This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/D4B550921C2011F09CB77376C4F9AE02.roa
File:                     D4B550921C2011F09CB77376C4F9AE02.roa (raw, json)
Hash identifier:          al4L4k9AujPS4TVF8dnPgNjPk6NUkNAjv8YCZBtwUV0=
Subject key identifier:   88:EB:8D:61:DD:0A:29:96:26:98:1C:2E:E4:CA:4B:C7:13:7B:ED:0C
Certificate issuer:       /CN=A91F0CC8/serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
Certificate serial:       08EF
Authority key identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/D4B550921C2011F09CB77376C4F9AE02.roa
Signing time:             Thu 18 Dec 2025 06:25:36 +0000
ROA not before:           Thu 18 Dec 2025 06:25:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     18222
IP address blocks:        45.115.216.0/22 maxlen: 22
                          45.115.216.0/23 maxlen: 24
                          45.115.218.0/23 maxlen: 24
                          45.117.152.0/23 maxlen: 24
                          103.90.84.0/22 maxlen: 22
                          103.90.84.0/23 maxlen: 23
                          103.90.84.0/24 maxlen: 24
                          103.90.85.0/24 maxlen: 24
                          103.90.86.0/23 maxlen: 23
                          103.90.86.0/24 maxlen: 24
                          103.90.87.0/24 maxlen: 24
                          103.250.132.0/23 maxlen: 24
                          202.51.74.0/23 maxlen: 24
                          202.51.82.0/23 maxlen: 23
                          202.51.86.0/24 maxlen: 24
                          202.51.95.0/24 maxlen: 24
                          2400:89e0::/32 maxlen: 36
                          2400:89e0:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl
                          rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2287 (0x8ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0CC8, serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
        Validity
            Not Before: Dec 18 06:25:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69439e60-96cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c4:94:44:5b:5d:7b:ac:c3:23:2f:b6:f6:42:
                    b1:66:f3:2d:09:ac:9d:70:ac:66:a2:2a:d1:5e:23:
                    26:99:4c:4c:66:b1:3a:69:91:16:56:b5:e1:19:f1:
                    f4:dc:dc:94:da:4c:ca:59:af:7c:3c:ad:f7:f4:e1:
                    a7:14:0d:83:e9:49:6f:22:60:11:d7:12:27:da:5d:
                    80:d4:77:d7:7d:5f:37:60:3f:44:b9:ed:5e:67:1a:
                    f9:6c:ff:7a:8f:a0:01:4a:75:b7:39:71:34:27:a1:
                    de:69:1c:c0:7a:8b:05:d6:70:3f:c0:fb:aa:8b:d2:
                    dd:92:e5:ab:da:68:f6:c1:40:ea:e5:7e:83:75:f5:
                    bf:82:34:b9:7f:ac:e2:1e:cc:35:38:3d:9c:42:d3:
                    02:95:4e:c3:88:e4:76:7d:e1:b4:75:27:46:ad:dd:
                    df:2a:cb:00:6a:c6:27:f1:1d:fb:8b:d1:64:40:ea:
                    f3:34:dd:28:6a:4b:4b:9f:1a:db:17:a9:dd:1c:fd:
                    8f:cb:e9:9a:1d:58:89:ec:42:51:55:fa:6e:c2:fc:
                    30:2f:0e:2c:43:d3:51:8e:7b:ea:23:1b:ed:10:d4:
                    5d:ce:e4:d4:d0:26:c4:17:b6:7a:ac:40:1b:2b:5d:
                    ec:48:de:8e:3f:26:92:ee:8c:76:00:d3:04:e4:df:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EB:8D:61:DD:0A:29:96:26:98:1C:2E:E4:CA:4B:C7:13:7B:ED:0C
            X509v3 Authority Key Identifier:
                keyid:56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/D4B550921C2011F09CB77376C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.216.0/22
                  45.117.152.0/23
                  103.90.84.0/22
                  103.250.132.0/23
                  202.51.74.0/23
                  202.51.82.0/23
                  202.51.86.0/24
                  202.51.95.0/24
                IPv6:
                  2400:89e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:ea:4b:12:74:b2:b8:7b:96:8a:42:97:33:51:26:99:a4:b2:
         7b:6a:72:a3:bd:1e:8f:95:a3:52:94:ad:8c:27:2f:fb:4e:df:
         3a:68:10:59:2e:44:2f:8f:3d:72:16:b7:5e:d9:ec:f8:59:30:
         a1:f4:66:90:ac:0f:01:01:50:57:91:60:09:d3:80:c8:b2:30:
         a2:8b:89:43:fd:d8:d8:ca:a4:bd:bc:bf:95:e6:9d:0b:75:bc:
         68:14:77:ad:7a:65:ff:00:bb:a3:f9:a9:54:20:74:73:82:11:
         d5:0c:dd:62:b6:8b:82:3f:96:90:11:50:c1:b9:36:a9:be:72:
         3d:04:37:83:c2:f0:fd:ac:a0:81:e0:de:1d:6e:a8:76:25:e7:
         5c:cc:c2:c1:51:58:cf:bb:d3:df:64:c5:0a:e5:10:25:26:14:
         9c:b1:f7:7b:f2:e7:75:a0:f9:5c:25:9a:48:16:88:59:80:8a:
         18:54:b8:02:7f:0d:29:b8:0c:17:5d:a3:a1:f2:32:63:c8:e4:
         28:88:58:fd:5c:c8:b1:98:72:6b:0b:f3:04:40:7a:4c:93:2e:
         10:73:e2:64:dc:1c:90:08:4b:06:25:78:27:a3:ad:ea:4f:4e:
         7c:e8:c0:a0:10:d8:6e:33:5a:d1:b4:8a:0d:3f:96:b2:85:ad:
         74:33:6a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:16:15 2025 by rpki-client