This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/DB63DD0C511311E998B6E814C4F9AE02.roa
File:                     DB63DD0C511311E998B6E814C4F9AE02.roa (raw, json)
Hash identifier:          C6D3XzDSLt3OsrdqaJczrZOT46rffzR9T87fEcqPayY=
Subject key identifier:   1B:90:4E:7E:C0:47:07:B6:72:8E:19:1F:40:8E:F5:25:98:15:F3:00
Certificate issuer:       /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
Certificate serial:       103E
Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/DB63DD0C511311E998B6E814C4F9AE02.roa
Signing time:             Wed 26 Nov 2025 17:06:55 +0000
ROA not before:           Wed 26 Nov 2025 17:06:55 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     137206
IP address blocks:        103.104.228.0/24 maxlen: 24
                          103.138.52.0/24 maxlen: 24
                          2001:df3:5900::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl
                          rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4158 (0x103e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
        Validity
            Not Before: Nov 26 17:06:55 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=692733af-9052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:1e:ac:62:fe:df:8a:c8:50:79:2c:39:ed:
                    54:8f:ad:87:52:19:89:6b:44:68:ea:23:f6:62:1c:
                    c2:57:d8:e7:53:cd:2f:fd:77:b9:b4:a2:1c:b2:a0:
                    8c:7f:23:46:6a:c7:96:47:51:43:0c:28:d5:31:5a:
                    c4:77:09:3d:bd:ea:2b:bf:ea:17:84:f8:b5:90:10:
                    13:66:1a:4c:a7:d1:0d:88:25:82:fe:ef:cb:f7:3b:
                    c9:ce:2f:5c:0d:3e:0d:ae:d9:f3:3f:45:3d:57:d8:
                    40:77:75:e5:03:1b:05:a9:21:76:1c:6f:dd:81:0f:
                    26:c1:63:83:5d:3b:fd:f7:0c:6a:e7:6f:00:b0:6b:
                    87:c2:66:68:f5:5d:f3:2d:4e:0a:9e:1d:8b:f6:67:
                    13:8b:76:9c:7c:7f:ea:f4:cb:b5:7e:3d:8f:8a:34:
                    6f:2f:1f:91:8c:11:6b:f4:7d:7d:0e:97:d4:16:90:
                    3b:f6:ac:59:f7:b1:65:ea:72:0a:7a:cb:bc:d6:9c:
                    53:84:fe:81:52:c3:62:87:ed:e9:a6:82:60:f3:a4:
                    59:dd:44:e7:16:9c:99:86:4c:0c:4f:6e:a1:39:37:
                    57:4a:d0:6a:05:0a:72:4b:5f:53:02:32:4b:76:43:
                    7f:98:53:12:51:54:21:cf:fb:61:a5:d4:25:c2:4f:
                    16:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:90:4E:7E:C0:47:07:B6:72:8E:19:1F:40:8E:F5:25:98:15:F3:00
            X509v3 Authority Key Identifier:
                keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/DB63DD0C511311E998B6E814C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.228.0/24
                  103.138.52.0/24
                IPv6:
                  2001:df3:5900::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:19:fc:57:36:9f:cc:23:9b:40:b1:de:46:58:7a:9d:7d:1c:
         7c:88:9e:a6:fe:cf:34:03:17:61:a1:3f:67:54:86:d0:e8:9c:
         0f:ab:bc:b8:ce:60:14:fd:f7:55:b0:47:d5:53:ff:93:cd:23:
         e2:58:da:af:d4:57:86:04:98:ea:c0:8c:f2:53:d6:50:8b:e5:
         e2:95:19:76:b4:ac:20:1a:ca:53:5a:9e:1f:b2:c0:41:42:41:
         66:79:eb:36:5c:3f:f1:28:fa:30:79:56:ce:f3:2a:e1:d9:3b:
         76:db:e4:3c:4c:b0:8c:78:16:c7:c6:ea:ba:cd:2c:7d:91:52:
         c2:0b:6c:b5:19:49:3a:a1:5c:9c:6e:0c:11:16:3a:ad:de:8f:
         32:90:8c:c3:bc:74:c2:c3:9e:08:54:fc:31:c6:6b:e7:fa:d9:
         1b:54:0e:b1:56:22:ef:7c:81:f4:a4:0c:1e:00:29:db:d1:48:
         eb:17:20:4b:67:7c:df:ba:2b:82:ca:23:8a:d2:da:e1:e6:9e:
         42:50:8c:d0:3b:fd:a7:8c:04:2b:c9:7f:86:70:d4:3a:20:c5:
         76:09:de:ce:f8:b6:e7:36:6d:92:20:0c:3f:0c:7b:66:80:8d:
         5e:a0:2c:f1:fc:ee:e2:22:5c:b9:2a:ce:da:30:14:11:80:30:
         ba:7c:4b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:29:13 2025 by rpki-client