This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/B9D90E00606311EE8844F941C4F9AE02.roa
File:                     B9D90E00606311EE8844F941C4F9AE02.roa (raw, json)
Hash identifier:          aAr/AU8IFNUmMq34qwhN3m6rQAbT8ihXICsQVftRUXU=
Subject key identifier:   AF:05:C5:00:3C:BC:E2:D4:B2:86:A8:60:B8:A9:BC:A5:51:2F:DF:C6
Certificate issuer:       /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Certificate serial:       054C
Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/B9D90E00606311EE8844F941C4F9AE02.roa
Signing time:             Sun 30 Nov 2025 22:25:17 +0000
ROA not before:           Sun 30 Nov 2025 22:25:17 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     211949
IP address blocks:        103.173.126.0/24 maxlen: 24
                          103.173.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
                          rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E83FE, serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
        Validity
            Not Before: Nov 30 22:25:17 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=692cc44c-8c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f4:0d:b8:3a:f6:c4:73:af:0f:af:37:db:2a:
                    d7:ff:04:38:29:72:a8:0c:7f:13:f1:24:cf:00:61:
                    0a:a4:00:e8:01:20:0b:38:38:e3:ae:83:5b:39:f0:
                    89:d5:91:85:82:0a:bc:4d:8c:45:f0:ba:77:53:ca:
                    df:e8:d0:81:1d:a5:7a:5f:b7:aa:b6:29:69:32:3b:
                    99:44:e5:fe:0a:03:ae:5c:c6:08:46:96:87:4d:eb:
                    90:4c:38:d6:02:95:df:81:40:c9:4d:2c:05:b2:54:
                    74:9d:9c:b8:ab:54:4d:b9:ad:17:be:e9:a2:85:a9:
                    ed:18:ef:bb:34:c2:a6:21:4b:04:aa:f3:4b:0c:86:
                    8b:2f:5d:d4:9b:56:4f:16:04:f3:b0:37:a1:43:6c:
                    5b:5e:23:55:6d:f8:f6:56:bd:a0:99:21:9d:fc:de:
                    88:13:2f:38:14:2a:79:e9:54:c4:62:9a:d9:34:33:
                    b9:3e:de:cd:30:96:9d:6b:80:34:40:3c:9c:dc:c8:
                    cf:3d:f3:8c:e1:e4:09:33:a5:7b:1c:9c:5c:89:e1:
                    53:45:40:ec:45:f5:f1:be:fb:4c:ef:52:8b:be:1c:
                    6a:ab:e5:6a:cf:90:59:84:7b:60:31:63:98:54:42:
                    15:1b:e0:26:8d:1f:09:b8:c3:3b:00:8f:a4:ee:6b:
                    21:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:05:C5:00:3C:BC:E2:D4:B2:86:A8:60:B8:A9:BC:A5:51:2F:DF:C6
            X509v3 Authority Key Identifier:
                keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/B9D90E00606311EE8844F941C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:c9:62:02:b3:1f:20:05:fc:e3:bb:5f:30:f8:75:03:56:89:
         e5:7f:2a:49:c5:bf:69:cb:ee:25:3f:5d:1e:2a:e9:8b:28:4c:
         db:92:3c:6f:b8:73:e9:7e:ae:31:5f:0f:05:44:74:c7:a2:3f:
         28:f6:26:03:31:da:74:3c:1b:71:9c:cb:57:39:b0:44:ba:3a:
         65:bb:bb:b2:ed:af:4d:0b:5e:be:47:7b:d0:5d:46:d5:12:82:
         c0:12:1c:40:86:50:65:2f:1f:3d:3d:ea:bd:fe:e8:ad:ca:3a:
         47:5c:51:77:2b:88:a3:0c:9e:9f:61:37:f9:cc:72:0f:ef:a7:
         45:89:bc:be:30:f1:85:e3:e4:2e:a3:e8:b5:86:5d:bc:8b:49:
         ad:45:b1:30:53:a3:d6:fb:e0:9f:2c:72:1a:16:58:eb:73:7a:
         b9:99:3b:f6:09:a3:b3:b6:b7:b1:cc:88:60:99:49:e8:8d:09:
         f5:54:f7:a0:a1:f6:ae:92:33:75:d7:ae:58:a9:3f:e0:a5:bc:
         30:31:c3:e4:87:9a:d9:31:2c:0e:1f:41:a5:a9:ac:63:64:d2:
         0f:50:f5:e5:24:f1:d8:3b:90:c2:45:e4:62:25:d7:9a:da:1a:
         c7:20:11:64:98:4c:ac:18:7e:f5:54:f8:5f:9c:c8:5c:a8:b2:
         76:b3:88:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:30:51 2025 by rpki-client