This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/A60805D653EB11EEA1F43363C4F9AE02.roa
File:                     A60805D653EB11EEA1F43363C4F9AE02.roa (raw, json)
Hash identifier:          luhZnX2YGpSFKY86N1Taq6rino7kZJwDO/AMwEHc8Lk=
Subject key identifier:   68:23:74:51:1A:5F:16:27:5B:1B:D9:97:0F:D2:44:CC:2B:6C:47:A0
Certificate issuer:       /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial:       03B4
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/A60805D653EB11EEA1F43363C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 23:45:46 +0000
ROA not before:           Sat 08 Nov 2025 23:45:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     30103
IP address blocks:        103.122.166.0/24 maxlen: 24
                          103.122.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
                          rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948 (0x3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
        Validity
            Not Before: Nov  8 23:45:46 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690fd62a-cf60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ce:24:d5:d5:ca:da:88:75:28:91:55:ba:5f:
                    5c:2c:88:56:23:72:21:a8:fc:ee:3b:cc:97:0a:12:
                    ad:9b:3f:1b:37:7c:55:40:50:f2:e2:cf:12:16:55:
                    01:b9:be:64:b2:e7:7b:e3:03:4f:78:3e:f4:3e:9e:
                    9f:34:b6:ad:ab:75:34:25:94:27:8b:85:4e:03:be:
                    39:60:7d:71:41:4b:c9:12:db:6c:6b:4b:15:4c:36:
                    01:0c:a7:91:63:22:18:48:8d:20:92:4c:34:f1:37:
                    b0:40:71:02:52:29:0a:26:e0:16:52:b7:f8:2a:fb:
                    c2:3f:31:21:f6:17:31:cf:c8:ef:6e:c0:55:86:03:
                    6b:61:3e:3d:e1:97:82:69:73:88:c6:f3:76:cb:df:
                    06:82:8f:ea:9f:84:e9:5d:4a:ca:7c:a0:d3:07:25:
                    93:e7:4e:ea:61:bc:56:92:20:45:47:d6:e5:f3:8d:
                    87:9a:28:8a:fe:bb:26:13:83:8f:2e:66:4e:a0:22:
                    39:ae:af:88:f4:af:61:cd:8e:e4:e9:e3:07:e8:41:
                    4e:a0:c4:24:3a:8f:c6:52:3a:ef:76:50:cc:74:2c:
                    4f:a2:1c:25:e0:27:bc:27:01:17:de:c4:7c:c0:f6:
                    22:b0:0a:b6:f5:36:da:77:d2:3d:2b:a6:a3:a1:23:
                    1b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:23:74:51:1A:5F:16:27:5B:1B:D9:97:0F:D2:44:CC:2B:6C:47:A0
            X509v3 Authority Key Identifier:
                keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/A60805D653EB11EEA1F43363C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:94:c0:e0:e0:7f:bd:f4:98:eb:b0:46:5c:bd:54:90:11:35:
         56:b5:df:ee:30:72:66:c2:28:27:78:a9:03:f7:1c:d3:0c:ee:
         cf:ca:c2:84:e2:3d:30:94:22:bc:e9:b3:80:d2:9b:7e:c2:75:
         fa:04:e4:b1:be:bf:c3:df:c8:8b:a2:40:4c:c8:0c:9c:87:19:
         04:79:4e:b7:d4:ca:51:cb:e4:e7:a2:2f:88:4d:73:1f:3d:09:
         5a:cb:7d:74:a6:66:77:32:6e:05:22:f9:d7:91:4b:b9:b4:f7:
         86:8a:b0:ff:46:18:9f:84:5b:73:f5:73:b6:96:ad:32:39:a0:
         6b:24:80:48:83:01:1f:81:08:89:b5:22:d9:5a:7d:16:ee:78:
         34:53:e2:16:a7:bb:a9:2b:a1:07:aa:16:48:98:74:d6:5f:f6:
         47:34:46:6a:b4:82:63:3b:73:02:51:c7:ad:b4:3e:98:01:20:
         00:8b:3f:b4:da:58:4c:6e:64:6e:97:b4:6d:a7:a6:f2:d9:27:
         5b:4e:63:29:f1:7e:de:5d:fd:59:32:f9:22:e0:df:49:74:bf:
         8b:56:aa:05:0b:ba:7b:75:af:4e:cf:cd:9b:55:08:c8:48:dd:
         91:0d:2c:fe:10:eb:a2:13:e0:3c:eb:87:31:df:1d:cb:e1:af:
         6e:00:3c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 08:52:14 2025 by rpki-client