This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/EBA68084CB5011F0931F9B82C4F9AE02.roa
File:                     EBA68084CB5011F0931F9B82C4F9AE02.roa (raw, json)
Hash identifier:          mw6wJXPNxwjlJuQkt0LudOemM3yH2wBBbc9TV3fWHRY=
Subject key identifier:   BD:C8:39:66:AE:3B:A4:E6:F9:58:4B:F7:B0:47:B1:B0:D6:9B:D6:F6
Certificate issuer:       /CN=A91BB5D6/serialNumber=C2938CE63D7B9A2457E932A27AE971D20704A7FD
Certificate serial:       C0
Authority key identifier: C2:93:8C:E6:3D:7B:9A:24:57:E9:32:A2:7A:E9:71:D2:07:04:A7:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpOM5j17miRX6TKieulx0gcEp_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/EBA68084CB5011F0931F9B82C4F9AE02.roa
Signing time:             Thu 27 Nov 2025 05:21:26 +0000
ROA not before:           Thu 27 Nov 2025 05:21:26 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     4764
IP address blocks:        103.133.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.crl
                          rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpOM5j17miRX6TKieulx0gcEp_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:57:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB5D6, serialNumber=C2938CE63D7B9A2457E932A27AE971D20704A7FD
        Validity
            Not Before: Nov 27 05:21:26 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6927dfd6-27d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:71:07:b9:45:a2:a0:5e:15:2e:f3:1f:6d:34:
                    b7:3b:35:41:29:e7:23:d2:fa:36:2e:97:b0:22:65:
                    e1:c2:69:61:4a:6c:c2:d1:b0:53:89:1b:d1:79:68:
                    86:7a:41:23:1b:ad:48:8d:09:6e:07:85:e1:01:38:
                    00:3d:2e:bc:c4:8f:3e:c3:c6:df:65:4c:2f:47:26:
                    a9:76:ed:e1:10:a9:1a:e6:8b:16:d6:b6:57:db:f8:
                    ff:47:70:71:84:36:06:aa:da:87:40:d4:6f:1c:ee:
                    8f:55:e8:a3:db:b5:4c:0f:2a:1e:81:ca:7d:5e:eb:
                    2e:5f:df:01:62:f4:9b:f1:f0:3d:1c:af:b9:18:ef:
                    31:98:44:9a:e0:e0:c4:91:b9:49:07:3b:9f:43:41:
                    ca:fb:6c:e9:41:d4:48:17:c0:e1:c0:1c:ee:ec:64:
                    d0:cc:f7:29:f6:2e:4c:5e:99:e3:e3:7c:2a:5f:83:
                    58:21:76:d8:0e:40:f7:75:e7:ee:94:35:68:ec:fe:
                    84:60:0f:a4:c8:33:9a:98:3f:20:ad:41:35:42:09:
                    3c:da:41:d5:c3:29:ca:53:a1:3f:98:55:0d:eb:f1:
                    bc:b1:c6:7b:e1:12:16:c6:e8:77:21:2a:dc:e8:56:
                    ec:7b:a9:80:24:f9:4b:29:a9:1e:3a:47:ac:38:bd:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C8:39:66:AE:3B:A4:E6:F9:58:4B:F7:B0:47:B1:B0:D6:9B:D6:F6
            X509v3 Authority Key Identifier:
