This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0924D0ECD0D911F0A477AC13C4F9AE02.roa
File:                     0924D0ECD0D911F0A477AC13C4F9AE02.roa (raw, json)
Hash identifier:          Oa4/pL6mate4/mT6OtNHwUEinPBEepgQVz1P/q06EsA=
Subject key identifier:   A5:32:9A:7B:FB:FF:51:86:65:32:0A:5F:F4:53:12:3D:0E:CE:C3:33
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2B14
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0924D0ECD0D911F0A477AC13C4F9AE02.roa
Signing time:             Fri 05 Dec 2025 12:56:36 +0000
ROA not before:           Fri 05 Dec 2025 12:56:36 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     397373
IP address blocks:        113.203.248.0/22 maxlen: 24
                          115.167.96.0/22 maxlen: 22
                          115.167.101.0/24 maxlen: 24
                          115.167.103.0/24 maxlen: 24
                          115.167.104.0/22 maxlen: 22
                          175.110.64.0/24 maxlen: 24
                          175.110.66.0/24 maxlen: 24
                          175.110.80.0/24 maxlen: 24
                          175.110.82.0/24 maxlen: 24
                          202.92.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11028 (0x2b14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Dec  5 12:56:36 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6932d684-1abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:4c:22:99:3f:12:69:ba:46:26:e6:ad:39:
                    b1:34:41:08:c4:f7:e7:dc:d5:78:a0:c5:c4:c6:e4:
                    6b:44:66:80:ff:cd:ef:ab:26:3f:51:2d:58:ee:c4:
                    09:c0:fa:bb:d7:39:56:46:19:a5:d5:37:71:e2:f7:
                    b8:e6:d6:62:a4:f5:10:3a:05:e6:6f:13:ad:d9:2f:
                    13:f7:c2:79:3a:5f:17:1b:60:b2:7f:eb:a8:42:ee:
                    ef:eb:4c:8d:9a:88:b7:6b:08:27:18:00:62:7e:5e:
                    ec:43:30:e1:1f:ab:e0:54:e1:5c:aa:a5:80:6f:af:
                    77:00:a4:a1:5a:f1:37:dc:63:51:e1:25:3a:a0:23:
                    35:12:4a:9c:1a:64:38:ab:8b:5b:50:2e:25:4e:23:
                    a4:7a:a3:55:5a:4f:53:12:b4:eb:e7:7c:89:f9:45:
                    0c:91:f6:85:ea:75:84:a7:0d:8a:77:0c:56:6b:65:
                    8e:09:ca:30:dd:3b:60:d0:ca:15:28:e7:9a:27:71:
                    ba:18:ba:70:65:3a:00:ab:ba:c6:38:02:5f:ba:a2:
                    95:7b:16:a4:53:6a:18:93:23:d0:df:b2:87:af:c7:
                    83:01:58:26:73:f5:d0:39:a9:dd:26:40:9d:75:bf:
                    f8:7a:8d:26:b9:2b:42:e5:1e:14:8c:8f:67:25:b2:
                    4d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:32:9A:7B:FB:FF:51:86:65:32:0A:5F:F4:53:12:3D:0E:CE:C3:33
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0924D0ECD0D911F0A477AC13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.248.0/22
                  115.167.96.0/22
                  115.167.101.0/24
                  115.167.103.0-115.167.107.255
                  175.110.64.0/24
                  175.110.66.0/24
                  175.110.80.0/24
                  175.110.82.0/24
                  202.92.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:3e:13:d8:a9:66:fa:88:87:cb:6b:62:28:b6:5e:59:c7:e2:
         04:c6:34:e5:e6:8e:ac:7a:67:19:a1:c1:21:e0:e1:1d:7b:63:
         c9:20:e3:ad:00:c5:5f:b4:81:68:ad:6d:33:f2:46:df:02:f7:
         07:bc:10:94:3a:5f:1e:2d:b5:d6:9b:40:ac:50:57:9e:55:d8:
         09:30:71:16:ee:23:cf:18:55:10:06:1d:52:ff:bd:d9:59:48:
         ef:8f:ca:aa:ab:03:1f:8d:07:55:89:e3:57:e5:cb:ed:d6:11:
         7c:4b:d6:fb:40:10:20:b3:c1:de:3c:1f:9a:81:50:68:dd:96:
         41:48:f8:60:a5:1a:4d:94:02:85:13:2e:30:6f:93:d3:32:87:
         58:42:06:f7:fc:ec:4b:75:bb:03:38:4f:44:05:4f:07:77:5b:
         a0:99:ed:9c:30:21:c7:30:73:0b:2e:7d:0e:5b:de:cb:a0:d2:
         86:d5:a0:cf:2e:3b:fc:87:a1:b6:57:7f:d8:dc:a8:c1:e2:87:
         31:26:51:b3:ad:93:dc:58:48:5b:96:85:ef:26:09:78:76:bd:
         36:1b:e3:5c:22:10:84:ac:30:4c:45:49:82:9a:58:25:fe:9c:
         ed:b3:05:34:16:70:c6:64:55:98:f0:e8:10:aa:01:66:06:a7:
         ad:eb:ce:19
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgICKxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjUxMjA1MTI1NjM2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMyZDY4NC0xYWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn5hMIpk/Emm6RibmrTmxNEEIxPfn3NV4oMXExuRrRGaA/83vqyY/US1Y7sQJ
wPq71zlWRhml1Tdx4ve45tZipPUQOgXmbxOt2S8T98J5Ol8XG2Cyf+uoQu7v60yN
moi3awgnGABifl7sQzDhH6vgVOFcqqWAb693AKShWvE33GNR4SU6oCM1EkqcGmQ4
q4tbUC4lTiOkeqNVWk9TErTr53yJ+UUMkfaF6nWEpw2KdwxWa2WOCcow3Ttg0MoV
KOeaJ3G6GLpwZToAq7rGOAJfuqKVexakU2oYkyPQ37KHr8eDAVgmc/XQOandJkCd
db/4eo0muStC5R4UjI9nJbJNNwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFKUymnv7
/1GGZTIKX/RTEj0OzsMzMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMDkyNEQwRUNE
MEQ5MTFGMEE0NzdBQzEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVwYIKwYBBQUHAQcBAf8E
SDBGMEQEAgABMD4DBAJxy/gDBAJzp2ADBABzp2UwDAMEAHOnZwMEAnOnaAMEAK9u
QAMEAK9uQgMEAK9uUAMEAK9uUgMEAMpcFDANBgkqhkiG9w0BAQsFAAOCAQEAdj4T
2Klm+oiHy2tiKLZeWcfiBMY05eaOrHpnGaHBIeDhHXtjySDjrQDFX7SBaK1tM/JG
3wL3B7wQlDpfHi211ptArFBXnlXYCTBxFu4jzxhVEAYdUv+92VlI74/KqqsDH40H
VYnjV+XL7dYRfEvW+0AQILPB3jwfmoFQaN2WQUj4YKUaTZQChRMuMG+T0zKHWEIG
9/zsS3W7AzhPRAVPB3dboJntnDAhxzBzCy59Dlvey6DShtWgzy47/Iehtld/2Nyo
weKHMSZRs62T3FhIW5aF7yYJeHa9NhvjXCIQhKwwTEVJgppYJf6c7bMFNBZwxmRV
mPDoEKoBZganrevOGQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:17:52 2025 by rpki-client