This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/204E25DADE9711EC9289256FC4F9AE02.roa
File:                     204E25DADE9711EC9289256FC4F9AE02.roa (raw, json)
Hash identifier:          pS+53V8+bxRdK0ATYwnRhSrEBRLBJFvngnVqGR6MfX0=
Subject key identifier:   C1:B0:1B:DC:98:1C:5F:7B:E4:17:41:15:B5:A8:E7:E0:AC:46:BE:31
Certificate issuer:       /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Certificate serial:       04CE
Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/204E25DADE9711EC9289256FC4F9AE02.roa
Signing time:             Tue 30 Dec 2025 23:19:54 +0000
ROA not before:           Tue 30 Dec 2025 23:19:54 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     205960
IP address blocks:        103.254.72.0/22 maxlen: 22
                          103.254.73.0/24 maxlen: 24
                          103.254.74.0/24 maxlen: 24
                          192.51.188.0/24 maxlen: 24
                          192.197.113.0/24 maxlen: 24
                          204.52.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1230 (0x4ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
        Validity
            Not Before: Dec 30 23:19:54 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69545e1a-5ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:09:f5:76:cb:05:e6:aa:0b:fb:f5:48:7e:4d:
                    58:bc:04:62:ee:92:31:90:3d:65:c3:f3:57:0a:99:
                    c6:87:c6:5d:6c:c5:fb:dc:4e:92:07:b6:1a:6d:df:
                    18:40:7c:05:e5:f9:89:a7:c2:16:4f:2c:49:9e:06:
                    65:85:7e:76:a9:95:87:2d:b4:b7:ee:df:dc:3b:bc:
                    f8:40:86:cf:62:90:1a:9e:c3:fa:b1:5c:0b:a9:d5:
                    74:e4:9e:64:12:5b:7b:bb:d5:09:c1:88:1b:75:6c:
                    7f:58:a9:79:29:7d:14:70:18:27:31:12:61:6d:06:
                    31:d6:73:2e:9c:38:2f:b4:1a:7b:22:d9:78:8b:91:
                    4c:43:ba:f2:d7:e3:28:9f:fa:a9:6d:ca:b1:e9:b1:
                    06:24:bd:12:bf:45:a7:61:36:06:47:4f:99:1b:d7:
                    84:fa:77:a0:b8:66:65:16:cc:10:79:a5:79:c3:95:
                    62:39:07:5e:02:cf:b4:14:92:ed:fb:97:7f:04:df:
                    79:e4:db:1a:51:34:07:bb:68:bd:b1:93:c1:59:22:
                    ec:b5:c0:29:f4:ce:64:89:79:d7:d3:33:1b:79:54:
                    74:22:28:c7:bc:ef:ae:49:e7:8b:51:67:8f:a9:b0:
                    90:17:b0:44:cc:aa:21:1a:c8:2b:8b:df:1d:22:33:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B0:1B:DC:98:1C:5F:7B:E4:17:41:15:B5:A8:E7:E0:AC:46:BE:31
            X509v3 Authority Key Identifier:
                keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/204E25DADE9711EC9289256FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.72.0/22
                  192.51.188.0/24
                  192.197.113.0/24
                  204.52.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:27:7a:cd:12:b5:dc:e3:0b:6c:36:65:4a:fe:bd:b4:91:02:
         70:d7:9f:ca:fb:59:9a:7c:85:9f:47:e5:b7:a8:44:a7:72:44:
         9d:c5:bb:7d:34:b1:91:a5:4e:6d:09:37:21:79:01:45:88:95:
         05:3e:2e:cc:db:18:67:db:79:50:96:b6:36:71:04:59:cc:81:
         fb:74:59:75:8b:6e:c8:d5:3f:e2:46:75:b5:fb:82:60:1b:df:
         e0:ce:fb:60:10:eb:b7:35:69:45:fd:9c:1f:f3:3c:f8:71:0a:
         da:91:de:5e:63:83:16:5c:31:c0:f9:11:8a:fb:8b:e9:e4:79:
         3d:f3:f7:29:53:d2:c4:1f:63:24:69:42:ef:ea:56:35:0f:f8:
         90:82:ad:0f:b5:0a:0a:68:14:2e:31:a2:d7:41:c3:11:91:d3:
         45:ff:89:da:3b:db:98:53:86:88:d1:41:30:51:2b:15:dc:91:
         7a:8a:38:e8:4a:75:81:54:d9:9d:f1:30:05:af:12:bc:29:f2:
         2a:59:ea:52:77:3d:bf:88:95:be:c4:8c:ce:69:c4:e6:b5:2f:
         49:52:b4:71:0a:ad:85:99:dd:30:b1:c0:0b:c1:60:2b:ed:8c:
         fb:ff:02:0d:1e:c1:2f:4a:be:51:f1:82:3a:2b:71:f6:83:36:
         5c:89:6a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:22:34 2026 by rpki-client