                keyid:C2:93:8C:E6:3D:7B:9A:24:57:E9:32:A2:7A:E9:71:D2:07:04:A7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/wpOM5j17miRX6TKieulx0gcEp_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpOM5j17miRX6TKieulx0gcEp_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D6/F68DF550AFD011EF872EE323C4F9AE02/EBA68084CB5011F0931F9B82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:86:fd:8f:3b:49:96:ca:0d:8f:0b:9f:6d:e4:cf:66:41:f4:
         6b:cf:90:93:dc:9f:c8:9a:b6:16:59:53:14:c3:59:29:70:f6:
         3c:91:0b:0a:2d:11:00:79:90:3f:e1:dd:99:fe:98:5b:13:52:
         25:21:de:81:0b:07:16:d9:1c:2a:01:79:75:52:bf:8f:eb:ee:
         83:25:c3:6f:53:f4:64:06:93:42:0f:b1:65:87:db:69:0f:ce:
         b3:db:fe:ad:2a:b1:46:a0:d5:c2:fc:ed:97:9e:e8:43:06:46:
         ed:d2:a9:7e:ac:b8:81:bd:67:45:57:e6:c6:fd:8f:55:6d:c7:
         f2:a2:18:c5:5f:40:fc:4e:64:81:23:5d:1b:60:69:59:f4:86:
         1b:f0:df:75:b0:f7:44:70:bd:bc:02:d6:f8:b7:3a:92:6e:d7:
         ef:bc:92:b5:b2:58:d8:b8:33:2d:0a:e9:7f:21:d0:47:2c:ad:
         b5:23:d5:18:88:d6:90:d6:25:15:27:bc:de:ef:95:67:3e:9c:
         3c:11:ec:e4:87:d8:fa:bf:f1:dc:18:61:92:02:c5:e0:84:30:
         3d:12:f5:04:19:b0:07:fb:99:d1:b1:10:c3:a0:22:21:e2:b4:
         2e:c0:6a:31:9f:5c:cb:68:a1:0b:08:8e:06:ae:25:03:6d:44:
         f7:4d:2a:1c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI1RDYxMTAvBgNVBAUTKEMyOTM4Q0U2M0Q3QjlBMjQ1N0U5MzJBMjdBRTk3MUQy
MDcwNEE3RkQwHhcNMjUxMTI3MDUyMTI2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI3ZGZkNi0yN2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyHEHuUWioF4VLvMfbTS3OzVBKecj0vo2LpewImXhwmlhSmzC0bBTiRvReWiG
ekEjG61IjQluB4XhATgAPS68xI8+w8bfZUwvRyapdu3hEKka5osW1rZX2/j/R3Bx
hDYGqtqHQNRvHO6PVeij27VMDyoegcp9XusuX98BYvSb8fA9HK+5GO8xmESa4ODE
kblJBzufQ0HK+2zpQdRIF8DhwBzu7GTQzPcp9i5MXpnj43wqX4NYIXbYDkD3defu
lDVo7P6EYA+kyDOamD8grUE1Qgk82kHVwynKU6E/mFUN6/G8scZ74RIWxuh3ISrc
6Fbse6mAJPlLKakeOkesOL3bvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL3IOWau
O6Tm+VhL97BHsbDWm9b2MB8GA1UdIwQYMBaAFMKTjOY9e5okV+kyonrpcdIHBKf9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVENi9GNjhERjU1MEFG
RDAxMUVGODcyRUUzMjNDNEY5QUUwMi93cE9NNWoxN21pUlg2VEtpZXVseDBnY0Vw
XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dwT001ajE3bWlSWDZUS2lldWx4MGdjRXBfMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkI1RDYvRjY4REY1NTBBRkQwMTFFRjg3MkVFMzIzQzRGOUFFMDIvRUJBNjgwODRD
QjUwMTFGMDkzMUY5QjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnhRcwDQYJKoZIhvcNAQELBQADggEBAGGG/Y87SZbKDY8L
n23kz2ZB9GvPkJPcn8iathZZUxTDWSlw9jyRCwotEQB5kD/h3Zn+mFsTUiUh3oEL
BxbZHCoBeXVSv4/r7oMlw29T9GQGk0IPsWWH22kPzrPb/q0qsUag1cL87Zee6EMG
Ru3SqX6suIG9Z0VX5sb9j1Vtx/KiGMVfQPxOZIEjXRtgaVn0hhvw33Ww90RwvbwC
1vi3OpJu1++8krWyWNi4My0K6X8h0EcsrbUj1RiI1pDWJRUnvN7vlWc+nDwR7OSH
2Pq/8dwYYZICxeCEMD0S9QQZsAf7mdGxEMOgIiHitC7AajGfXMtooQsIjgauJQNt
RPdNKhw=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:00:20 2025 by rpki-client