This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/221560BEAF3711E98F7FF448C4F9AE02.roa
File:                     221560BEAF3711E98F7FF448C4F9AE02.roa (raw, json)
Hash identifier:          QdjDueVM8wncTyRNMQMy4qX7bQck6tPgDDwRBdsy/14=
Subject key identifier:   03:B7:76:9A:73:C5:B0:81:AA:14:11:87:63:D2:8E:E5:B8:80:61:D5
Certificate issuer:       /CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42
Certificate serial:       1867
Authority key identifier: 4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/221560BEAF3711E98F7FF448C4F9AE02.roa
Signing time:             Mon 08 Dec 2025 16:25:00 +0000
ROA not before:           Mon 08 Dec 2025 16:25:00 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137042
IP address blocks:        103.102.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl
                          rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 16:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6247 (0x1867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A10E4, serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42
        Validity
            Not Before: Dec  8 16:25:00 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6936fbdc-9b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2d:f7:51:da:41:6c:f4:19:ac:be:25:b4:ad:
                    ef:7d:a3:b8:9f:5c:55:c3:01:8e:a8:25:32:71:01:
                    00:0c:35:75:b5:05:20:b4:58:83:44:08:98:68:1f:
                    0e:b4:b3:95:59:6b:30:c7:34:c9:81:29:ac:31:99:
                    59:f5:2b:3f:7e:a8:1a:09:9c:80:59:b8:b5:17:b2:
                    9c:e2:2e:9b:3e:5d:fb:cc:60:72:2c:8d:d4:7d:7b:
                    87:f5:14:f6:2a:76:2d:dd:47:58:46:79:76:3d:8e:
                    ae:7b:54:fb:25:2a:a7:c3:5e:97:a8:45:19:c1:4e:
                    d4:b7:ea:0a:0b:58:af:d7:57:e9:80:f3:03:11:ca:
                    9b:fd:1f:dd:ad:56:a6:84:13:ff:6b:9a:06:f4:56:
                    62:01:12:cf:26:a6:cc:67:00:47:ab:d2:ba:02:a1:
                    2e:4a:0a:7b:7e:73:8f:11:b9:5c:92:6f:fa:2d:50:
                    a8:3b:f9:ba:e2:1b:2e:a1:4b:54:bb:97:0f:f0:3e:
                    89:2e:e7:33:35:11:f3:39:6f:c4:30:8f:1d:ad:f2:
                    83:d9:30:51:05:8d:20:26:22:d1:00:a8:b2:d1:3d:
                    ff:dd:99:0d:08:e7:98:de:5f:81:fe:14:11:62:2c:
                    bf:b4:e7:fe:c7:ef:d3:f7:6f:45:fc:77:3a:32:ed:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B7:76:9A:73:C5:B0:81:AA:14:11:87:63:D2:8E:E5:B8:80:61:D5
            X509v3 Authority Key Identifier:
                keyid:4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/221560BEAF3711E98F7FF448C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:af:54:d6:45:ee:96:77:61:15:ad:ba:d8:65:04:72:cf:1b:
         44:a5:e4:a2:5a:ac:08:92:00:60:5c:50:8d:62:09:10:71:94:
         56:2c:89:2d:1c:a1:c2:11:53:86:d7:b6:a6:48:87:ec:91:08:
         22:fd:66:9c:07:72:7a:87:6a:11:ff:2a:c2:2f:c1:d1:4e:06:
         b5:41:d0:8e:b4:19:41:07:7b:49:14:80:bb:89:9d:28:96:74:
         3b:1a:83:f5:56:92:8f:29:ea:f2:a5:70:27:c7:0b:2e:4d:bc:
         94:cf:31:99:a0:40:05:02:65:5e:54:1a:76:50:04:73:43:1d:
         2c:0b:66:3d:12:5d:92:ce:c5:42:31:50:71:8f:b4:9f:4e:a2:
         12:61:65:fe:4d:e4:b0:d0:a4:d0:cb:77:61:1d:8c:20:3d:0a:
         9d:8b:d1:e0:30:66:50:4c:54:9b:f8:1b:d4:54:ee:29:2e:d0:
         c4:b8:88:9c:6f:78:46:f5:11:ee:d6:71:4c:25:21:e4:81:e9:
         b2:cb:60:4b:b0:ba:03:bb:60:48:bf:a2:8f:35:fe:10:b2:37:
         70:5f:ca:ee:d6:2d:d5:f1:4d:49:7f:8f:ca:7c:f7:c0:02:91:
         89:11:15:db:9f:9a:51:47:44:d5:31:01:ad:da:a4:59:21:b3:
         9b:11:94:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:11:52 2025 by rpki-client