This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1E7F6B9603C211EEB2272068C4F9AE02.roa
File:                     1E7F6B9603C211EEB2272068C4F9AE02.roa (raw, json)
Hash identifier:          CgPVH7RpJ6BSzRb9lg98xN/+D/HPQDxzXfJap9UMvCY=
Subject key identifier:   FE:F1:1B:87:31:14:98:9A:27:9C:AF:59:D1:3D:AA:75:96:3B:4C:EF
Certificate issuer:       /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131
Certificate serial:       01DE
Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1E7F6B9603C211EEB2272068C4F9AE02.roa
Signing time:             Sun 23 Nov 2025 01:18:48 +0000
ROA not before:           Sun 23 Nov 2025 01:18:48 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137420
IP address blocks:        103.197.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 01:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131
        Validity
            Not Before: Nov 23 01:18:48 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692260f8-500c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:46:50:4a:50:98:2c:bb:65:47:77:51:a3:
                    aa:90:ea:77:85:ba:9c:67:ba:7d:83:8f:73:12:65:
                    df:d5:8f:ca:fa:16:5d:0d:72:91:49:13:43:13:3c:
                    0d:2e:7b:9c:6d:64:cb:e3:22:ff:8d:1c:fb:61:31:
                    47:58:5e:5e:6e:b1:16:31:62:b6:6a:47:4c:98:75:
                    f1:3f:95:49:7b:55:76:a0:3a:1f:8c:8f:3e:27:2a:
                    d2:cb:a2:28:d1:71:b9:a7:11:16:dd:53:4e:d4:78:
                    7d:fd:39:b9:57:46:f0:14:f6:5f:84:95:e1:e2:6c:
                    04:91:e8:65:c4:77:1a:ab:4f:69:e1:65:70:8b:ae:
                    b0:31:b3:8b:59:c0:97:b4:e6:c3:6d:9c:08:e4:1d:
                    76:3d:86:b4:c2:ef:59:26:b8:aa:38:f9:c7:9a:c9:
                    47:89:05:95:4e:a1:40:dc:88:52:4a:b1:25:86:ca:
                    52:e6:7f:09:a8:10:78:2e:3c:95:5f:0e:a8:89:70:
                    fb:8a:c3:cc:bd:37:ff:25:3b:38:94:07:a7:5c:0a:
                    5c:3f:09:cc:8b:9f:11:3e:95:aa:24:98:9d:37:9f:
                    28:60:f2:82:44:e1:d7:40:f0:b7:54:4a:9c:5a:3e:
                    3d:83:39:f6:9d:a5:95:e0:05:79:85:12:63:b8:ed:
                    09:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F1:1B:87:31:14:98:9A:27:9C:AF:59:D1:3D:AA:75:96:3B:4C:EF
            X509v3 Authority Key Identifier:
                keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1E7F6B9603C211EEB2272068C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:d6:e7:69:48:9d:f6:93:41:0e:9e:0c:39:ab:19:7f:1f:53:
         9c:04:60:bd:d2:05:ed:99:c1:52:bf:03:09:66:3a:7c:65:23:
         ad:a3:be:3b:0e:a8:d6:72:9b:34:fd:c9:88:77:b1:cf:d9:29:
         36:fc:df:64:9f:3d:14:13:ac:42:0e:42:3a:f3:75:d9:07:d8:
         dd:a6:7e:f6:f7:5c:da:c1:ec:b3:5b:80:20:6e:88:c8:ef:43:
         af:86:20:bf:d6:af:5c:9e:ad:ef:c8:bd:f9:2a:ac:f8:be:16:
         9b:47:db:b4:ca:b6:e4:29:50:cd:92:9b:b6:30:7a:68:6c:fc:
         60:f3:1b:da:6d:dc:5e:32:26:ea:93:78:16:a2:5a:fa:64:05:
         77:12:8a:76:9e:98:f5:03:7a:d7:93:73:0c:9d:c8:c8:17:e6:
         a3:7f:41:bd:65:c8:a6:6f:ec:d9:18:b3:d0:07:a8:b3:3c:92:
         74:36:5d:5a:47:a8:14:a5:ae:0a:94:ce:d0:6d:d8:e0:b7:fc:
         ae:fa:65:4d:48:14:6a:94:e4:b1:ad:37:86:b3:08:24:d1:8d:
         45:c4:e9:5e:23:94:b7:86:35:e9:24:02:e4:2d:92:9f:32:fe:
         a1:90:95:b3:6d:f4:3d:78:67:d5:b7:bf:dd:41:bb:ca:b7:17:
         df:d5:85:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:55:05 2025 by rpki-client