This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/58D04E30C6D111F0B6027F7AC4F9AE02.roa
File:                     58D04E30C6D111F0B6027F7AC4F9AE02.roa (raw, json)
Hash identifier:          v9h7iu2CbK6jB1RmAbJfXa5EdVjx/mbIIZwSDx1KrXI=
Subject key identifier:   6B:23:94:C3:4C:C8:58:8D:16:01:86:D1:41:D7:5C:D2:B7:12:50:26
Certificate issuer:       /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Certificate serial:       03
Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/58D04E30C6D111F0B6027F7AC4F9AE02.roa
Signing time:             Fri 21 Nov 2025 11:58:09 +0000
ROA not before:           Fri 21 Nov 2025 11:58:09 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     54801
IP address blocks:        103.143.14.0/23 maxlen: 23
                          103.143.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
                          rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
        Validity
            Not Before: Nov 21 11:58:09 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=692053d1-cd84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:b1:06:db:e9:86:ba:b0:3c:c9:11:33:71:
                    27:16:25:cb:61:6e:77:26:92:ce:fd:2d:e9:df:6e:
                    a2:32:24:c2:8a:b3:39:ec:6b:5a:36:2e:73:9c:11:
                    df:ea:6e:62:28:c7:a6:49:7c:3d:6f:af:cd:c1:28:
                    9d:d3:52:ff:36:31:6d:81:8c:a5:ff:c6:e3:75:db:
                    51:ed:b7:f0:9c:c3:c8:b3:c8:eb:85:a9:f5:b7:3a:
                    8f:5e:82:bc:90:ef:d2:f1:2f:d6:e2:c0:78:a9:84:
                    84:d3:43:17:f5:50:2a:a1:26:6d:7e:37:91:45:40:
                    ec:78:c8:33:6c:52:78:67:79:46:2c:b7:e2:33:04:
                    cd:8b:99:6b:e9:92:e7:ec:40:4c:e8:b6:16:11:f4:
                    c5:09:5e:7e:c1:7a:ae:f1:09:9d:47:fc:7b:6d:1f:
                    b8:68:00:9b:0b:29:ad:38:3a:b9:5c:ba:8b:93:08:
                    50:a3:29:a3:3f:7a:31:47:bd:14:63:9b:9c:18:62:
                    cd:60:2d:c6:2e:05:f0:3e:4a:7c:3f:56:62:46:3c:
                    66:64:ed:4d:b6:5a:b6:15:2c:c9:54:f7:7b:2c:87:
                    2e:4b:76:15:1a:cb:a1:a1:5a:a8:ef:fe:b0:24:50:
                    59:28:f2:b8:3c:65:6d:b5:20:c9:f9:98:47:76:97:
                    88:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:23:94:C3:4C:C8:58:8D:16:01:86:D1:41:D7:5C:D2:B7:12:50:26
            X509v3 Authority Key Identifier:
                keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/58D04E30C6D111F0B6027F7AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:1e:f0:ae:fe:bf:9d:21:39:31:77:46:73:ea:7a:3e:19:87:
         ef:68:33:85:16:2c:7c:67:35:c4:96:0b:27:d8:53:81:79:a6:
         57:23:c7:5a:35:d4:9a:34:12:3d:0b:ee:fb:41:90:f3:77:99:
         31:56:f1:8b:a5:8f:ed:8b:d9:b1:70:9c:08:29:61:21:c6:14:
         35:9d:70:2b:ad:eb:09:48:09:82:ec:f9:2a:0d:b9:19:2a:3c:
         be:89:63:9e:27:70:91:33:bb:13:95:bf:bd:11:4b:8a:11:bf:
         e2:97:25:b2:d9:73:72:6f:e5:8e:1e:fa:68:8a:48:29:67:9e:
         2d:d6:e1:15:06:2b:9f:ef:53:d9:92:bc:46:c5:1d:e6:0a:8a:
         95:e9:fc:ca:dd:8b:39:79:09:f2:2a:fa:c8:0b:f2:68:bb:38:
         69:01:b3:37:17:44:2b:2c:ed:5b:71:29:55:97:17:fc:e0:9d:
         0e:bc:59:fd:63:1b:78:44:64:4f:cd:81:0b:e5:c8:4a:37:4b:
         1c:4e:c5:a9:50:c3:4c:73:fc:30:22:c0:7d:c9:50:ba:f2:57:
         0f:8e:07:14:23:d7:e7:a9:b4:72:4a:3e:3d:24:34:47:ad:24:
         87:92:2f:d3:66:82:58:3d:ee:81:e5:ed:8b:d0:82:74:9c:23:
         30:b5:f0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:56:36 2025 by rpki-client