This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/61A03234B57C11F0B3EF6D44C4F9AE02.roa
File:                     61A03234B57C11F0B3EF6D44C4F9AE02.roa (raw, json)
Hash identifier:          A1vIWfjVNDBFpOaLGkypJkWaMIQtma4uqJwQ3KAhcB8=
Subject key identifier:   EC:CF:D4:95:44:5C:BC:DF:E9:B3:EC:DC:7C:65:A0:3C:93:E9:EF:ED
Certificate issuer:       /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial:       02F8
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/61A03234B57C11F0B3EF6D44C4F9AE02.roa
Signing time:             Fri 28 Nov 2025 23:57:02 +0000
ROA not before:           Fri 28 Nov 2025 23:57:02 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     401783
IP address blocks:        103.102.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
                          rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 00:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760 (0x2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
        Validity
            Not Before: Nov 28 23:57:02 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692a36ce-4103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:0d:f1:ba:af:f4:4f:90:5a:a4:3f:3d:ad:
                    b9:db:2d:b8:df:90:01:55:88:e8:08:d0:82:70:a2:
                    d5:10:59:48:be:b4:47:02:1d:2e:3b:70:4d:a1:de:
                    cb:b6:cc:24:82:f4:5e:48:a1:14:8d:96:74:4d:3d:
                    88:7c:28:c6:4b:cd:bf:0c:65:41:48:8f:4c:eb:9d:
                    5c:a0:f3:54:ca:40:91:cb:b9:fb:81:8b:7c:6b:47:
                    03:56:8a:ad:06:0e:b2:c5:d0:6a:dd:c8:bd:a6:bb:
                    5e:19:00:fc:26:6a:c1:01:29:e9:e4:33:e6:7c:84:
                    94:03:a7:e5:c4:2f:87:88:69:52:f6:0f:b2:60:d3:
                    c7:d8:e9:a6:8d:8b:8b:82:d4:8d:3b:66:57:cc:ec:
                    96:d8:c5:77:4d:e5:84:15:31:a9:d7:a3:f5:c7:e3:
                    f9:e4:1c:b0:c6:54:51:45:04:e1:7f:2f:b3:0a:b6:
                    dd:ba:46:06:7a:11:e6:2d:d4:eb:1b:a4:ad:d5:11:
                    88:da:e4:4b:f6:bf:e0:96:2d:a0:f9:ac:44:5c:37:
                    7b:62:ce:1b:c7:79:09:40:b3:a6:c8:90:45:34:b2:
                    eb:9a:45:bb:00:0d:28:04:10:46:f9:b9:b7:01:86:
                    c9:0b:5b:66:a3:a5:67:97:64:23:0d:4e:79:7b:f2:
                    a8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CF:D4:95:44:5C:BC:DF:E9:B3:EC:DC:7C:65:A0:3C:93:E9:EF:ED
            X509v3 Authority Key Identifier:
                keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/61A03234B57C11F0B3EF6D44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:70:1b:1e:da:d2:07:47:c9:19:d6:b5:75:3d:5d:04:23:9a:
         0b:93:89:be:1b:1c:5c:bf:7c:92:1e:35:de:22:c8:78:00:1d:
         8b:75:ae:d6:0a:53:fd:ae:5e:ba:a3:0d:8f:6c:e7:35:6f:c6:
         9c:83:78:3c:0d:73:05:71:d3:ae:16:53:e3:63:5c:f7:54:3b:
         32:19:f8:fc:68:27:d7:75:2c:43:c2:9b:f6:41:9e:04:1e:22:
         a2:d2:37:ad:cc:e5:1c:41:ff:05:b1:31:58:69:b4:60:38:cd:
         0d:0a:87:68:77:9e:f2:6d:78:e2:1a:23:69:fb:07:98:1c:bb:
         a2:7e:61:67:e4:1c:47:4c:bd:da:e9:ad:88:d8:7a:67:3e:b5:
         6d:87:22:b8:f7:88:f4:4b:e9:46:8a:f6:be:c4:e0:2c:47:36:
         cc:28:31:29:98:a5:4c:b4:36:06:48:d1:98:ef:60:40:95:fd:
         1f:fe:8d:57:cc:de:38:69:03:70:eb:8e:a3:65:6e:7a:e8:60:
         e9:fe:5a:b9:ae:32:36:e2:4b:2a:f2:69:b0:e0:ef:ac:b5:58:
         e0:27:62:62:1e:9a:d7:cd:7c:91:89:e1:22:98:ec:8d:34:10:
         a9:18:19:f3:3e:f3:b5:d6:5c:06:83:82:13:6f:b2:85:71:88:
         51:68:5f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 21:24:09 2025 by rpki-client