This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/2DED8B66D02011ECB021972BC4F9AE02.roa
File:                     2DED8B66D02011ECB021972BC4F9AE02.roa (raw, json)
Hash identifier:          dsim9p4Wk6DiySaMsgeBusSqCYD1mZGk25YgN857no0=
Subject key identifier:   99:8B:96:2F:3E:92:DA:10:B2:A8:74:E8:B1:C7:C3:C7:4C:5A:73:D3
Certificate issuer:       /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial:       0381
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/2DED8B66D02011ECB021972BC4F9AE02.roa
Signing time:             Fri 21 Nov 2025 05:34:00 +0000
ROA not before:           Fri 21 Nov 2025 05:34:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     58606
IP address blocks:        203.175.178.0/24 maxlen: 24
                          203.175.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897 (0x381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE108, serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
        Validity
            Not Before: Nov 21 05:34:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=691ff9c8-53cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:f9:ff:ef:0b:6c:57:48:e3:22:3f:4e:50:
                    56:db:c8:f2:3a:44:b3:90:ce:c7:93:d6:c0:18:b2:
                    84:20:ee:ca:60:51:e6:e5:cb:b1:b6:32:ad:fa:75:
                    85:fb:dd:3b:b1:17:43:03:58:7d:a6:a1:90:e3:ef:
                    1b:37:64:7f:52:ad:39:2d:b5:32:97:3c:3f:44:59:
                    77:3b:e3:8c:d1:80:ea:5f:f8:b1:17:7a:18:5b:8f:
                    a5:85:56:7f:46:ce:d4:2f:c5:d9:37:2b:2b:b5:1e:
                    b6:8b:8e:b8:16:74:e7:c4:7d:b7:7c:07:d7:4b:5b:
                    58:a6:d0:24:0b:bb:58:a6:9c:6b:c7:5d:64:b4:f5:
                    de:2e:0e:55:25:54:59:02:42:ca:d5:a4:0c:3f:86:
                    10:c3:a5:1d:30:e4:e1:42:55:c9:06:3c:7e:c1:8c:
                    6b:ee:d5:c5:78:70:52:b3:95:3f:7b:ed:d4:80:28:
                    42:9e:e7:ba:dc:49:41:4c:78:6c:7c:81:52:62:b9:
                    ad:36:7f:4a:b6:a1:ea:1a:13:c0:4f:8f:18:28:f4:
                    ca:b9:59:cd:3a:f4:6c:eb:1e:60:e2:9a:f3:c3:4c:
                    0f:e6:ff:35:e6:28:69:2c:37:2e:0e:f9:f2:ce:82:
                    c3:06:12:5c:6e:51:72:b4:04:e4:10:99:04:f5:56:
                    3b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8B:96:2F:3E:92:DA:10:B2:A8:74:E8:B1:C7:C3:C7:4C:5A:73:D3
            X509v3 Authority Key Identifier:
                keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/2DED8B66D02011ECB021972BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:36:0c:06:d1:75:92:5c:f2:40:37:79:ba:7f:80:15:08:58:
         ee:26:52:55:5f:54:09:a0:b7:15:5e:65:75:88:bc:a4:47:a8:
         25:ba:41:4c:1d:10:9f:42:d7:63:68:cd:3a:67:12:65:ae:24:
         eb:a3:89:14:70:8d:c4:65:b3:d6:d9:6f:19:ad:ac:b5:26:f8:
         78:f6:fa:22:eb:ff:c5:dd:f2:d1:8f:f3:22:e6:68:11:d7:7c:
         ee:f4:ed:47:4a:ad:fa:5c:47:33:c7:c8:b9:66:fc:c4:07:d0:
         ab:ed:ca:99:15:bc:21:56:6e:32:01:63:39:d3:14:22:a7:ee:
         9e:ed:50:7c:31:01:cb:e0:0a:52:d6:08:d4:f2:fb:2f:22:f6:
         67:46:6a:3d:56:9e:d5:c9:0c:7c:76:41:36:47:4e:19:b1:0c:
         77:1f:a0:05:53:59:1a:5c:3b:b6:29:f8:ea:18:78:a7:cf:c7:
         b8:e0:6b:e4:04:a4:a2:7e:3d:69:71:1f:15:21:74:d6:7f:02:
         0d:34:18:c9:90:90:ff:72:cf:35:a8:1a:3d:1a:b5:fc:0d:60:
         03:88:48:8a:e6:62:d5:7d:1a:e8:5a:53:df:d7:41:ad:33:e0:
         80:15:14:fb:5f:90:ed:a8:e5:ea:03:bd:35:4d:ed:e5:94:bf:
         48:fb:95:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:11:10 2025 by rpki-client