This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/654307DC26CC11EDB395A078C4F9AE02.roa
File:                     654307DC26CC11EDB395A078C4F9AE02.roa (raw, json)
Hash identifier:          MHZ2vGsbQCY20I3lKFrbGLCD8ljQ+7RHRVNSOxCSytY=
Subject key identifier:   1C:F5:BF:4C:5C:C3:18:25:A5:A9:E2:85:55:52:4C:F8:01:87:ED:AA
Certificate issuer:       /CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Certificate serial:       02A0
Authority key identifier: 1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/654307DC26CC11EDB395A078C4F9AE02.roa
Signing time:             Wed 03 Dec 2025 00:29:29 +0000
ROA not before:           Wed 03 Dec 2025 00:29:29 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     139651
IP address blocks:        103.142.212.0/23 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl
                          rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EACB9, serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
        Validity
            Not Before: Dec  3 00:29:29 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=692f8469-673c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:92:d2:32:c6:99:a5:80:31:34:17:70:f8:
                    2f:61:75:0a:5e:76:70:8f:dd:42:93:8c:d9:3c:fc:
                    21:d9:e4:a7:85:3f:9b:f0:62:33:05:96:8c:03:24:
                    33:2b:40:b4:0f:84:83:15:3a:fd:3b:46:b2:e2:88:
                    6e:d3:b6:5d:56:98:11:4d:25:f1:6f:63:fb:39:58:
                    d1:f0:b3:35:cb:16:bb:65:12:a2:72:f8:0e:86:51:
                    c5:d3:16:4c:fc:31:d5:7b:c2:c6:3e:12:d7:5d:43:
                    e7:75:ad:38:bc:37:e3:e0:d4:8b:2a:d0:04:54:32:
                    6b:49:28:8a:67:d5:dc:59:50:0a:09:a1:8d:11:6e:
                    be:d0:ac:43:c8:4c:58:84:80:59:6f:88:80:fd:0f:
                    53:72:82:74:6f:af:bc:71:d8:36:9b:17:78:21:8c:
                    80:34:d4:fe:64:3e:9e:b7:ce:b9:bb:ca:4f:72:b9:
                    91:1f:b9:01:a8:91:f7:aa:4d:41:0f:be:cc:cb:f8:
                    64:17:71:c3:73:6e:5e:e4:db:ac:c5:61:74:5b:03:
                    ea:00:46:9d:ab:86:3e:5c:dc:3f:2b:93:70:a2:71:
                    b8:d5:c4:ad:e8:86:1a:8a:00:e4:64:d8:26:a7:c3:
                    e1:42:39:b9:67:e5:f4:1d:d3:5e:82:b6:60:a7:9b:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F5:BF:4C:5C:C3:18:25:A5:A9:E2:85:55:52:4C:F8:01:87:ED:AA
            X509v3 Authority Key Identifier:
                keyid:1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/654307DC26CC11EDB395A078C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:84:7a:4b:1d:50:fb:dd:b8:c4:c1:33:2a:b8:52:71:07:8b:
         e7:a0:65:8b:0d:2e:44:a1:0d:27:d6:1f:42:5b:cb:9f:48:72:
         0c:7a:6e:7b:8e:32:55:ba:2f:c6:76:41:7c:e2:7a:06:46:b1:
         97:e8:9a:2c:c3:64:61:ec:cf:7f:2c:86:82:22:0a:0c:d5:38:
         3d:11:a1:8e:1f:c0:e6:f3:e6:23:ce:0e:5e:df:dc:d4:ca:a7:
         55:2c:14:66:66:a2:ae:1e:2d:3f:9d:13:89:e1:7e:1c:95:60:
         be:00:9f:ba:6e:57:d7:93:b3:0d:13:58:ac:36:5c:cf:b5:38:
         9b:f9:0a:ea:03:a0:bf:05:2c:f7:2f:0c:73:54:9c:ed:f6:d7:
         bc:0b:40:79:09:47:4f:ab:99:4c:34:89:5a:a8:3b:9a:69:ee:
         6b:42:f8:ae:ed:24:de:92:f4:01:10:80:71:b7:ea:f2:ca:a3:
         9b:f8:9e:41:de:bd:62:de:f9:24:2a:4d:4c:da:96:7d:3a:2f:
         a3:83:a0:89:a3:58:98:fc:03:90:6d:2a:9b:a7:f7:97:ff:80:
         50:8e:f1:35:45:9b:73:86:f0:e8:1e:0a:d9:85:59:4d:64:f7:
         b8:4a:6c:36:09:ec:2d:d1:43:25:f1:93:ea:b2:10:6a:29:c2:
         e8:4a:b5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:19:42 2025 by rpki-client