen: 24
                          1.178.160.0/20 maxlen: 24
                          1.178.176.0/20 maxlen: 24
                          1.178.192.0/20 maxlen: 20
                          1.178.192.0/21 maxlen: 24
                          1.179.0.0/20 maxlen: 24
                          1.179.16.0/20 maxlen: 24
                          1.179.32.0/21 maxlen: 21
                          1.179.48.0/20 maxlen: 24
                          1.179.64.0/21 maxlen: 21
                          1.179.80.0/21 maxlen: 21
                          1.179.96.0/20 maxlen: 24
                          58.87.0.0/20 maxlen: 20
                          58.87.0.0/23 maxlen: 23
                          58.87.2.0/23 maxlen: 23
                          58.87.6.0/23 maxlen: 23
                          58.87.8.0/23 maxlen: 23
                          58.87.10.0/23 maxlen: 23
                          58.87.12.0/23 maxlen: 23
                          58.87.14.0/24 maxlen: 24
                          58.87.15.0/24 maxlen: 24
                          110.238.2.0/23 maxlen: 23
                          110.238.4.0/22 maxlen: 22
                          110.238.4.0/23 maxlen: 23
                          110.238.6.0/23 maxlen: 23
                          110.238.8.0/23 maxlen: 23
                          110.238.10.0/23 maxlen: 23
                          110.238.12.0/23 maxlen: 23
                          110.238.14.0/23 maxlen: 23
                          110.238.16.0/20 maxlen: 20
                          110.238.16.0/24 maxlen: 24
                          110.238.18.0/24 maxlen: 24
                          110.238.21.0/24 maxlen: 24
                          110.238.24.0/24 maxlen: 24
                          110.238.25.0/24 maxlen: 24
                          110.238.128.0/20 maxlen: 20
                          110.238.128.0/21 maxlen: 24
                          110.238.144.0/20 maxlen: 20
                          110.238.144.0/22 maxlen: 24
                          110.238.152.0/21 maxlen: 21
                          110.238.224.0/20 maxlen: 20
                          110.238.224.0/21 maxlen: 24
                          110.238.240.0/20 maxlen: 20
                          110.238.240.0/23 maxlen: 24
                          110.239.0.0/20 maxlen: 20
                          110.239.16.0/20 maxlen: 20
                          110.239.32.0/20 maxlen: 20
                          110.239.32.0/22 maxlen: 24
                          110.239.128.0/20 maxlen: 20
                          110.239.128.0/21 maxlen: 21
                          110.239.144.0/20 maxlen: 20
                          110.239.176.0/21 maxlen: 22
                          110.239.178.0/23 maxlen: 23
                          110.239.178.0/24 maxlen: 24
                          110.239.224.0/20 maxlen: 20
                          110.239.240.0/20 maxlen: 20
                          119.12.0.0/20 maxlen: 20
                          119.12.80.0/20 maxlen: 20
                          119.12.80.0/21 maxlen: 24
                          119.12.96.0/21 maxlen: 21
                          119.12.112.0/20 maxlen: 20
                          119.12.112.0/21 maxlen: 24
                          119.12.144.0/21 maxlen: 24
                          119.13.0.0/20 maxlen: 20
                          119.13.0.0/23 maxlen: 23
                          119.13.2.0/24 maxlen: 24
                          119.13.3.0/24 maxlen: 24
                          119.13.4.0/23 maxlen: 23
                          119.13.6.0/23 maxlen: 23
                          119.13.8.0/23 maxlen: 23
                          119.13.10.0/23 maxlen: 24
                          119.13.16.0/21 maxlen: 24
                          119.13.48.0/21 maxlen: 21
                          119.13.48.0/24 maxlen: 24
                          119.13.49.0/24 maxlen: 24
                          119.13.128.0/20 maxlen: 20
                          119.13.144.0/21 maxlen: 24
                          119.13.176.0/21 maxlen: 23
                          119.13.176.0/23 maxlen: 24
                          119.13.178.0/24 maxlen: 24
                          119.13.180.0/22 maxlen: 24
                          119.13.240.0/21 maxlen: 24
                          121.91.16.0/20 maxlen: 20
                          121.91.96.0/21 maxlen: 24
                          121.91.112.0/20 maxlen: 20
                          121.91.128.0/21 maxlen: 24
                          121.91.144.0/21 maxlen: 21
                          121.91.160.0/21 maxlen: 21
                          121.91.192.0/21 maxlen: 24
                          123.200.128.0/20 maxlen: 20
                          123.200.133.0/24 maxlen: 24
                          123.200.136.0/22 maxlen: 22
                          123.200.140.0/22 maxlen: 22
                          123.200.144.0/22 maxlen: 22
