This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/AA5D86B2381311EA998E103FC4F9AE02.roa
File:                     AA5D86B2381311EA998E103FC4F9AE02.roa (raw, json)
Hash identifier:          Tom7u2KILmaBR19TjEIpuUPoq7F9nKzmH+Ll43MgfGY=
Subject key identifier:   E0:A1:77:06:2A:A0:F9:19:E0:BF:B4:FB:02:ED:FB:4C:C9:D5:3D:3C
Certificate issuer:       /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
Certificate serial:       0CB3
Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/AA5D86B2381311EA998E103FC4F9AE02.roa
Signing time:             Thu 18 Dec 2025 18:15:57 +0000
ROA not before:           Thu 18 Dec 2025 18:15:57 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136145
IP address blocks:        103.79.224.0/24 maxlen: 24
                          103.79.225.0/24 maxlen: 24
                          103.79.226.0/24 maxlen: 24
                          103.79.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl
                          rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 17:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3251 (0xcb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
        Validity
            Not Before: Dec 18 18:15:57 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=694444dd-1223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:0f:ce:d2:38:3d:3b:0b:a5:a7:93:53:73:
                    2b:43:71:8b:6b:2f:b7:06:a1:c9:bb:dd:6c:da:e9:
                    ad:3e:9d:22:cf:d3:94:6d:e2:62:0a:b4:e5:cc:3f:
                    77:d1:f5:86:4e:4d:75:6a:b6:14:78:b4:3f:48:fa:
                    52:8e:64:3b:ac:7b:82:90:45:2b:df:49:45:2b:47:
                    89:71:00:7f:44:5f:1f:af:86:cb:f2:2d:6d:cc:08:
                    aa:e5:d7:a0:7a:8b:8b:cb:15:f9:41:d6:16:8c:f3:
                    1c:8a:a4:47:c2:2f:d3:50:f2:59:4e:30:9b:a4:3e:
                    12:80:60:ce:22:33:c4:bd:f7:5b:a3:e8:65:8b:74:
                    7d:d0:6d:2d:d9:2a:9e:dd:e6:d9:52:d8:2c:a6:50:
                    3a:c7:66:d1:1c:56:c2:df:78:fe:73:1d:6b:ea:e9:
                    07:34:d3:45:d5:70:a0:27:50:c3:28:fc:7b:03:02:
                    cd:1b:00:95:e7:2b:c2:2e:5e:c2:03:fe:c3:2d:16:
                    26:3b:8b:89:f2:32:78:d1:d5:a9:00:09:96:08:31:
                    e9:d3:03:ab:d9:c5:8f:0d:77:4b:73:5e:07:fe:90:
                    d5:a6:2a:19:8c:14:8f:cf:1a:03:8d:a6:d5:f8:2b:
                    31:6d:a9:cb:90:d4:53:f6:65:9d:59:b8:e1:a4:52:
                    cf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A1:77:06:2A:A0:F9:19:E0:BF:B4:FB:02:ED:FB:4C:C9:D5:3D:3C
            X509v3 Authority Key Identifier:
                keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/AA5D86B2381311EA998E103FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:7f:3e:26:11:f3:d0:e0:e5:47:62:c0:97:c7:9a:73:fd:c5:
         c9:02:6f:6d:5f:44:2d:83:c2:9d:1c:93:4e:16:79:2d:12:40:
         59:b0:dc:b2:79:81:ae:9c:4f:d4:3a:17:b3:87:68:9e:d9:63:
         f8:aa:70:6d:56:1f:0f:24:f5:f0:29:8b:aa:5c:00:3c:1f:51:
         48:4a:3c:e1:17:5b:d3:bf:2e:51:67:cd:69:e8:bd:17:09:97:
         08:b9:d6:c1:46:c4:4c:75:5d:14:0c:f6:60:cd:38:c9:95:b4:
         98:49:d7:2e:37:ea:11:17:74:de:5c:af:85:73:bc:f3:58:aa:
         e1:c3:da:04:5b:ff:67:21:f7:87:9e:73:ac:67:44:e1:b7:36:
         81:aa:a3:28:16:cf:29:74:cb:19:0c:44:56:e7:77:22:fc:0f:
         e4:ef:c1:1e:74:d6:33:cc:db:cd:fd:01:b4:1e:76:38:a8:d2:
         2d:2a:9c:7e:cf:34:c4:61:7d:5c:14:dc:b0:fe:82:66:5f:e8:
         11:04:e4:1c:96:91:c0:65:aa:d1:fa:04:ab:9f:13:42:d3:57:
         28:22:da:f0:2c:9c:16:65:7a:5a:1a:61:08:c3:cc:d1:07:12:
         4f:ad:72:0a:35:60:9c:7a:9d:3e:96:50:ce:55:10:f0:ae:00:
         28:5b:61:0c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQzOEExMTAvBgNVBAUTKEI2MjBBOUM0OTYzNzY2Q0MzQzU4MDYwNjk0OTIyRTlG
Njc4ODExREUwHhcNMjUxMjE4MTgxNTU3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQ0NDRkZC0xMjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsbcPztI4PTsLpaeTU3MrQ3GLay+3BqHJu91s2umtPp0iz9OUbeJiCrTlzD93
0fWGTk11arYUeLQ/SPpSjmQ7rHuCkEUr30lFK0eJcQB/RF8fr4bL8i1tzAiq5deg
eouLyxX5QdYWjPMciqRHwi/TUPJZTjCbpD4SgGDOIjPEvfdbo+hli3R90G0t2Sqe
3ebZUtgsplA6x2bRHFbC33j+cx1r6ukHNNNF1XCgJ1DDKPx7AwLNGwCV5yvCLl7C
A/7DLRYmO4uJ8jJ40dWpAAmWCDHp0wOr2cWPDXdLc14H/pDVpioZjBSPzxoDjabV
+CsxbanLkNRT9mWdWbjhpFLP0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFOChdwYq
oPkZ4L+0+wLt+0zJ1T08MB8GA1UdIwQYMBaAFLYgqcSWN2bMPFgGBpSSLp9niBHe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM4QS85QUVGMTdCRTA1
RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pzdzhXQVlHbEpJdW4yZUlF
ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RpQ3B4SlkzWnN3OFdBWUdsSkl1bjJlSUVkNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkQzOEEvOUFFRjE3QkUwNUY0MTFFQTg4NkEzQzIzQzRGOUFFMDIvQUE1RDg2QjIz
ODEzMTFFQTk5OEUxMDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnT+AwDQYJKoZIhvcNAQELBQADggEBAB9/PiYR89Dg5Udi
wJfHmnP9xckCb21fRC2Dwp0ck04WeS0SQFmw3LJ5ga6cT9Q6F7OHaJ7ZY/iqcG1W
Hw8k9fApi6pcADwfUUhKPOEXW9O/LlFnzWnovRcJlwi51sFGxEx1XRQM9mDNOMmV
tJhJ1y436hEXdN5cr4VzvPNYquHD2gRb/2ch94eec6xnROG3NoGqoygWzyl0yxkM
RFbndyL8D+TvwR501jPM2839AbQedjio0i0qnH7PNMRhfVwU3LD+gmZf6BEE5ByW
kcBlqtH6BKufE0LTVygi2vAsnBZleloaYQjDzNEHEk+tcgo1YJx6nT6WUM5VEPCu
AChbYQw=
-----END CERTIFICATE-----
Generated at Wed Dec 24 22:57:38 2025 by rpki-client