This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/6246B1F2609A11EDAAF70C26C4F9AE02.roa
File:                     6246B1F2609A11EDAAF70C26C4F9AE02.roa (raw, json)
Hash identifier:          YFQztmxGulDM+wc5CoUinbLv3slQIPP/6yMpGk1YiC4=
Subject key identifier:   13:80:37:B7:FD:CF:26:FA:2E:2B:6B:8B:3A:72:26:92:92:9E:07:60
Certificate issuer:       /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
Certificate serial:       0407
Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/6246B1F2609A11EDAAF70C26C4F9AE02.roa
Signing time:             Thu 20 Nov 2025 23:15:59 +0000
ROA not before:           Thu 20 Nov 2025 23:15:59 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     9790
IP address blocks:        103.174.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl
                          rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 23:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1031 (0x407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF547, serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
        Validity
            Not Before: Nov 20 23:15:59 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=691fa12e-f4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:79:d1:3e:95:d4:7c:9c:dc:4d:cc:08:a7:3a:
                    26:2d:1a:b2:46:04:21:35:22:23:13:6a:e2:c6:a0:
                    b5:57:cc:f1:f4:c8:14:ef:af:58:97:56:05:01:e5:
                    75:27:b3:75:c5:3c:b3:5a:c5:3d:19:db:b8:4a:ed:
                    c3:d8:5c:3d:1d:80:0e:dc:fd:22:f2:9b:d2:c5:13:
                    1f:b9:51:4e:b2:a2:b5:aa:8a:89:0b:e6:25:75:58:
                    0d:90:f9:56:2b:5b:1f:21:69:04:9e:d3:11:da:2a:
                    79:7d:f1:7c:be:a5:48:a2:44:e5:46:dc:e2:f5:ad:
                    21:55:6a:30:06:8e:af:35:dc:e9:07:06:a7:af:52:
                    ec:fd:f7:31:68:7b:d4:6d:e8:58:c8:dc:c6:39:ad:
                    7d:ff:61:02:ea:e1:ec:44:47:df:55:f6:56:88:a1:
                    9d:d4:24:5d:60:62:95:05:54:9c:3f:b7:2d:1e:75:
                    6c:2b:64:47:f2:ee:4d:90:ed:95:a0:e8:43:77:1b:
                    55:d5:c6:02:9b:8c:bd:bb:4b:3b:c9:22:6a:5a:e3:
                    2f:19:02:88:14:c0:39:14:74:24:a2:b8:5e:1b:06:
                    ba:48:f8:14:12:4f:6a:0f:df:fd:96:a3:62:0f:d5:
                    0c:2d:5c:32:2c:16:76:f8:29:94:67:59:28:10:91:
                    ff:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:80:37:B7:FD:CF:26:FA:2E:2B:6B:8B:3A:72:26:92:92:9E:07:60
            X509v3 Authority Key Identifier:
                keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/6246B1F2609A11EDAAF70C26C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:60:c6:80:29:97:7f:43:b4:ab:01:2f:80:05:a1:a5:fb:ee:
         41:bc:2e:9e:04:92:4b:f5:49:68:78:ae:51:8d:4e:4a:bb:c4:
         34:5a:4e:f5:9f:37:1c:a0:1f:97:62:8f:47:cf:8c:9b:79:fb:
         74:4a:40:a7:94:d8:00:85:e1:3c:cd:86:06:e7:41:b2:16:19:
         40:38:c4:cc:7f:4e:f3:ba:f0:25:b1:f2:fd:9c:cc:62:f6:c1:
         85:80:bf:b1:a6:35:5b:31:4f:4f:b2:38:84:c9:1f:f5:af:17:
         09:b0:7a:3d:87:22:9a:b4:7f:82:88:58:e2:28:0e:1f:84:fb:
         bd:af:d9:d5:a1:03:e4:69:a8:d5:1f:90:ed:e7:03:b3:e5:16:
         d0:e5:65:b5:ba:27:a1:36:7a:52:66:81:f8:33:4b:e1:25:55:
         ff:04:c9:a0:a6:5f:4a:58:99:a3:f9:3f:f9:eb:6b:00:16:c9:
         14:ef:ce:f2:bb:27:15:e6:0d:ae:99:fc:b9:84:58:b8:cb:24:
         49:b1:65:1b:63:e9:21:9c:78:30:1f:45:71:b2:7b:2b:df:bf:
         8f:16:bd:76:98:c1:72:c5:66:6d:d8:24:2f:29:c9:91:c3:eb:
         6a:d6:4d:39:fe:36:c6:df:71:20:98:95:f3:f3:d8:c0:bd:27:
         43:4e:74:33
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY1NDcxMTAvBgNVBAUTKEE2ODM2MzI1NDZGMUExMDc4NEJDMUE0RkY2RkEwQkJF
NkNFQzJENEUwHhcNMjUxMTIwMjMxNTU5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTFmYTEyZS1mNGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyHnRPpXUfJzcTcwIpzomLRqyRgQhNSIjE2rixqC1V8zx9MgU769Yl1YFAeV1
J7N1xTyzWsU9Gdu4Su3D2Fw9HYAO3P0i8pvSxRMfuVFOsqK1qoqJC+YldVgNkPlW
K1sfIWkEntMR2ip5ffF8vqVIokTlRtzi9a0hVWowBo6vNdzpBwanr1Ls/fcxaHvU
behYyNzGOa19/2EC6uHsREffVfZWiKGd1CRdYGKVBVScP7ctHnVsK2RH8u5NkO2V
oOhDdxtV1cYCm4y9u0s7ySJqWuMvGQKIFMA5FHQkorheGwa6SPgUEk9qD9/9lqNi
D9UMLVwyLBZ2+CmUZ1koEJH/3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFBOAN7f9
zyb6LitrizpyJpKSngdgMB8GA1UdIwQYMBaAFKaDYyVG8aEHhLwaT/b6C75s7C1O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU0Ny82MjZFMTA5NDk4
QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9RZUV2QnBQOXZvTHZtenNM
VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BvTmpKVWJ4b1FlRXZCcFA5dm9Mdm16c0xVNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUY1NDcvNjI2RTEwOTQ5OEM3MTFFQzg2QTAwOTQ5QzRGOUFFMDIvNjI0NkIxRjI2
MDlBMTFFREFBRjcwQzI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnrgIwDQYJKoZIhvcNAQELBQADggEBADpgxoApl39DtKsB
L4AFoaX77kG8Lp4Ekkv1SWh4rlGNTkq7xDRaTvWfNxygH5dij0fPjJt5+3RKQKeU
2ACF4TzNhgbnQbIWGUA4xMx/TvO68CWx8v2czGL2wYWAv7GmNVsxT0+yOITJH/Wv
Fwmwej2HIpq0f4KIWOIoDh+E+72v2dWhA+RpqNUfkO3nA7PlFtDlZbW6J6E2elJm
gfgzS+ElVf8EyaCmX0pYmaP5P/nrawAWyRTvzvK7JxXmDa6Z/LmEWLjLJEmxZRtj
6SGceDAfRXGyeyvfv48WvXaYwXLFZm3YJC8pyZHD62rWTTn+NsbfcSCYlfPz2MC9
J0NOdDM=
-----END CERTIFICATE-----
Generated at Mon Dec 8 10:54:08 2025 by rpki-client