This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/9C581C28B07511EF9D153813C4F9AE02.roa
File:                     9C581C28B07511EF9D153813C4F9AE02.roa (raw, json)
Hash identifier:          USbezzx4u+HcyowHtZXvIGxC9833a2cIPADsDabhgHE=
Subject key identifier:   B0:C6:64:2C:C7:3E:7A:F7:68:6A:EF:99:E7:C1:F1:69:44:D5:30:49
Certificate issuer:       /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial:       052A
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/9C581C28B07511EF9D153813C4F9AE02.roa
Signing time:             Sun 30 Nov 2025 22:55:15 +0000
ROA not before:           Sun 30 Nov 2025 22:55:15 +0000
ROA not after:            Mon 30 Mar 2026 00:00:00 +0000
asID:                     137453
IP address blocks:        103.174.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
        Validity
            Not Before: Nov 30 22:55:15 2025 GMT
            Not After : Mar 30 00:00:00 2026 GMT
        Subject: CN=692ccb53-09ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:fd:56:e8:7a:38:d7:7c:0a:5c:1e:95:20:
                    90:1f:20:72:b3:eb:fa:e5:46:ec:56:a0:20:02:6d:
                    28:05:5b:04:45:f8:33:6b:c5:80:6f:11:cf:bb:22:
                    10:35:9a:94:28:a6:7f:91:34:66:f2:8d:a5:cb:b3:
                    8c:ac:4b:ef:a2:79:0c:17:33:17:a4:0a:43:f5:e3:
                    49:3c:88:52:a8:63:d6:8a:9f:fe:21:eb:09:0a:43:
                    b5:88:24:92:00:56:0d:66:17:91:34:03:e2:14:45:
                    33:79:ae:dc:52:68:3b:d6:f5:d7:9c:be:4f:c1:f3:
                    a1:6b:f7:cc:1e:e2:6b:7e:64:9b:c1:15:cc:e9:8a:
                    4e:2d:46:37:f0:fa:5b:eb:2e:17:6b:ef:e7:42:75:
                    fb:c0:ba:24:e5:7e:fb:96:67:0b:ea:be:b4:6f:36:
                    f8:17:ad:03:bd:22:1a:05:cd:b4:df:f2:fb:27:a7:
                    23:c2:ef:86:6e:57:10:66:89:85:23:2f:dd:49:57:
                    e9:fb:98:27:16:e5:a4:3e:48:39:ac:4b:69:cd:5e:
                    ca:05:a4:32:0e:92:15:3f:61:64:84:e8:75:8d:b7:
                    1c:50:35:cc:20:36:0e:05:d3:ce:84:22:ff:7b:f9:
                    82:c6:aa:1e:4b:7f:b6:3f:b1:30:e5:dc:41:d1:4e:
                    53:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C6:64:2C:C7:3E:7A:F7:68:6A:EF:99:E7:C1:F1:69:44:D5:30:49
            X509v3 Authority Key Identifier:
                keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/9C581C28B07511EF9D153813C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:aa:7b:86:50:8c:ff:d9:b5:b9:65:cf:2f:cb:3d:c1:67:47:
         83:80:51:0d:00:8b:29:99:69:30:bb:1a:e8:98:c5:9f:95:af:
         42:57:cf:f4:ff:5b:5a:76:92:92:b8:fd:a1:c8:2a:fa:0a:86:
         1d:95:84:ea:97:78:17:4f:0f:09:93:f0:de:59:68:6d:1c:8c:
         cf:d0:fa:e1:9a:13:09:b3:73:4a:aa:a6:81:bd:5a:85:8c:7a:
         35:37:e9:d1:76:4b:9c:f7:58:2a:3d:0a:a9:b9:df:7c:3d:4c:
         bd:85:c7:3d:85:0c:ef:48:4f:f8:28:c2:5f:ea:54:c3:35:a9:
         44:3f:cb:a3:79:c9:d7:61:34:cf:c2:02:3e:73:c9:2a:6e:fb:
         cd:43:91:ea:c8:41:35:4d:6f:5c:5a:3a:b8:5f:dc:ba:50:b0:
         16:b6:82:f1:65:13:03:ed:d7:1c:50:04:b7:4e:58:66:ef:e3:
         80:fc:28:43:94:0c:9c:7f:ba:c5:62:be:a2:e3:a6:f6:63:53:
         7c:ac:35:ad:af:db:50:70:ff:84:a4:30:02:74:1f:94:b2:32:
         dd:0d:aa:f6:ec:4e:a4:59:97:4b:c5:b2:5b:d1:58:f5:49:40:
         97:ee:30:69:f6:33:98:a4:9d:38:30:cc:67:69:b8:cb:a1:3b:
         b5:ab:08:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:57:31 2025 by rpki-client