This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/C698E13ED1BD11EF9C00D867C4F9AE02.roa
File:                     C698E13ED1BD11EF9C00D867C4F9AE02.roa (raw, json)
Hash identifier:          HG1f/f+5SFm8izuIB1/hs3U0LoMscjbV7+BezDm08/8=
Subject key identifier:   8D:42:AE:57:1B:19:04:2D:5F:B6:65:00:5E:44:69:80:7C:94:F0:3E
Certificate issuer:       /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F
Certificate serial:       01B7
Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/C698E13ED1BD11EF9C00D867C4F9AE02.roa
Signing time:             Tue 25 Nov 2025 01:49:04 +0000
ROA not before:           Tue 25 Nov 2025 01:49:04 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.190.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl
                          rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 01:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F
        Validity
            Not Before: Nov 25 01:49:04 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69250b10-ef30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:8e:86:55:45:91:14:89:46:73:f4:30:f4:
                    77:61:d9:05:b7:a1:97:2a:8b:b8:5b:46:7b:62:cc:
                    ee:1e:fe:43:df:49:b3:8b:7c:e3:99:92:4c:ff:a6:
                    15:63:15:c8:1d:f6:85:f3:a6:fe:17:af:26:54:a8:
                    9f:35:89:9b:1d:ca:c2:b7:a5:59:42:5c:e6:7a:d2:
                    ee:a3:02:32:3a:84:08:e1:78:cd:09:2f:27:75:98:
                    52:98:56:1e:66:ea:c5:fa:b0:6f:8c:f6:eb:be:70:
                    8a:0e:1a:89:fe:41:0c:58:06:c8:1e:4a:54:bc:fd:
                    60:f9:51:27:0b:7c:a3:8a:5f:6d:64:6a:d2:9c:7b:
                    61:d1:04:ce:5c:c0:1b:ec:44:05:f0:ae:46:7c:9b:
                    26:ea:e0:46:cc:a9:0c:25:32:90:c6:fe:f2:53:57:
                    39:f2:c4:50:e0:77:61:9b:cd:d1:f8:49:13:1d:5b:
                    7e:47:62:7e:08:9f:a2:01:8d:ae:5d:a8:99:75:ea:
                    db:7c:dc:8a:62:15:60:2d:7f:77:a6:a8:eb:3b:76:
                    2a:fd:20:e1:23:8e:3d:35:15:7e:48:86:26:eb:ed:
                    81:7b:b9:3d:eb:8a:21:a1:cb:68:85:9f:6e:26:0d:
                    f2:1b:05:59:4b:ef:84:39:61:01:34:d4:be:23:7f:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:42:AE:57:1B:19:04:2D:5F:B6:65:00:5E:44:69:80:7C:94:F0:3E
            X509v3 Authority Key Identifier:
                keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/C698E13ED1BD11EF9C00D867C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:af:97:86:5c:5d:eb:07:81:21:49:34:42:9d:74:cd:49:a4:
         ff:de:8c:ec:8b:00:f7:77:a8:07:48:3f:13:57:92:90:e2:9e:
         b4:37:e4:5b:9b:17:bd:f4:b2:0a:c7:c5:95:39:c4:1a:bd:da:
         b7:c1:06:fc:2f:2d:28:71:68:3f:62:c9:f5:68:2a:c2:3e:33:
         88:58:e5:d8:c1:fa:27:fc:26:34:77:27:29:47:1e:64:41:9b:
         21:c5:d6:b8:ff:5d:4f:49:98:76:8a:26:d8:43:3d:fc:ff:89:
         d0:54:8f:ff:06:a9:3f:e0:69:09:d3:88:7c:38:f3:71:eb:fb:
         cf:5a:d7:6b:f2:1a:75:45:f4:00:39:4d:2e:de:d0:57:48:76:
         b1:97:64:23:3a:34:17:98:81:87:41:8c:87:1b:fb:72:99:24:
         71:f4:98:5b:f0:33:d8:4c:53:e2:8f:51:71:98:aa:82:0c:0a:
         3b:67:e2:77:0d:e8:6b:28:fd:e0:08:96:7c:41:f9:d4:5f:43:
         1b:10:3e:69:e8:ef:a5:0c:60:4f:c3:c8:ff:0b:15:a5:04:24:
         f5:0b:d8:5c:e1:7b:c8:fd:f1:96:6b:e3:c3:f6:3b:a8:51:d1:
         89:3f:4e:2a:59:cc:2a:1a:45:16:d5:58:59:fe:6e:29:94:49:
         36:f0:72:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 10:35:22 2025 by rpki-client