This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/216DB034DE9711EC9289256FC4F9AE02.roa
File:                     216DB034DE9711EC9289256FC4F9AE02.roa (raw, json)
Hash identifier:          wYrjUP6ABXM9BKVFoyMoT84PmJsIQ6eyebTIC1QQGZ0=
Subject key identifier:   B2:B6:E9:75:73:A5:79:B6:CA:E3:EA:C0:E1:B8:C0:19:CE:0F:08:B5
Certificate issuer:       /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Certificate serial:       04B6
Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/216DB034DE9711EC9289256FC4F9AE02.roa
Signing time:             Fri 05 Dec 2025 00:25:00 +0000
ROA not before:           Fri 05 Dec 2025 00:25:00 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     136526
IP address blocks:        103.254.72.0/22 maxlen: 22
                          103.254.74.0/24 maxlen: 24
                          192.51.188.0/24 maxlen: 24
                          204.52.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206 (0x4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
        Validity
            Not Before: Dec  5 00:25:00 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6932265c-b064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:78:28:dd:83:c6:b9:5e:54:09:ae:89:93:
                    8f:0f:63:bf:f5:e6:8e:ac:db:4d:c9:3d:59:0d:12:
                    68:c4:1c:ef:10:2e:50:d5:e6:44:41:c6:49:7f:60:
                    6a:a2:f4:59:95:84:d0:8f:0f:d1:18:a9:d5:57:42:
                    80:8c:5d:19:47:26:71:79:ad:ae:d7:b3:09:45:81:
                    19:78:0f:41:dd:f5:5d:52:ba:93:4b:67:6b:d3:2b:
                    21:7c:b0:78:f0:35:13:42:78:03:6b:da:83:26:80:
                    72:d7:2b:c1:06:67:98:2d:7e:39:79:82:36:3e:f2:
                    d7:db:83:61:4c:62:fb:3d:36:b6:da:ae:27:51:56:
                    c9:a1:b0:3f:23:5e:c4:c2:17:f1:03:f3:91:ae:7e:
                    b5:a7:e8:92:93:0a:6a:d3:b4:81:2d:43:12:cc:ee:
                    b8:f1:c4:76:09:92:23:00:ec:d5:19:f8:05:16:00:
                    ac:87:e5:29:c1:70:5c:01:ae:f2:18:a7:e8:3e:5a:
                    88:f0:f2:eb:3c:ff:17:8b:4e:16:0f:64:ba:04:05:
                    bc:ae:7e:64:82:0b:45:5f:64:72:c4:96:60:dd:c1:
                    0c:41:57:4c:3a:e1:43:9d:85:26:0a:0e:aa:c4:1c:
                    5c:15:49:93:a6:01:5f:a7:b4:c3:a9:a3:27:6e:35:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B6:E9:75:73:A5:79:B6:CA:E3:EA:C0:E1:B8:C0:19:CE:0F:08:B5
            X509v3 Authority Key Identifier:
                keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/216DB034DE9711EC9289256FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.72.0/22
                  192.51.188.0/24
                  204.52.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:72:fb:89:e8:3d:0f:0d:60:60:89:bc:f4:37:23:4a:3e:ca:
         29:1e:cc:0f:91:47:b1:a3:73:74:92:41:98:7a:18:c7:ce:f4:
         0c:d4:44:28:2d:32:46:e0:2e:be:75:66:1a:73:2d:43:7f:69:
         6e:a4:3a:ec:72:2e:40:56:58:27:0c:c7:d0:71:56:76:96:a4:
         9c:3f:32:c7:26:b9:62:24:a4:15:13:13:e1:68:d4:a6:71:76:
         14:9f:04:a8:d1:e9:be:9e:b2:28:c1:46:ee:44:03:5a:4f:a7:
         e8:ba:8c:de:70:75:93:64:72:9d:6e:79:1e:83:b6:96:67:82:
         8f:76:b3:8e:64:1c:9f:99:c7:98:33:3f:21:54:03:4b:22:31:
         ba:16:c7:e8:31:24:fa:e0:ac:87:98:e8:f4:b7:c9:84:a4:ba:
         ce:dd:da:5e:9f:1f:58:48:81:8a:7d:f4:c9:c0:71:11:26:60:
         c9:df:2d:31:5e:18:84:f5:83:f5:63:ac:80:8f:7f:4c:31:48:
         d7:af:c5:6d:fb:d2:3c:f0:a3:c6:e2:08:9c:ff:30:81:1e:72:
         b8:77:d9:64:d6:b9:06:f6:34:8e:ef:c4:20:79:dd:f6:14:10:
         f5:5c:df:d7:b3:f8:eb:7a:ec:14:d4:01:71:3d:5a:af:93:02:
         8a:96:e6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:43:52 2025 by rpki-client