                          123.200.148.0/22 maxlen: 22
                          123.200.152.0/21 maxlen: 21
                          123.200.160.0/23 maxlen: 23
                          123.200.162.0/23 maxlen: 23
                          123.200.164.0/23 maxlen: 23
                          123.200.165.0/24 maxlen: 24
                          123.200.166.0/23 maxlen: 23
                          123.200.168.0/23 maxlen: 23
                          123.200.170.0/23 maxlen: 23
                          123.200.172.0/24 maxlen: 24
                          123.200.174.0/24 maxlen: 24
                          123.200.175.0/24 maxlen: 24
                          123.200.176.0/23 maxlen: 23
                          123.200.179.0/24 maxlen: 24
                          123.200.180.0/23 maxlen: 23
                          123.200.182.0/23 maxlen: 23
                          123.200.184.0/22 maxlen: 22
                          123.200.187.0/24 maxlen: 24
                          123.200.188.0/23 maxlen: 23
                          123.200.192.0/21 maxlen: 21
                          123.200.200.0/21 maxlen: 24
                          123.200.208.0/21 maxlen: 21
                          123.200.216.0/21 maxlen: 21
                          123.200.224.0/21 maxlen: 21
                          123.200.240.0/21 maxlen: 21
                          202.83.64.0/19 maxlen: 19
                          202.83.64.0/22 maxlen: 22
                          202.83.68.0/23 maxlen: 23
                          202.83.70.0/23 maxlen: 23
                          202.83.72.0/24 maxlen: 24
                          202.83.73.0/24 maxlen: 24
                          202.83.74.0/23 maxlen: 23
                          202.83.76.0/22 maxlen: 22
                          202.83.80.0/23 maxlen: 23
                          202.83.82.0/24 maxlen: 24
                          202.83.83.0/24 maxlen: 24
                          202.83.84.0/22 maxlen: 22
                          202.83.88.0/23 maxlen: 23
                          202.83.90.0/23 maxlen: 23
                          202.83.92.0/23 maxlen: 23
                          202.83.94.0/24 maxlen: 24
                          202.83.95.0/24 maxlen: 24
                          202.183.96.0/20 maxlen: 20
                          202.183.96.0/24 maxlen: 24
                          202.183.97.0/24 maxlen: 24
                          202.183.98.0/24 maxlen: 24
                          202.183.100.0/23 maxlen: 23
                          202.183.102.0/23 maxlen: 23
                          202.183.102.0/24 maxlen: 24
                          202.183.104.0/22 maxlen: 22
                          202.183.108.0/24 maxlen: 24
                          202.183.110.0/24 maxlen: 24
                          202.183.111.0/24 maxlen: 24
                          202.183.112.0/20 maxlen: 20
                          202.183.112.0/23 maxlen: 23
                          202.183.114.0/23 maxlen: 23
                          202.183.116.0/23 maxlen: 23
                          202.183.118.0/24 maxlen: 24
                          202.183.119.0/24 maxlen: 24
                          202.183.120.0/22 maxlen: 22
                          202.183.124.0/23 maxlen: 23
                          202.183.126.0/24 maxlen: 24
                          202.183.127.0/24 maxlen: 24
                          210.56.64.0/20 maxlen: 20
                          210.56.64.0/22 maxlen: 22
                          210.56.64.0/24 maxlen: 24
                          210.56.65.0/24 maxlen: 24
                          210.56.66.0/24 maxlen: 24
                          210.56.67.0/24 maxlen: 24
                          210.56.68.0/23 maxlen: 23
                          210.56.70.0/23 maxlen: 23
                          210.56.72.0/23 maxlen: 23
                          210.56.74.0/23 maxlen: 23
                          210.56.76.0/23 maxlen: 23
                          210.56.78.0/23 maxlen: 23
                          220.157.64.0/19 maxlen: 19
                          220.157.64.0/23 maxlen: 23
                          220.157.66.0/23 maxlen: 23
                          220.157.66.0/24 maxlen: 24
                          220.157.69.0/24 maxlen: 24
                          220.157.70.0/24 maxlen: 24
                          220.157.71.0/24 maxlen: 24
                          220.157.72.0/23 maxlen: 23
                          220.157.76.0/23 maxlen: 23
                          220.157.78.0/23 maxlen: 23
                          220.157.78.0/24 maxlen: 24
                          220.157.79.0/24 maxlen: 24
                          220.157.80.0/23 maxlen: 23
                          220.157.82.0/23 maxlen: 23
                          220.157.84.0/23 maxlen: 23
                          220.157.86.0/23 maxlen: 23
