This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/11330A4663F611ECB344F979C4F9AE02.roa
File:                     11330A4663F611ECB344F979C4F9AE02.roa (raw, json)
Hash identifier:          DUvw8XiBBG3P6wqdRebsbbeOkq3Va0FcHiVzE8M6sk4=
Subject key identifier:   50:CC:67:73:50:73:17:D5:6D:52:7D:CA:9D:29:91:49:63:37:E7:B0
Certificate issuer:       /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
Certificate serial:       04CF
Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/11330A4663F611ECB344F979C4F9AE02.roa
Signing time:             Sat 22 Nov 2025 22:45:12 +0000
ROA not before:           Sat 22 Nov 2025 22:45:12 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     17439
IP address blocks:        103.173.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl
                          rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1231 (0x4cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
        Validity
            Not Before: Nov 22 22:45:12 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69223cf7-f135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:96:c1:0b:64:4e:9f:02:73:3c:08:db:6f:12:
                    1f:8d:3b:2d:75:4a:54:46:51:b0:93:fe:50:8e:f6:
                    ac:b7:8c:56:b1:72:10:63:bd:27:10:53:74:2f:d8:
                    1a:ef:7a:5e:87:01:77:59:eb:88:f9:7c:99:ad:39:
                    db:b0:2a:33:4e:ae:6e:f5:76:0e:99:0a:38:88:d6:
                    a6:2e:ee:1f:d7:bb:84:21:6a:0b:5a:6a:6b:31:54:
                    e8:d8:14:be:ee:f8:93:3f:15:32:c4:2f:bb:bf:ba:
                    75:74:a6:19:e7:92:27:8d:b0:a9:97:c5:00:2b:60:
                    e7:e4:15:83:b1:18:34:a0:11:d6:17:5b:c4:54:3f:
                    6a:23:21:e3:01:62:86:9e:be:46:12:4b:a4:4b:20:
                    1d:19:bc:dd:3b:97:56:7c:42:bc:a2:78:58:de:f5:
                    3b:77:dd:5e:10:d7:24:a2:3e:ca:39:b3:b1:83:cb:
                    f2:f7:c3:34:10:39:4b:d6:5a:14:fc:fd:2f:c5:3f:
                    22:66:69:5a:1f:4f:f3:58:41:a6:28:49:29:29:9a:
                    f3:61:86:79:78:b5:42:c6:1e:dc:70:fe:48:43:81:
                    7b:e6:03:21:d4:c9:c6:38:46:5d:e1:91:be:04:b0:
                    d1:de:2e:74:12:18:47:ee:ce:bb:49:3a:f9:a6:e5:
                    18:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CC:67:73:50:73:17:D5:6D:52:7D:CA:9D:29:91:49:63:37:E7:B0
            X509v3 Authority Key Identifier:
                keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/11330A4663F611ECB344F979C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:2c:cb:12:ff:ed:54:af:cd:a1:83:43:10:45:42:b2:68:59:
         07:56:f7:fc:ff:92:a8:40:5c:9c:b3:db:6e:00:25:91:83:74:
         55:ce:92:d8:0f:0f:db:66:28:a6:33:60:33:a0:18:11:ac:a5:
         96:cf:a9:70:7b:1a:d6:8d:a4:af:eb:77:80:8b:cc:34:36:c1:
         79:59:25:2a:dc:d7:8e:6b:69:bf:bf:ff:62:c0:cd:13:3a:0f:
         b9:88:f1:ca:37:97:b3:e2:61:20:93:e5:ae:9f:e9:82:2b:0d:
         12:b3:de:5c:2e:a0:c9:c5:95:a3:f1:f4:12:aa:56:c9:29:66:
         94:43:06:13:1f:fb:fa:07:e3:c4:34:1b:d2:77:5c:f0:b5:01:
         89:a0:11:4d:e5:56:c4:62:16:2a:37:13:dd:a2:48:38:68:1a:
         f5:7e:82:5d:48:fa:b3:6d:09:0d:e8:eb:e3:bf:15:fa:67:db:
         d7:4c:c3:23:9a:e1:fd:da:6b:a8:fc:ad:5c:cb:2b:69:70:b2:
         9c:21:f3:44:25:46:21:3c:14:2d:b4:e8:17:20:ab:d8:d8:d8:
         27:8d:b0:71:22:d1:3a:cb:59:26:31:f6:1b:18:41:00:2c:8c:
         c1:26:40:d5:e1:00:e3:d1:e8:1c:c2:88:e3:67:68:ef:28:bd:
         c2:ac:60:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:34:34 2025 by rpki-client