This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/EFFA034837D111EC9337B812C4F9AE02.roa
File:                     EFFA034837D111EC9337B812C4F9AE02.roa (raw, json)
Hash identifier:          eOzDGtd2FPhdJliCdckHnz758nq276hv9KBB5yuJrEs=
Subject key identifier:   E5:A6:FF:48:DF:0D:38:E8:CC:9E:4C:56:B9:78:4B:67:2E:A5:D5:B0
Certificate issuer:       /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial:       052C
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/EFFA034837D111EC9337B812C4F9AE02.roa
Signing time:             Sun 30 Nov 2025 22:55:17 +0000
ROA not before:           Sun 30 Nov 2025 22:55:17 +0000
ROA not after:            Mon 30 Mar 2026 00:00:00 +0000
asID:                     58715
IP address blocks:        103.174.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1324 (0x52c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
        Validity
            Not Before: Nov 30 22:55:17 2025 GMT
            Not After : Mar 30 00:00:00 2026 GMT
        Subject: CN=692ccb55-2b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b0:45:5a:05:58:10:22:68:1c:58:c8:99:9f:
                    29:02:9e:4a:f5:bc:9e:57:d0:c5:8f:95:a8:c1:91:
                    e7:20:3e:e0:50:05:79:2e:01:37:95:66:30:f2:7b:
                    a6:67:c5:76:71:c7:b9:23:fa:70:3b:fa:e5:dd:e8:
                    af:17:d4:84:3e:f4:d3:c2:2c:60:29:c7:aa:40:66:
                    4d:c0:09:c5:18:6b:9d:1f:7b:01:b6:73:6f:30:69:
                    10:58:1f:93:4c:79:5d:a9:66:9b:e4:68:6e:8e:16:
                    cb:bc:34:d5:6b:87:1d:8b:56:1f:25:34:98:6c:20:
                    15:fe:42:23:52:0d:1f:9c:fb:d1:fe:44:3a:f1:a0:
                    b5:c3:bf:8b:24:bf:b8:d6:01:cd:3c:b8:59:ba:77:
                    c2:33:93:71:7f:81:96:97:3e:88:d1:00:a2:3b:9b:
                    5b:05:dc:bf:46:fd:54:d7:41:da:84:62:62:3c:1c:
                    d5:da:71:32:1e:f4:24:44:99:65:55:7a:5b:c4:71:
                    bb:aa:81:49:d2:0e:7c:71:d5:1b:81:35:e6:45:79:
                    fa:2d:5e:c6:b0:48:84:73:2e:e8:a9:1b:c0:0c:b3:
                    22:d4:b5:0a:ac:35:c6:73:39:bd:3f:8a:9a:7c:b5:
                    bc:e1:3d:3b:62:1b:f6:01:80:3e:73:97:c3:27:01:
                    72:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A6:FF:48:DF:0D:38:E8:CC:9E:4C:56:B9:78:4B:67:2E:A5:D5:B0
            X509v3 Authority Key Identifier:
                keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/EFFA034837D111EC9337B812C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:f9:a0:d9:ce:46:ef:5a:03:0b:24:a7:78:64:42:38:07:15:
         e7:89:b4:df:12:f3:16:c9:f5:44:8b:00:7e:35:dd:21:f2:aa:
         f1:c9:8d:5e:de:a1:06:99:23:f7:1d:2c:d7:02:91:20:b5:a6:
         f6:1a:ff:09:41:5c:91:fc:3c:48:23:67:3d:02:b8:ae:0f:27:
         3a:54:b3:b6:a8:73:e3:7d:96:6c:06:ec:03:15:72:e3:68:89:
         ac:2b:ae:77:96:88:a4:c4:44:e4:4b:f7:c1:f3:93:e0:2c:dd:
         f7:c4:3b:25:47:56:38:1c:8e:ca:24:b3:b2:6c:29:34:bc:fa:
         3e:50:38:f5:ca:11:51:e0:90:88:cc:e9:02:45:37:c0:dd:6c:
         4a:6f:48:61:c0:fa:09:60:b2:4e:e6:58:f2:13:b2:00:6e:77:
         42:00:f7:5c:82:7f:9d:70:00:af:44:32:db:50:dc:5c:9d:41:
         cd:66:e0:3f:af:16:95:e4:21:48:e2:10:96:9b:05:75:c1:4d:
         c2:00:81:88:0c:51:6e:16:fa:cc:3c:a5:07:5a:3f:b2:ea:c1:
         c8:27:bd:e7:48:cf:5f:bc:eb:4c:e6:23:13:f6:2b:1c:f0:85:
         8c:7a:92:96:4a:84:5d:f8:d0:ab:e3:1a:0d:cd:fd:f8:ae:71:
         60:21:32:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:33 2025 by rpki-client