This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/2DE26240B2FC11ECA5096770C4F9AE02.roa
File:                     2DE26240B2FC11ECA5096770C4F9AE02.roa (raw, json)
Hash identifier:          rNtzGSiDY85AOdHWF1WEqXphhPwCBrWlPSRqHgAFmu0=
Subject key identifier:   59:3D:6E:BB:C5:A3:AC:55:4D:D6:98:0D:B4:30:AF:F8:3B:52:D6:F5
Certificate issuer:       /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
Certificate serial:       03C3
Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/2DE26240B2FC11ECA5096770C4F9AE02.roa
Signing time:             Fri 14 Nov 2025 23:16:05 +0000
ROA not before:           Fri 14 Nov 2025 23:16:05 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     136237
IP address blocks:        103.131.176.0/23 maxlen: 24
                          103.131.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl
                          rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 23:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963 (0x3c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
        Validity
            Not Before: Nov 14 23:16:05 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6917b834-7f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:72:b6:f0:3e:cb:a2:8d:bb:7a:6b:69:50:79:
                    1b:0c:22:bc:6c:a6:09:2e:bb:70:fc:a3:9e:3c:5d:
                    67:88:e6:90:0e:09:0e:52:4e:dd:37:47:b2:5d:f5:
                    fc:9e:04:84:49:96:d5:09:47:a2:f9:4f:97:59:90:
                    bb:e5:eb:3e:44:d4:5c:c5:be:28:3b:fb:10:c9:63:
                    04:e5:a4:82:89:cc:fd:e6:67:dc:17:27:74:53:45:
                    35:66:87:fd:e4:aa:b3:6f:6d:a4:52:06:46:ee:a9:
                    1d:4d:6e:0d:b6:7c:21:36:90:0a:28:10:2f:e6:ab:
                    13:cb:42:c2:41:6b:e2:20:b6:d2:79:77:e8:fb:39:
                    3a:7f:6d:3c:72:67:78:c4:5e:2a:23:f2:0c:7b:b3:
                    8a:0a:e2:14:4b:74:64:c8:91:e2:b3:e4:0b:7d:bb:
                    e1:92:2e:b6:46:37:d2:7a:b9:12:5a:d7:3e:da:44:
                    ff:2c:cd:ae:86:13:0f:83:6c:0b:28:4e:f3:b6:b7:
                    25:74:c6:3a:04:cc:51:59:c7:55:5f:4c:b1:ed:bf:
                    c5:18:c2:6b:04:db:f0:21:2b:b7:0e:5f:49:80:1c:
                    57:d5:a9:4f:70:1c:d1:ab:25:75:fa:4c:66:ec:c6:
                    61:38:6c:6e:2c:22:62:0a:7b:44:98:b1:f6:6a:05:
                    bf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3D:6E:BB:C5:A3:AC:55:4D:D6:98:0D:B4:30:AF:F8:3B:52:D6:F5
            X509v3 Authority Key Identifier:
                keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/2DE26240B2FC11ECA5096770C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:81:73:57:36:af:3b:97:b7:f7:4b:82:07:66:1c:eb:34:30:
         ef:e1:bd:6c:f6:04:b3:e1:e0:0a:c6:fa:25:d3:7f:2b:4b:a5:
         12:e9:d3:be:a2:ed:34:70:29:3d:3d:f9:4f:56:fe:de:0f:40:
         2a:eb:28:cc:4f:3a:a6:6e:46:3d:a2:4c:23:8d:e3:ae:3f:bb:
         ee:da:8f:7f:d0:b9:ec:90:62:65:51:09:6b:f5:f3:2e:5d:76:
         d7:87:df:59:10:b1:8f:1a:6a:6b:fb:b7:fe:a7:97:c8:52:a0:
         80:a6:84:08:b5:7a:7d:10:d1:78:97:ee:a5:c2:50:d9:10:ad:
         1e:7e:e8:20:bd:d6:4a:79:45:70:70:b8:a4:b0:4e:14:d4:b9:
         9b:9b:52:ad:f1:5f:b8:06:4a:63:54:14:59:79:a0:22:2d:d9:
         19:7d:ce:d1:c6:d8:29:4f:8c:fa:27:f9:ff:6c:6c:86:ed:38:
         12:75:b7:7b:70:fe:c9:96:38:71:19:a4:14:e0:af:1f:20:63:
         ed:c3:0d:48:62:94:76:60:6b:ff:9e:37:dc:7a:f1:9a:a7:bd:
         88:32:36:6b:5f:32:03:59:cd:be:23:f8:af:a0:7c:97:0c:b2:
         d1:7b:32:2f:16:1b:b8:09:bc:ee:92:52:86:5d:d8:3b:60:67:
         26:cd:a9:38
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUM5QUUxMTAvBgNVBAUTKEE3REZENEM5MTMzMkJEMUU0MUNGMjZEQjE4MjIxRDFE
NzA1OEZERDUwHhcNMjUxMTE0MjMxNjA1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTE3YjgzNC03ZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5XK28D7Loo27emtpUHkbDCK8bKYJLrtw/KOePF1niOaQDgkOUk7dN0eyXfX8
ngSESZbVCUei+U+XWZC75es+RNRcxb4oO/sQyWME5aSCicz95mfcFyd0U0U1Zof9
5Kqzb22kUgZG7qkdTW4NtnwhNpAKKBAv5qsTy0LCQWviILbSeXfo+zk6f208cmd4
xF4qI/IMe7OKCuIUS3RkyJHis+QLfbvhki62RjfSerkSWtc+2kT/LM2uhhMPg2wL
KE7ztrcldMY6BMxRWcdVX0yx7b/FGMJrBNvwISu3Dl9JgBxX1alPcBzRqyV1+kxm
7MZhOGxuLCJiCntEmLH2agW/8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFFk9brvF
o6xVTdaYDbQwr/g7Utb1MB8GA1UdIwQYMBaAFKff1MkTMr0eQc8m2xgiHR1wWP3V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBRS9GN0U0QTJBRUIy
RjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZSNUJ6eWJiR0NJZEhYQllf
ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3A5X1V5Uk15dlI1Qnp5YmJHQ0lkSFhCWV9kVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUM5QUUvRjdFNEEyQUVCMkY0MTFFQzlCRUQzNzUzQzRGOUFFMDIvMkRFMjYyNDBC
MkZDMTFFQ0E1MDk2NzcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJng7AwDQYJKoZIhvcNAQELBQADggEBAFGBc1c2rzuXt/dL
ggdmHOs0MO/hvWz2BLPh4ArG+iXTfytLpRLp076i7TRwKT09+U9W/t4PQCrrKMxP
OqZuRj2iTCON464/u+7aj3/QueyQYmVRCWv18y5ddteH31kQsY8aamv7t/6nl8hS
oICmhAi1en0Q0XiX7qXCUNkQrR5+6CC91kp5RXBwuKSwThTUuZubUq3xX7gGSmNU
FFl5oCIt2Rl9ztHG2ClPjPon+f9sbIbtOBJ1t3tw/smWOHEZpBTgrx8gY+3DDUhi
lHZga/+eN9x68ZqnvYgyNmtfMgNZzb4j+K+gfJcMstF7Mi8WG7gJvO6SUoZd2Dtg
ZybNqTg=
-----END CERTIFICATE-----
Generated at Mon Dec 8 00:48:15 2025 by rpki-client