                          220.157.88.0/23 maxlen: 23
                          220.157.90.0/24 maxlen: 24
                          220.157.91.0/24 maxlen: 24
                          220.157.92.0/24 maxlen: 24
                          220.157.93.0/24 maxlen: 24
                          220.157.94.0/24 maxlen: 24
                          220.157.95.0/24 maxlen: 24
                          2407:6800::/32 maxlen: 32
                          2407:6800:0:200::/56 maxlen: 56
                          2407:6800:0:300::/56 maxlen: 56
                          2407:6800:0:400::/56 maxlen: 56
                          2407:6800:0:500::/56 maxlen: 56
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1850 (0x73a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
        Validity
            Not Before: Aug 27 06:39:38 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=66cd74a9-0c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:a4:f6:cd:40:2d:e5:76:75:ff:a3:55:71:
                    06:f4:ce:e6:32:b3:c4:64:69:b8:ba:e9:02:e0:c2:
                    a0:d0:34:9b:8d:c0:6a:e1:d0:73:18:30:93:e0:0a:
                    85:89:12:43:bc:57:65:ac:4b:fb:f4:ef:19:e3:a6:
                    4c:55:fa:4b:5d:3f:54:43:7f:d0:21:19:23:93:63:
                    4a:4e:c0:a1:67:30:7e:00:ec:3c:17:f3:a9:52:51:
                    dd:4a:c5:12:dc:cc:db:97:33:07:9f:47:f6:28:2e:
                    e7:3a:6f:39:1d:38:e6:e7:2b:c1:07:1c:2e:02:56:
                    ec:18:b5:20:78:33:b7:ab:62:77:33:1e:33:28:12:
                    09:aa:23:11:51:a8:81:c3:b9:97:b7:23:81:44:b5:
                    b0:59:e1:c6:22:7e:2e:a8:7e:2c:63:f2:b9:2a:55:
                    c9:25:c6:47:76:8c:de:7e:2a:1d:9d:3e:70:a3:ba:
                    e1:e8:5a:b8:ec:c3:6d:fd:b7:67:d4:ac:c0:d0:5d:
                    23:cd:3b:05:1f:b8:49:31:e5:7f:8d:39:71:1d:9e:
                    f9:8d:13:1e:cb:cb:c8:28:ee:44:e3:4c:5c:45:54:
                    23:60:42:c1:05:84:bc:59:50:4f:13:d0:b2:f8:05:
                    1c:09:a0:1e:cb:cb:6b:5c:c5:f3:2b:29:3b:0b:5a:
                    32:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B8:FB:2B:F8:69:E6:78:AC:29:A3:A4:07:40:19:79:63:37:A9:67
            X509v3 Authority Key Identifier:
                keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/213BB0A4643F11EFA96FA34CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.178.0.0/20
                  1.178.64.0-1.178.111.255
                  1.178.144.0-1.178.207.255
                  1.179.0.0-1.179.39.255
                  1.179.48.0-1.179.71.255
                  1.179.80.0/21
                  1.179.96.0/20
                  58.87.0.0/20
                  110.238.2.0-110.238.31.255
                  110.238.128.0/19
                  110.238.224.0-110.239.47.255
                  110.239.128.0/19
                  110.239.176.0/21
                  110.239.224.0/19
                  119.12.0.0/20
                  119.12.80.0-119.12.103.255
                  119.12.112.0/20
                  119.12.144.0/21
                  119.13.0.0-119.13.23.255
                  119.13.48.0/21
                  119.13.128.0-119.13.151.255
                  119.13.176.0/21
                  119.13.240.0/21
                  121.91.16.0/20
                  121.91.96.0/21
                  121.91.112.0-121.91.135.255
                  121.91.144.0/21
                  121.91.160.0/21
                  121.91.192.0/21
                  123.200.128.0-123.200.172.255
                  123.200.174.0-123.200.177.255
                  123.200.179.0-123.200.189.255
                  123.200.192.0-123.200.231.255
                  123.200.240.0/21
                  202.83.64.0/19
                  202.183.96.0/19
                  210.56.64.0/20
                  220.157.64.0/19
                IPv6:
                  2407:6800::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:9e:7c:46:47:63:e4:23:08:a3:e4:08:81:c2:44:3c:9c:0b:
         d1:b1:c6:45:74:53:4e:73:6b:bb:8a:46:5f:23:ce:fd:8e:0f:
         72:13:ec:da:a3:04:9d:e7:51:ff:e8:87:d0:2f:12:1b:ba:8d:
         9e:5b:f7:4c:7b:69:6a:2c:c4:83:94:ad:bc:fe:5e:1f:c3:2e:
         65:8c:76:ee:f8:04:59:79:57:c3:7c:73:14:b6:fa:bb:2d:4a:
         44:2d:d7:45:b7:3b:06:02:99:ab:b3:dc:a6:7f:23:fd:7c:82:
         e2:e9:2a:d4:e9:1a:3c:9c:ff:c3:82:e9:67:3b:a8:b0:80:67:
         48:5b:2f:2b:27:09:01:72:34:84:cb:a3:a5:1f:77:e4:ac:ca:
         63:9d:0e:08:6c:e7:cc:9e:6f:31:d9:74:fb:c9:b9:db:91:74:
         70:e9:6c:71:b8:ca:d3:2f:8f:ab:44:dd:9e:c7:56:5c:ad:ef:
         e3:f9:3d:41:de:e9:55:d8:99:0d:5f:28:a7:ab:ef:19:a7:56:
         cf:18:91:2e:fa:f5:7b:75:c0:c5:78:2d:69:6b:f1:68:3d:7d:
         82:40:f1:8f:58:2c:8c:2f:ac:cc:34:e8:5f:83:7f:2d:29:c8:
         28:d3:76:64:d4:ad:0e:60:01:3a:84:24:0a:65:b4:56:fa:af:
         ab:24:d1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:24:24 2025 by rpki-client