This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/72EFCE38BED111F0AC36966FC4F9AE02.roa
File:                     72EFCE38BED111F0AC36966FC4F9AE02.roa (raw, json)
Hash identifier:          H93v1IARKP3cIH0YmmBVxZq9iLj+1rjPRrlJRnkPlz0=
Subject key identifier:   D3:2C:28:38:08:B9:E2:04:1F:FF:8C:AC:26:89:65:46:FA:08:EC:1D
Certificate issuer:       /CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
Certificate serial:       067E
Authority key identifier: 6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/72EFCE38BED111F0AC36966FC4F9AE02.roa
Signing time:             Tue 11 Nov 2025 07:38:44 +0000
ROA not before:           Tue 11 Nov 2025 07:38:44 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     202736
IP address blocks:        103.151.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl
                          rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 01 Dec 2025 21:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1662 (0x67e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB6B3, serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
        Validity
            Not Before: Nov 11 07:38:44 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6912e803-70ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:f0:4b:cc:2b:f9:50:e0:ed:48:85:f5:24:
                    57:49:87:1c:f3:aa:19:5b:cc:7e:27:27:cc:77:1f:
                    9a:bf:26:3d:ea:11:63:b9:66:3f:4b:fd:0a:b7:0e:
                    b0:c8:29:da:7c:d3:64:52:70:06:ec:a7:e4:e9:ec:
                    92:39:83:b1:40:66:39:5b:9b:39:79:73:1d:68:60:
                    e9:8c:13:ea:73:3b:fc:ba:f2:12:44:d2:c7:5f:c9:
                    54:6e:3b:d7:69:0e:0b:e8:db:29:bb:43:f0:46:fb:
                    3d:95:8b:d3:f6:82:cf:69:e8:fa:e9:52:1d:a1:58:
                    4d:86:e9:5d:94:c6:55:41:8a:73:c2:d3:74:ab:67:
                    0c:fd:01:d2:5c:75:be:89:0c:fb:dc:0a:13:37:d6:
                    23:26:b9:eb:d5:1b:1e:01:65:67:71:4b:b6:a9:d0:
                    21:a4:68:06:4c:98:3e:41:a5:e9:2f:88:c3:8d:33:
                    f7:a9:d5:dd:64:53:15:19:f7:35:6d:81:cb:cc:4b:
                    e4:78:fd:d5:85:50:6d:b3:fb:3f:f7:82:6e:9b:22:
                    1f:9c:8d:ee:26:74:04:62:ef:07:9c:51:f6:f6:22:
                    ba:f6:4e:62:e4:d2:ae:7c:f2:ad:28:8e:58:fc:f5:
                    a5:a3:f2:d4:18:91:6d:49:38:c1:8e:43:ed:39:49:
                    d8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2C:28:38:08:B9:E2:04:1F:FF:8C:AC:26:89:65:46:FA:08:EC:1D
            X509v3 Authority Key Identifier:
                keyid:6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/72EFCE38BED111F0AC36966FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:1e:7e:24:af:a4:8d:f4:ff:84:79:7e:2b:9f:4b:40:0e:ad:
         64:e1:22:e5:5d:43:ad:dd:88:55:0f:4d:58:d0:25:61:8c:96:
         ac:00:1c:80:dc:ab:07:84:31:5e:26:a8:82:3f:37:3f:f8:d8:
         c4:99:6a:fd:94:1c:75:24:a1:da:1c:0e:96:b9:31:b3:36:e6:
         88:91:2d:05:21:c2:5b:11:67:6f:ab:d1:22:de:6c:83:1e:a3:
         27:59:f0:05:06:1d:af:f7:c4:81:1a:1d:d3:35:8b:d8:00:06:
         2d:b5:51:24:b3:17:85:57:de:b8:77:95:98:91:c8:5d:41:98:
         c5:f9:5e:91:57:da:d3:3a:7d:a0:b0:16:1f:e8:78:a8:13:15:
         13:f0:e5:93:e8:08:2a:fe:1e:9a:84:45:a1:97:63:3e:f0:f7:
         3a:dd:8c:dd:d2:37:da:d3:a1:4e:57:ce:c7:02:f1:bc:6d:6f:
         b9:ff:46:67:50:54:3c:f0:ae:d3:f9:7b:1b:34:7f:93:76:52:
         0a:a6:1a:6f:3f:f6:ab:d2:bc:87:41:4d:e7:8c:3c:9d:f9:2f:
         05:e0:b8:59:96:64:ad:8f:9c:e4:3a:fb:ce:dd:87:5e:51:1e:
         44:e2:af:a1:41:cd:c7:73:24:c1:e4:84:bf:a2:38:79:be:39:
         75:7c:2d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 17:42:56 2025 by rpki-client