This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/5EAA75CC28E511F0BE4DF317C4F9AE02.roa
File:                     5EAA75CC28E511F0BE4DF317C4F9AE02.roa (raw, json)
Hash identifier:          UPMPKRsc2hV5JHHuE9pFh4JOQF+bzX7eP0KzlGdFT7Y=
Subject key identifier:   7B:30:80:E5:FC:DB:C9:13:DF:01:97:52:63:C9:C0:2C:7E:43:C0:B3
Certificate issuer:       /CN=A91E4DFA/serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8
Certificate serial:       0554
Authority key identifier: 20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/5EAA75CC28E511F0BE4DF317C4F9AE02.roa
Signing time:             Sun 30 Nov 2025 22:25:08 +0000
ROA not before:           Sun 30 Nov 2025 22:25:08 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     59332
IP address blocks:        103.173.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl
                          rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1364 (0x554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4DFA, serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8
        Validity
            Not Before: Nov 30 22:25:08 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=692cc444-47f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:da:fd:5e:31:b6:60:19:ab:22:6c:4a:f7:
                    b0:77:a9:6f:98:f0:e2:45:e6:91:c5:48:3f:64:5a:
                    8a:43:6e:95:83:cd:34:48:c4:d4:fa:26:20:69:1d:
                    69:6d:dc:c4:77:d0:54:50:fa:ac:a4:2d:52:6a:4e:
                    b4:51:07:00:61:f8:c5:00:65:8d:54:86:d8:ba:19:
                    f7:61:9e:16:c9:be:ab:b7:74:07:70:a0:21:dd:7b:
                    ef:d7:8d:26:2e:0d:cc:e5:08:32:e3:70:8a:96:03:
                    79:04:57:3d:38:0d:99:07:aa:32:be:1f:75:aa:00:
                    bc:0d:99:92:59:ae:24:32:16:97:f3:1d:d9:77:b1:
                    b7:09:05:10:ab:6f:c8:3c:da:92:90:a3:a7:2f:07:
                    54:44:81:37:79:af:cc:52:86:1f:36:c5:ba:f9:39:
                    33:be:29:d5:99:2f:ed:9f:43:2d:19:29:2e:16:58:
                    c7:2e:d8:dd:7d:de:c2:31:e7:72:7f:47:2b:f2:5a:
                    ac:68:0c:dc:5a:2b:2a:96:7d:18:d9:12:6d:54:be:
                    03:19:d6:ff:61:9d:f1:b9:27:be:52:36:5f:f1:18:
                    21:86:6d:60:25:6a:32:73:93:dd:1f:df:f3:42:3d:
                    fa:17:97:30:78:71:c3:d9:97:1a:1c:d0:d1:35:a9:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:30:80:E5:FC:DB:C9:13:DF:01:97:52:63:C9:C0:2C:7E:43:C0:B3
            X509v3 Authority Key Identifier:
                keyid:20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/5EAA75CC28E511F0BE4DF317C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:60:74:b9:8b:37:11:ad:e3:3d:e4:e7:0c:0b:25:e5:d6:1b:
         29:01:ef:5f:b0:96:53:71:ae:fd:67:61:48:de:21:b6:32:99:
         a9:c2:1b:fa:ac:ca:93:66:c1:cb:c7:bb:1a:a3:f0:6a:ba:11:
         d1:74:a3:70:e8:7b:b7:fb:1d:2a:ec:bc:1a:09:11:4f:7c:8c:
         6f:e2:b3:4a:ba:73:47:9f:e9:f7:24:5c:1a:05:b3:1b:d8:25:
         75:e7:e1:74:e0:9b:3b:60:76:9f:9a:0b:f4:ef:5e:18:97:8f:
         51:f4:d3:76:0c:cb:a4:95:37:45:c8:71:6e:24:ae:9c:12:3a:
         47:d4:62:a8:36:64:b9:80:f9:f3:d2:d8:47:13:5d:c1:4d:3e:
         b3:74:20:61:78:b3:6e:82:12:87:a0:91:ca:fd:ea:94:c6:cd:
         30:de:5b:6b:c3:af:02:71:86:71:cc:d6:dc:dd:f8:10:90:8e:
         03:8c:7a:d1:9e:b0:c2:44:6c:67:38:9b:43:4c:fb:52:03:ed:
         d9:68:01:82:df:59:64:8f:55:73:2c:3a:02:4f:d2:c6:7a:25:
         93:4b:79:24:9a:a9:be:6f:d8:75:12:a4:00:2e:6a:b5:83:86:
         93:a8:e7:47:04:5d:a1:f0:83:d4:76:28:62:3b:94:57:83:e8:
         27:16:7f:d4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRERkExMTAvBgNVBAUTKDIwNzhBRDVCQkRGMUQ0QzVCOTcwQkJFMjkzNEQ5QTM1
NURCMzFDRTgwHhcNMjUxMTMwMjIyNTA4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJjYzQ0NC00N2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtYza/V4xtmAZqyJsSvewd6lvmPDiReaRxUg/ZFqKQ26Vg800SMTU+iYgaR1p
bdzEd9BUUPqspC1Sak60UQcAYfjFAGWNVIbYuhn3YZ4Wyb6rt3QHcKAh3Xvv140m
Lg3M5Qgy43CKlgN5BFc9OA2ZB6oyvh91qgC8DZmSWa4kMhaX8x3Zd7G3CQUQq2/I
PNqSkKOnLwdURIE3ea/MUoYfNsW6+TkzvinVmS/tn0MtGSkuFljHLtjdfd7CMedy
f0cr8lqsaAzcWisqln0Y2RJtVL4DGdb/YZ3xuSe+UjZf8Rghhm1gJWoyc5PdH9/z
Qj36F5cweHHD2ZcaHNDRNan0NQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHswgOX8
28kT3wGXUmPJwCx+Q8CzMB8GA1UdIwQYMBaAFCB4rVu98dTFuXC74pNNmjVdsxzo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNERGQS84NDU5ODRDRTFB
ODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFNVzVjTHZpazAyYU5WMnpI
T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lIaXRXNzN4MU1XNWNMdmlrMDJhTlYyekhPZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTRERkEvODQ1OTg0Q0UxQTg1MTFFQ0E3NkFFQTNBQzRGOUFFMDIvNUVBQTc1Q0My
OEU1MTFGMEJFNERGMzE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnrVQwDQYJKoZIhvcNAQELBQADggEBAEtgdLmLNxGt4z3k
5wwLJeXWGykB71+wllNxrv1nYUjeIbYymanCG/qsypNmwcvHuxqj8Gq6EdF0o3Do
e7f7HSrsvBoJEU98jG/is0q6c0ef6fckXBoFsxvYJXXn4XTgmztgdp+aC/TvXhiX
j1H003YMy6SVN0XIcW4krpwSOkfUYqg2ZLmA+fPS2EcTXcFNPrN0IGF4s26CEoeg
kcr96pTGzTDeW2vDrwJxhnHM1tzd+BCQjgOMetGesMJEbGc4m0NM+1ID7dloAYLf
WWSPVXMsOgJP0sZ6JZNLeSSaqb5v2HUSpAAuarWDhpOo50cEXaHwg9R2KGI7lFeD
6CcWf9Q=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:21:51 2025 by rpki-client