This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/091435C84FA911EFB86F4D40C4F9AE02.roa
File:                     091435C84FA911EFB86F4D40C4F9AE02.roa (raw, json)
Hash identifier:          UDYOsBhZuGxPbiC3JStIpRl29abp1z9bfR4dnN93V5Q=
Subject key identifier:   09:AC:F5:8B:A6:DB:23:67:C1:92:37:B1:E9:75:E7:F1:46:19:95:D5
Certificate issuer:       /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Certificate serial:       16F4
Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/091435C84FA911EFB86F4D40C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 16:45:48 +0000
ROA not before:           Thu 04 Dec 2025 16:45:48 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139021
IP address blocks:        43.224.152.0/22 maxlen: 24
                          103.43.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5876 (0x16f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CE8, serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
        Validity
            Not Before: Dec  4 16:45:48 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6931babb-8386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:9c:a7:c2:c4:b8:21:e0:c1:b1:c7:58:28:
                    fd:d6:46:95:ac:b0:e6:73:cc:98:0e:60:18:11:2b:
                    cf:fa:b4:0c:b9:48:dd:87:c7:52:b2:27:3a:67:e0:
                    06:27:64:b2:81:38:af:9f:dc:0c:74:67:24:0b:12:
                    09:92:42:d5:7d:aa:99:5e:20:b5:26:62:40:a4:5b:
                    f1:25:a2:8f:2d:a5:f6:fa:2d:ba:e5:08:4c:f8:23:
                    4c:e9:3e:72:59:62:98:6f:40:4a:e9:90:34:e2:63:
                    88:62:a6:81:e0:79:63:60:c9:38:74:2e:2a:7c:56:
                    9e:0d:37:03:53:d0:1f:e2:35:45:20:c1:df:a2:6a:
                    3f:0f:a4:7e:43:23:0c:9b:a8:4f:07:e8:ae:b1:b0:
                    c2:e6:51:cb:66:47:ca:78:e1:96:62:a4:01:1a:b5:
                    e0:ad:86:42:f0:03:b3:44:f3:6b:2d:cc:75:6b:ab:
                    97:9f:06:69:c7:be:9c:19:be:2d:08:9e:29:ce:b1:
                    54:4e:82:a3:1c:e2:c3:34:47:d5:12:84:ca:f5:e8:
                    50:b1:d3:b6:b8:64:e2:2b:98:32:33:2b:18:92:20:
                    5a:e7:8f:ca:88:ad:db:67:26:83:7a:46:e1:a3:ee:
                    08:1c:40:1c:02:87:95:37:40:ff:ed:47:a7:0c:fc:
                    61:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AC:F5:8B:A6:DB:23:67:C1:92:37:B1:E9:75:E7:F1:46:19:95:D5
            X509v3 Authority Key Identifier:
                keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/091435C84FA911EFB86F4D40C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.224.152.0/22
                  103.43.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:9d:33:0b:fc:d4:26:c6:8e:60:35:66:6f:7b:29:da:32:e4:
         20:30:6e:22:88:5e:db:f7:41:f5:f6:31:84:9c:3a:38:0a:87:
         ab:fb:e0:ff:01:80:f3:c0:bf:cf:ce:7d:05:81:ae:0f:b6:da:
         83:75:e5:22:1b:59:cd:f1:f9:dd:2c:24:8b:36:99:cc:d0:f4:
         f0:ee:3f:c0:54:a7:e4:92:41:ab:dd:60:99:86:9c:e3:f9:66:
         f4:a6:42:79:d2:08:26:e7:03:5e:82:aa:12:a4:2b:31:c0:c7:
         45:b3:5c:70:7a:d8:00:47:b0:e4:e7:2a:d5:db:25:7e:f7:80:
         9d:ba:7e:3d:20:83:d5:c1:4a:a5:72:dc:e5:30:88:ad:93:d2:
         3d:40:23:8b:c0:5e:08:56:54:be:49:97:dd:47:6a:78:4f:88:
         cb:18:75:4a:b4:6e:d7:d0:38:2e:c6:3e:30:12:f4:c6:4a:01:
         8d:39:36:fa:b0:6a:53:33:ca:cf:1a:15:16:c3:32:4c:a0:7a:
         f7:f3:66:47:0c:1f:9b:ea:95:4b:85:92:0f:5b:12:eb:63:13:
         20:85:0f:6c:a2:4a:ed:9f:c1:ba:e4:79:3e:1b:7d:ee:63:3f:
         76:ff:a2:0c:92:11:39:19:2b:0d:0b:8c:5f:11:c7:75:bc:a2:
         cd:73:e3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:45:52 2025 by rpki-client