This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/E2ECBFC65DF211EEB46BCB27C4F9AE02.roa
File:                     E2ECBFC65DF211EEB46BCB27C4F9AE02.roa (raw, json)
Hash identifier:          zVNBXDfK+qyjFrcQRG3ONVbAeIBRiOyNEu1aKVkQcKg=
Subject key identifier:   1A:77:2E:42:5C:B3:B4:31:C8:5A:A1:6F:72:9D:F2:9E:78:EC:DE:07
Certificate issuer:       /CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000
Certificate serial:       019C
Authority key identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/E2ECBFC65DF211EEB46BCB27C4F9AE02.roa
Signing time:             Mon 01 Dec 2025 02:29:34 +0000
ROA not before:           Mon 01 Dec 2025 02:29:34 +0000
ROA not after:            Mon 30 Mar 2026 00:00:00 +0000
asID:                     133778
IP address blocks:        103.143.82.0/23 maxlen: 23
                          103.143.82.0/24 maxlen: 24
                          103.143.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl
                          rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 01:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC6AD, serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000
        Validity
            Not Before: Dec  1 02:29:34 2025 GMT
            Not After : Mar 30 00:00:00 2026 GMT
        Subject: CN=692cfd8d-f1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:ea:22:c7:67:fe:44:d9:a6:79:2a:98:25:
                    45:06:bb:c6:3c:77:85:e5:19:b6:7a:cf:23:a2:5d:
                    44:41:f8:35:0f:36:df:ca:84:48:a7:35:b1:a5:37:
                    bf:d1:0a:5d:eb:fc:5b:62:fc:2b:2b:5c:38:5f:16:
                    f3:4a:67:3e:cc:d4:c0:2d:25:f5:09:7f:00:a8:2b:
                    21:1e:50:a0:a4:a2:66:18:12:ec:b1:57:69:74:4c:
                    82:76:eb:48:80:da:9b:da:9d:76:33:06:b0:c5:15:
                    ae:bf:5f:4b:61:65:f7:75:13:ba:89:b3:35:61:8b:
                    57:49:b9:89:2d:78:0e:59:9b:81:f5:63:d1:13:0f:
                    85:89:39:a5:8e:1b:7e:28:ef:88:19:d2:e6:d8:1d:
                    c6:a2:43:fa:76:b2:09:47:99:f0:e0:53:2e:2d:8d:
                    fd:96:43:00:e6:09:e6:6c:28:26:15:46:e4:70:43:
                    a9:e3:0c:9c:3b:81:41:fc:8b:41:e6:60:72:a9:bf:
                    b7:d3:ae:54:cc:c4:5a:0d:ef:f8:a1:9b:bb:5a:7b:
                    63:23:29:f2:bb:70:b7:63:46:1a:77:d7:9d:26:29:
                    4a:47:ca:95:e4:96:0c:ad:c5:11:05:43:21:a4:2a:
                    d0:26:80:a5:39:85:ca:46:e4:21:57:a2:76:31:e4:
                    8c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:77:2E:42:5C:B3:B4:31:C8:5A:A1:6F:72:9D:F2:9E:78:EC:DE:07
            X509v3 Authority Key Identifier:
                keyid:86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/E2ECBFC65DF211EEB46BCB27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:6b:f0:e6:b0:5b:f7:3e:46:86:eb:54:3b:39:5e:af:24:1a:
         e4:bc:fc:d6:58:11:18:29:71:94:2a:cb:10:ca:c0:36:c3:e2:
         c2:94:17:e5:76:b2:07:11:42:98:01:73:ce:97:ed:0d:71:d3:
         31:3f:cd:f3:e6:c2:28:f5:17:bc:fa:fd:e3:0f:ff:9e:40:02:
         0c:6c:f5:95:f1:89:71:e5:88:77:52:55:68:a0:95:c4:3d:45:
         9d:6f:cc:b4:47:e0:4d:23:e3:5a:06:bd:3f:ca:f1:8e:59:2a:
         fe:8e:85:2a:6b:dc:a6:74:3d:da:63:91:ed:55:49:9c:62:6d:
         66:0d:d4:bb:98:7e:6e:45:39:d8:77:bf:d6:5d:7f:f2:29:ae:
         7d:73:5e:5f:45:b9:27:92:18:7a:31:7b:3c:92:0e:f0:4d:cd:
         95:23:55:83:84:aa:3a:ab:32:7d:cd:52:e1:e2:34:43:28:76:
         c4:93:ad:24:57:92:25:35:62:98:87:93:0e:df:54:7f:a6:df:
         52:61:49:98:48:f2:87:72:25:11:f4:fe:66:88:cb:e8:72:c0:
         4c:2e:9d:8d:64:17:e0:5f:d0:7c:ad:e5:5d:4d:8c:d4:c1:9a:
         ab:0d:bb:89:65:04:92:c2:f7:c0:a0:73:8c:82:b8:11:8b:92:
         c7:1e:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 11:44:22 2025 by rpki-client