This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/C67FDA48541E11F09E0E0C7DC4F9AE02.roa
File:                     C67FDA48541E11F09E0E0C7DC4F9AE02.roa (raw, json)
Hash identifier:          /3mLFf8N20wALwT6ap0WT3HsxGVV0bjhDCv0ACC3Cxo=
Subject key identifier:   48:48:1C:47:F9:86:40:9E:47:E0:B7:8D:64:FA:57:46:03:61:45:19
Certificate issuer:       /CN=A91E861E/serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4
Certificate serial:       62
Authority key identifier: 12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/C67FDA48541E11F09E0E0C7DC4F9AE02.roa
Signing time:             Wed 17 Dec 2025 07:24:41 +0000
ROA not before:           Wed 17 Dec 2025 07:24:41 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141174
IP address blocks:        103.155.154.0/23 maxlen: 23
                          103.155.154.0/24 maxlen: 24
                          103.155.155.0/24 maxlen: 24
                          2001:df4:d280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E861E, serialNumber=1226EE122293831B651F15B8BC1F1055DB4289C4
        Validity
            Not Before: Dec 17 07:24:41 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69425ab9-df85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d1:df:ff:66:4a:c0:53:66:fd:91:1f:33:f6:
                    ab:1f:69:95:51:a6:1f:82:df:a0:ef:bf:84:cb:6b:
                    d4:8f:d2:ff:f4:19:83:b1:23:d9:24:47:a4:f8:4c:
                    23:19:46:19:c5:62:fb:c0:db:16:cc:4f:8a:7e:32:
                    ba:2b:cc:a3:9a:b7:ee:2c:3b:2e:32:8f:5c:27:bd:
                    3a:9a:9c:36:9d:30:1e:0f:74:f6:10:12:40:5e:cb:
                    ad:81:7a:c7:ad:7c:b0:1c:a8:98:8f:65:9c:d2:79:
                    40:4e:31:b7:e2:25:9c:d9:45:d1:92:93:3a:68:e8:
                    7f:14:b1:49:fc:12:76:82:0a:99:ac:42:31:4d:f2:
                    cb:94:7a:8c:47:b9:8b:67:94:f9:09:22:c5:d4:4e:
                    b1:c2:af:65:56:a1:f1:24:51:4a:b4:6e:b5:50:06:
                    81:71:84:27:70:d4:ce:6b:dc:bf:e4:a8:ac:33:0d:
                    04:4d:d1:91:fd:0d:09:be:56:55:b7:d6:67:7d:40:
                    d7:0b:35:5f:b9:0c:cf:e3:91:d6:31:72:1e:a5:2d:
                    ce:67:66:52:8e:a8:eb:a0:48:d5:79:70:77:9e:9a:
                    b5:f4:c8:f0:68:68:f6:3e:95:17:72:9f:13:6c:0f:
                    5a:14:16:3a:23:d4:9a:69:ea:c6:8a:f1:3c:c7:8d:
                    6f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:48:1C:47:F9:86:40:9E:47:E0:B7:8D:64:FA:57:46:03:61:45:19
            X509v3 Authority Key Identifier:
                keyid:12:26:EE:12:22:93:83:1B:65:1F:15:B8:BC:1F:10:55:DB:42:89:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/EibuEiKTgxtlHxW4vB8QVdtCicQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EibuEiKTgxtlHxW4vB8QVdtCicQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E861E/45CEDF48541E11F0A0CEF478C4F9AE02/C67FDA48541E11F09E0E0C7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.154.0/23
                IPv6:
                  2001:df4:d280::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:4a:f7:47:8a:1c:b3:17:1f:1f:74:02:fb:e4:15:47:ba:f5:
         c0:c9:2f:fe:3b:6f:0a:d5:7d:9e:74:40:46:5c:d7:83:23:b9:
         01:ac:ef:aa:d7:0b:13:6a:b6:d4:66:ee:d7:dd:1c:26:dc:81:
         d6:56:ca:00:f7:a9:33:32:e1:3e:4b:22:e6:d6:f7:12:f4:1b:
         a5:51:59:a2:a3:93:b6:fd:97:ac:41:2c:ab:b7:f6:bb:48:dc:
         b4:d1:67:a6:38:f5:91:81:b2:dd:3b:8b:01:e8:ed:88:c4:19:
         cd:f4:d5:da:53:93:65:0c:d3:6e:5b:cf:c2:8a:3c:67:5a:91:
         fd:80:aa:4d:71:89:8e:8d:79:1c:2a:fc:cf:ed:42:1b:9e:92:
         5f:c1:7a:17:42:cf:41:79:e8:f0:5f:48:85:76:de:53:4f:ac:
         16:d9:2c:0e:9d:2e:3c:31:e3:a3:fe:88:6c:fc:14:71:4d:bc:
         01:ed:ab:39:c7:5b:1f:86:7e:99:8b:d8:28:52:54:b2:9b:8e:
         df:8a:ac:a6:c0:be:c4:90:ca:19:e6:98:3a:2a:89:8c:52:25:
         ee:13:43:6d:52:25:da:24:f7:1b:d6:e3:60:02:79:71:45:22:
         1b:b6:e9:d3:6b:1d:65:29:2b:66:3a:eb:b2:39:f6:3e:8a:20:
         55:ab:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:59:19 2025 by rpki-client