This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/90269D3A716611ED9D80F448C4F9AE02.roa
File:                     90269D3A716611ED9D80F448C4F9AE02.roa (raw, json)
Hash identifier:          5f74h8n3N2lPubEJTNiK66D1BQc1WtrIYebG81I+9UM=
Subject key identifier:   02:2F:EB:76:C1:2A:E6:E4:E4:C5:FF:50:75:BB:65:3E:7B:30:35:32
Certificate issuer:       /CN=A91F134A/serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E
Certificate serial:       023A
Authority key identifier: B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/90269D3A716611ED9D80F448C4F9AE02.roa
Signing time:             Wed 03 Dec 2025 00:59:48 +0000
ROA not before:           Wed 03 Dec 2025 00:59:48 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150458
IP address blocks:        103.167.58.0/23 maxlen: 23
                          103.167.58.0/24 maxlen: 24
                          103.167.59.0/24 maxlen: 24
                          2001:df1:b1c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl
                          rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 00:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F134A, serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E
        Validity
            Not Before: Dec  3 00:59:48 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=692f8b84-1d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:7a:25:fa:41:1a:60:5e:2a:73:46:32:31:
                    8f:14:c2:be:d0:77:bc:d8:ac:00:42:d7:bd:a6:03:
                    69:ec:62:0b:29:a2:47:a4:1f:06:43:94:81:31:41:
                    0e:13:06:01:50:3d:be:94:7e:81:47:26:48:1c:44:
                    12:68:6e:15:b3:d8:a8:d4:24:50:2c:d6:9c:02:3c:
                    a0:fc:55:b8:6e:ee:57:e0:b5:a0:0d:88:21:83:93:
                    ee:45:8b:2f:c6:79:21:37:ed:73:4e:3a:28:b7:29:
                    bf:5e:d4:67:b8:2f:87:2a:5d:35:cc:93:76:2e:d9:
                    73:95:4b:12:c5:86:e7:58:25:8c:c7:28:2c:a8:28:
                    b1:6b:5f:bc:32:f7:34:c5:32:0e:2d:64:37:ce:64:
                    a6:f5:e2:49:5f:85:74:ed:c8:ae:9f:19:4f:65:0a:
                    66:fb:93:78:c3:bd:5e:a7:77:e9:2f:b7:a5:1d:0f:
                    97:ee:7b:a4:4a:82:c9:42:f3:26:1a:1c:dc:4e:75:
                    7b:92:f2:8b:98:bd:d1:a4:a0:69:62:21:ea:e9:ec:
                    d6:80:70:a7:90:a2:2a:49:4e:30:66:6d:76:d3:57:
                    b3:17:48:ec:11:b0:26:fa:97:5f:e7:31:41:b3:d7:
                    0d:84:2a:c5:5e:aa:0e:29:c0:67:ea:ca:5d:58:99:
                    7d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2F:EB:76:C1:2A:E6:E4:E4:C5:FF:50:75:BB:65:3E:7B:30:35:32
            X509v3 Authority Key Identifier:
                keyid:B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/90269D3A716611ED9D80F448C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.58.0/23
                IPv6:
                  2001:df1:b1c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:52:af:8a:5f:59:88:bf:a3:3c:ba:71:91:4e:f7:2e:fd:c7:
         75:17:55:48:fb:02:cf:5b:c0:7e:c1:cc:60:8f:7b:59:c3:af:
         d1:2d:b0:6a:88:b4:2c:22:42:59:dc:cd:c5:70:ca:27:e9:4b:
         5e:c7:19:00:84:69:e8:21:64:58:5a:44:55:9b:bb:db:f5:d5:
         b9:e0:90:ac:ec:ee:35:2b:9f:ff:6d:4e:1b:c5:d4:6b:95:90:
         e7:a9:d8:88:9a:60:f2:bc:10:55:af:6b:0a:ee:bc:8d:6e:7f:
         b8:ba:1e:b8:28:37:e6:94:59:b1:35:7c:5b:b3:d2:6a:ec:00:
         02:b9:63:99:03:bc:ee:0c:62:69:7a:9a:21:94:dc:87:98:df:
         0b:b9:ac:10:89:34:78:de:c7:cd:ae:41:5a:14:a4:59:6b:e4:
         c2:ab:78:36:32:3a:d6:f3:9e:34:94:ce:e5:44:cd:2a:f8:37:
         8e:28:64:d3:1e:05:81:38:0c:a0:2c:8b:33:a3:87:87:e6:2b:
         8c:83:92:5e:9b:4c:24:c5:63:d7:c2:94:4f:09:0e:9f:96:41:
         02:35:2a:a0:d2:c9:ee:29:88:f9:4b:fa:33:82:0b:65:b7:2f:
         d2:7c:6f:39:40:e6:40:a2:fa:8c:c1:db:68:10:78:67:8d:1e:
         d5:2b:ef:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 16:58:07 2025 by rpki-client