This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/6B106380A53111F0A0F3DA52C4F9AE02.roa
File:                     6B106380A53111F0A0F3DA52C4F9AE02.roa (raw, json)
Hash identifier:          twWAVRWCyGBu4AJbenJKIlIqQ97WQNS4qNYxUhMYIRg=
Subject key identifier:   25:9D:EC:17:37:E9:BE:AC:0C:BA:81:B0:6E:BB:0B:1D:0F:A7:AF:C6
Certificate issuer:       /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial:       0503
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/6B106380A53111F0A0F3DA52C4F9AE02.roa
Signing time:             Tue 18 Nov 2025 22:44:57 +0000
ROA not before:           Tue 18 Nov 2025 22:44:57 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147304
IP address blocks:        103.174.170.0/23 maxlen: 24
                          2001:df7:cd80::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
                          rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1283 (0x503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
        Validity
            Not Before: Nov 18 22:44:57 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=691cf6e8-4336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:bd:b5:6d:d3:d6:4a:5b:b9:43:a7:4c:82:
                    e8:ff:b6:7f:82:17:ae:25:a6:1e:1c:2f:99:0e:ee:
                    47:16:0d:70:94:3b:ff:90:0c:a9:dd:2d:62:24:a4:
                    73:d1:9d:b0:0d:bf:15:66:f9:b2:61:59:ad:6e:a1:
                    cc:76:40:7e:84:43:c6:4b:f7:76:c0:b7:cf:e8:89:
                    ac:b7:4c:94:6a:70:c6:dd:8a:b4:05:16:dd:ab:ff:
                    f6:8f:ef:85:7b:73:a4:98:be:1b:81:f8:34:8b:bb:
                    4d:a3:a9:60:e2:cb:06:9d:38:f5:a6:f0:0d:61:a5:
                    ff:32:c3:1b:b1:38:e2:9e:3b:d5:ad:95:3f:78:83:
                    0c:e4:fa:a5:72:24:69:f5:76:13:a9:49:5e:72:fc:
                    38:3e:64:8e:24:25:aa:c3:77:2a:c8:b5:73:99:84:
                    e8:05:a2:dd:14:fe:ce:26:da:ff:39:2b:bf:0d:3e:
                    36:ed:6d:d8:3b:c5:2c:49:79:09:7b:35:22:97:1b:
                    2c:c0:d0:8f:12:2a:09:db:9a:ed:4a:0e:f0:26:02:
                    17:1d:ea:c8:d6:ec:e5:e0:39:c9:7f:da:0a:9f:dd:
                    01:97:c8:99:c7:cb:a1:da:9a:47:d4:cf:39:c0:26:
                    cc:0e:ad:25:0f:2d:32:41:dc:64:f4:d9:50:d3:5e:
                    32:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9D:EC:17:37:E9:BE:AC:0C:BA:81:B0:6E:BB:0B:1D:0F:A7:AF:C6
            X509v3 Authority Key Identifier:
                keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/6B106380A53111F0A0F3DA52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.170.0/23
                IPv6:
                  2001:df7:cd80::/47

    Signature Algorithm: sha256WithRSAEncryption
         52:26:f3:fb:90:55:6b:3d:f9:5e:d0:1c:9b:ec:1a:d0:77:ab:
         c0:c4:d6:dd:9f:7e:30:5b:6e:52:a2:60:26:ad:28:ad:ea:7f:
         05:50:be:64:66:2f:07:62:72:87:91:2d:c4:06:87:f0:ca:74:
         17:b1:26:bf:5d:7e:91:df:0d:ab:73:36:d0:e2:0b:b7:6c:8e:
         9a:8b:97:6f:ea:6b:6b:7d:ee:c2:c1:f6:aa:da:70:57:33:0c:
         ed:70:73:3d:b9:d7:bd:86:96:99:32:19:78:3e:ee:64:d5:06:
         19:bd:40:80:a0:a8:3c:ca:76:e4:20:80:6f:f0:43:4f:a8:46:
         2b:e8:a4:b2:23:f6:26:b0:4d:98:65:50:27:67:39:04:c5:b9:
         38:a5:b2:2e:78:93:bd:0f:e6:2b:b9:52:76:af:f5:9f:a3:4a:
         9d:77:0d:78:18:72:9e:8e:c7:22:df:d3:e1:f0:ce:5a:31:d2:
         f5:74:81:e2:62:5b:09:17:1e:88:95:bd:2b:5c:fe:c7:bc:a8:
         c1:3f:88:81:0f:ac:3a:65:a4:f5:40:12:53:aa:b0:a4:b2:df:
         61:b5:b6:7d:bc:90:39:5e:2d:28:3f:64:92:f0:e4:61:78:eb:
         90:82:bb:95:25:e0:66:3f:c7:b8:8b:0c:c7:ce:43:51:af:6b:
         19:66:ef:a2
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTM0OTMxMTAvBgNVBAUTKEUxNDRBNkNDQTU2QUE5MzEyODkxMjg0RDI2Mjc3MDYy
NEVGQ0UyRUMwHhcNMjUxMTE4MjI0NDU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTFjZjZlOC00MzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvd+9tW3T1kpbuUOnTILo/7Z/gheuJaYeHC+ZDu5HFg1wlDv/kAyp3S1iJKRz
0Z2wDb8VZvmyYVmtbqHMdkB+hEPGS/d2wLfP6Imst0yUanDG3Yq0BRbdq//2j++F
e3OkmL4bgfg0i7tNo6lg4ssGnTj1pvANYaX/MsMbsTjinjvVrZU/eIMM5PqlciRp
9XYTqUlecvw4PmSOJCWqw3cqyLVzmYToBaLdFP7OJtr/OSu/DT427W3YO8UsSXkJ
ezUilxsswNCPEioJ25rtSg7wJgIXHerI1uzl4DnJf9oKn90Bl8iZx8uh2ppH1M85
wCbMDq0lDy0yQdxk9NlQ014y1QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCWd7Bc3
6b6sDLqBsG67Cx0Pp6/GMB8GA1UdIwQYMBaAFOFEpsylaqkxKJEoTSYncGJO/OLs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My80OUEyRUU2QzM2
ODUxMUVDODBGNTIwMzVDNEY5QUUwMi80VVNtektWcXFURW9rU2hOSmlkd1lrNzg0
dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRVU216S1ZxcVRFb2tTaE5KaWR3WWs3ODR1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTM0OTMvNDlBMkVFNkMzNjg1MTFFQzgwRjUyMDM1QzRGOUFFMDIvNkIxMDYzODBB
NTMxMTFGMEEwRjNEQTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnrqowDwQCAAIwCQMHASABDffNgDANBgkqhkiG9w0BAQsF
AAOCAQEAUibz+5BVaz35XtAcm+wa0HerwMTW3Z9+MFtuUqJgJq0orep/BVC+ZGYv
B2Jyh5EtxAaH8Mp0F7Emv11+kd8Nq3M20OILt2yOmouXb+pra33uwsH2qtpwVzMM
7XBzPbnXvYaWmTIZeD7uZNUGGb1AgKCoPMp25CCAb/BDT6hGK+iksiP2JrBNmGVQ
J2c5BMW5OKWyLniTvQ/mK7lSdq/1n6NKnXcNeBhyno7HIt/T4fDOWjHS9XSB4mJb
CRceiJW9K1z+x7yowT+IgQ+sOmWk9UASU6qwpLLfYbW2fbyQOV4tKD9kkvDkYXjr
kIK7lSXgZj/HuIsMx85DUa9rGWbvog==
-----END CERTIFICATE-----
Generated at Wed Dec 3 18:02:12 2025 by rpki-client