This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/44A5887E974011EF8FD14F42C4F9AE02.roa
File:                     44A5887E974011EF8FD14F42C4F9AE02.roa (raw, json)
Hash identifier:          lE7qXaXFkFZeOAHQhDfeFnopy/A50F9npd+Hk8ebtHY=
Subject key identifier:   A2:70:F7:58:79:E9:70:93:A9:0D:90:E9:30:B9:4F:2A:63:0D:50:11
Certificate issuer:       /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7
Certificate serial:       352D
Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/44A5887E974011EF8FD14F42C4F9AE02.roa
Signing time:             Wed 26 Nov 2025 15:00:44 +0000
ROA not before:           Wed 26 Nov 2025 15:00:44 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     10083
IP address blocks:        122.200.172.0/24 maxlen: 24
                          122.200.175.0/24 maxlen: 24
                          203.5.127.0/24 maxlen: 24
                          203.33.71.0/24 maxlen: 24
                          203.55.18.0/24 maxlen: 24
                          203.57.78.0/24 maxlen: 24
                          2402:5600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl
                          rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13613 (0x352d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7
        Validity
            Not Before: Nov 26 15:00:44 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6927161c-7a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:af:9e:41:b8:58:20:dd:9e:b0:cd:59:d7:
                    ab:28:c0:e3:86:d5:6a:23:15:79:9c:7a:63:e1:c1:
                    53:8b:30:7e:81:02:bd:81:2d:fa:3f:1d:74:8b:2a:
                    44:24:ef:51:d7:48:83:be:5c:9f:85:78:c5:0d:3c:
                    24:03:61:00:84:e9:c4:77:f3:91:a2:88:40:02:fb:
                    6b:76:ee:b6:a0:97:f8:17:c4:82:33:bb:0a:ac:85:
                    dc:28:77:a3:61:ea:ce:d0:29:a3:89:c0:99:08:ca:
                    6f:12:42:4a:72:b3:35:36:cb:13:16:53:77:46:de:
                    c0:61:5c:36:a6:c9:a5:b5:a3:e2:70:26:3e:7c:09:
                    76:e3:7d:aa:63:89:dd:17:69:27:d3:f6:68:28:87:
                    8e:55:c5:88:e4:3a:11:a8:56:78:0c:8d:ac:b3:83:
                    33:6a:cf:ec:bf:19:c7:6a:d7:9a:82:63:65:96:01:
                    60:61:24:fd:b7:30:4e:3f:fd:12:38:da:b4:13:e9:
                    99:40:c2:19:6b:3c:97:f7:ea:00:e7:88:3f:18:ba:
                    29:30:12:f2:83:e6:af:c3:78:98:9e:d5:37:54:9a:
                    8b:06:71:d1:8e:5b:9f:f5:36:e6:ae:f6:09:c2:4a:
                    ca:29:ec:29:c8:17:16:81:d8:43:75:fd:86:c6:5d:
                    d3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:70:F7:58:79:E9:70:93:A9:0D:90:E9:30:B9:4F:2A:63:0D:50:11
            X509v3 Authority Key Identifier:
                keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/44A5887E974011EF8FD14F42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.172.0/24
                  122.200.175.0/24
                  203.5.127.0/24
                  203.33.71.0/24
                  203.55.18.0/24
                  203.57.78.0/24
                IPv6:
                  2402:5600::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:25:bb:bf:3a:05:c5:8e:7a:0d:dc:d7:f2:f0:a7:59:a7:72:
         7d:f5:2d:15:09:96:8b:8c:e5:47:b6:97:6e:4b:2f:3e:ab:ff:
         f5:c4:1d:11:98:10:3a:ca:e4:dd:fd:3f:22:4d:fc:3a:91:f8:
         ce:53:f4:c4:60:94:e7:9f:f3:c1:98:cc:0a:f8:2e:da:7b:0e:
         02:cc:84:84:0f:9e:ef:5e:34:3b:e4:49:1a:17:4e:b0:c6:30:
         c1:7c:08:2b:62:fd:cc:1e:00:e6:19:5d:cf:70:84:bb:78:ec:
         60:65:b5:fc:65:62:4a:29:1e:cf:5f:39:e1:c1:42:00:e2:3d:
         9c:c3:e4:36:f1:2f:06:24:18:d3:f4:e5:a3:d1:34:c1:2b:e9:
         73:52:c8:1b:9c:dd:c0:a7:13:59:1c:0a:2f:c6:3e:65:6b:6a:
         e3:36:2f:51:70:6a:5f:d0:2b:50:f1:7c:7c:ae:0a:fb:5d:0c:
         3a:cd:28:96:38:dd:e6:b7:c7:85:36:fd:c1:8c:90:98:52:52:
         75:2f:cc:fb:50:e2:d8:ae:76:69:f3:d7:d5:7d:36:ba:c0:e7:
         59:31:da:11:80:3a:f5:a7:af:dd:9e:f5:bb:ed:55:47:e0:eb:
         23:2a:07:2d:6b:c0:ac:d1:0d:5a:e6:d8:ed:fd:bb:3f:41:83:
         ac:9b:ee:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:09:08 2025 by rpki-client