This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/6A1352D0ABF311F08AAF8C15C4F9AE02.roa
File:                     6A1352D0ABF311F08AAF8C15C4F9AE02.roa (raw, json)
Hash identifier:          2rOjpQDaFblcZ3Hz7gc0wmVhUCNjlgMoJbKyIOsUIVQ=
Subject key identifier:   37:C7:D2:31:CD:E3:E3:C9:47:1F:34:84:84:DD:BF:4D:F9:75:30:82
Certificate issuer:       /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86
Certificate serial:       F8
Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/6A1352D0ABF311F08AAF8C15C4F9AE02.roa
Signing time:             Thu 27 Nov 2025 03:22:17 +0000
ROA not before:           Thu 27 Nov 2025 03:22:17 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     26658
IP address blocks:        103.4.24.0/22 maxlen: 24
                          202.14.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5786, serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86
        Validity
            Not Before: Nov 27 03:22:17 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6927c3e9-ee2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:17:3c:ce:c0:2c:32:fb:8c:b7:2b:70:36:
                    ae:64:16:50:1f:73:2b:be:b9:34:e8:31:25:50:28:
                    df:aa:1f:6a:47:6e:12:6f:3e:84:00:b6:bd:a7:df:
                    93:1c:fa:ac:0c:9d:49:ac:fe:cd:2a:61:a9:e8:9b:
                    e4:e0:55:e3:0d:7f:14:b2:e5:6b:4b:19:c9:0f:19:
                    1a:71:95:af:0d:11:ad:d6:f0:8a:22:30:6a:95:6d:
                    de:73:7a:c2:a8:23:98:ed:e3:ff:a3:c9:9a:a5:62:
                    e1:ef:56:45:06:64:da:d2:e9:af:0d:d3:6a:0e:17:
                    98:23:66:d7:41:b9:be:6a:f4:28:f8:26:be:21:85:
                    de:fe:bf:ea:f1:61:a3:47:42:93:88:94:de:cb:e7:
                    48:1c:e6:d1:8d:1a:65:87:f7:37:13:9b:de:4d:e2:
                    9d:29:b1:a9:90:9d:c5:b3:8c:d6:b2:40:8a:72:e6:
                    de:c5:9f:bf:4c:8d:9a:db:e3:16:41:16:c8:f6:07:
                    38:45:bd:02:25:40:f7:f0:c9:b7:78:72:b5:03:65:
                    e4:ab:ac:bc:14:f4:99:1a:6e:29:b3:17:55:94:c0:
                    7d:9c:e1:a5:d6:b0:66:dc:d1:20:75:86:cf:d1:90:
                    0c:37:2d:8d:42:da:b4:71:45:ec:11:7f:53:24:48:
                    25:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C7:D2:31:CD:E3:E3:C9:47:1F:34:84:84:DD:BF:4D:F9:75:30:82
            X509v3 Authority Key Identifier:
                keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/6A1352D0ABF311F08AAF8C15C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.24.0/22
                  202.14.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:62:2c:b9:63:73:82:99:95:d1:17:7c:39:ce:46:97:7e:28:
         ed:19:db:fb:72:ef:5c:98:ba:4d:fe:4b:74:1c:33:1e:d3:ae:
         f6:46:52:e5:c5:9b:6a:b7:b5:57:aa:72:2b:6f:1c:38:5a:6a:
         01:33:e2:ba:26:dc:50:3a:7c:a3:5d:49:37:a4:d8:46:93:07:
         12:31:a0:a1:4f:23:c2:cc:13:00:a8:46:22:ed:38:8c:2f:b6:
         40:a4:d9:e2:7c:bb:ab:2d:7c:36:de:7d:c4:68:d8:d2:08:64:
         e2:55:16:b3:48:5d:02:fa:b3:ad:d2:42:b4:3b:81:87:d2:6c:
         62:ab:b5:a3:56:04:ad:c5:6e:3e:34:d5:ea:25:c2:39:6d:d4:
         7f:8c:c1:9c:bc:aa:45:d1:89:53:d8:77:61:71:29:83:12:30:
         1a:05:b7:b3:d0:6f:70:c4:e7:87:e6:eb:f8:89:f7:f4:b6:90:
         09:8a:bc:ca:bd:c4:61:41:cf:b6:48:f2:64:2f:96:94:4a:56:
         32:a6:8c:21:6a:f0:be:ab:fe:ba:e8:6f:5c:9b:e9:50:d1:7d:
         1f:5d:a9:90:0a:be:e3:b8:3f:3f:c1:0c:b0:fb:dc:66:6b:5e:
         c1:cd:66:10:d9:6f:bd:8c:48:b7:0e:d3:80:40:8e:07:50:74:
         b6:19:5a:09
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU3ODYxMTAvBgNVBAUTKEIyNTUyQjM4QjhDNUNCMDkzNUM5NDBGQTYwOTgwRUE2
RjUxMENGODYwHhcNMjUxMTI3MDMyMjE3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI3YzNlOS1lZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmc0XPM7ALDL7jLcrcDauZBZQH3Mrvrk06DElUCjfqh9qR24Sbz6EALa9p9+T
HPqsDJ1JrP7NKmGp6Jvk4FXjDX8UsuVrSxnJDxkacZWvDRGt1vCKIjBqlW3ec3rC
qCOY7eP/o8mapWLh71ZFBmTa0umvDdNqDheYI2bXQbm+avQo+Ca+IYXe/r/q8WGj
R0KTiJTey+dIHObRjRplh/c3E5veTeKdKbGpkJ3Fs4zWskCKcubexZ+/TI2a2+MW
QRbI9gc4Rb0CJUD38Mm3eHK1A2Xkq6y8FPSZGm4psxdVlMB9nOGl1rBm3NEgdYbP
0ZAMNy2NQtq0cUXsEX9TJEgl6QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDfH0jHN
4+PJRx80hITdv035dTCCMB8GA1UdIwQYMBaAFLJVKzi4xcsJNclA+mCYDqb1EM+G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTc4Ni9FNTc3MTM4MDVB
RTExMUVGQkI1QzU3MkRDNEY5QUUwMi9zbFVyT0xqRnl3azF5VUQ2WUpnT3B2VVF6
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NsVXJPTGpGeXdrMXlVRDZZSmdPcHZVUXo0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjU3ODYvRTU3NzEzODA1QUUxMTFFRkJCNUM1NzJEQzRGOUFFMDIvNkExMzUyRDBB
QkYzMTFGMDhBQUY4QzE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnBBgDBALKDgQwDQYJKoZIhvcNAQELBQADggEBAGRiLLlj
c4KZldEXfDnORpd+KO0Z2/ty71yYuk3+S3QcMx7TrvZGUuXFm2q3tVeqcitvHDha
agEz4rom3FA6fKNdSTek2EaTBxIxoKFPI8LMEwCoRiLtOIwvtkCk2eJ8u6stfDbe
fcRo2NIIZOJVFrNIXQL6s63SQrQ7gYfSbGKrtaNWBK3Fbj401eolwjlt1H+MwZy8
qkXRiVPYd2FxKYMSMBoFt7PQb3DE54fm6/iJ9/S2kAmKvMq9xGFBz7ZI8mQvlpRK
VjKmjCFq8L6r/rrob1yb6VDRfR9dqZAKvuO4Pz/BDLD73GZrXsHNZhDZb72MSLcO
04BAjgdQdLYZWgk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:19:27 2025 by rpki-client