This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/5F47B232DF0711F0899AA5EF5C6F56BC.roa
File:                     5F47B232DF0711F0899AA5EF5C6F56BC.roa (raw, json)
Hash identifier:          SauP6nDooiqlWIoLNHqPCC3v5Fx+lq8e50AU0GvqpMo=
Subject key identifier:   25:9B:D0:11:44:5E:5D:7C:D4:C9:10:08:48:9B:AE:BB:2C:69:FB:B3
Certificate issuer:       /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Certificate serial:       0B8F
Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/5F47B232DF0711F0899AA5EF5C6F56BC.roa
Signing time:             Mon 22 Dec 2025 07:32:38 +0000
ROA not before:           Mon 22 Dec 2025 07:32:38 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     9371
IP address blocks:        58.84.5.0/24 maxlen: 24
                          103.197.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
                          rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 08:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2959 (0xb8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
        Validity
            Not Before: Dec 22 07:32:38 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6948f416-3512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3e:65:82:36:c7:5f:87:22:77:7d:d8:db:13:
                    1f:af:d4:51:17:de:4f:e9:a7:08:8f:07:d6:bf:e2:
                    9f:9a:96:87:0b:b1:55:72:25:d0:db:e3:1b:4b:cc:
                    78:dd:dd:0e:78:82:ce:0e:d2:66:02:d9:f5:f5:6f:
                    9b:69:2f:24:91:06:cd:8f:4a:a2:0d:9f:f1:fb:31:
                    0d:ae:b5:ed:1e:93:95:c7:ed:19:2b:13:9b:8a:42:
                    87:ec:01:8e:dd:dc:d8:61:e5:bf:6d:a2:98:4c:b3:
                    00:00:21:88:ad:14:2d:50:f7:5f:e1:c9:58:2c:39:
                    73:a6:22:16:4e:0c:52:08:29:75:67:79:6d:9c:08:
                    b0:16:34:23:e7:5d:63:a0:37:7e:2f:be:d0:b6:84:
                    d8:e3:06:14:60:aa:ba:17:65:01:e0:81:2d:f0:2d:
                    ba:28:06:84:2a:41:6f:cb:1b:48:53:53:37:86:08:
                    fd:e7:c8:93:10:b2:85:38:c7:7b:0e:e0:14:5e:72:
                    16:20:d0:eb:d6:9f:62:cd:c9:44:b8:5e:36:16:ce:
                    f0:a2:2c:f2:e1:a8:ff:10:36:42:b7:0b:d5:35:16:
                    a9:e3:07:a3:10:13:26:77:33:63:c6:15:d3:e4:dc:
                    e6:79:2d:85:f2:31:54:b3:ed:58:60:03:93:f3:42:
                    1f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9B:D0:11:44:5E:5D:7C:D4:C9:10:08:48:9B:AE:BB:2C:69:FB:B3
            X509v3 Authority Key Identifier:
                keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/5F47B232DF0711F0899AA5EF5C6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.84.5.0/24
                  103.197.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:78:ef:78:9f:ad:7e:b1:08:24:2c:fb:be:6d:8a:17:84:33:
         1e:32:6e:c9:cf:62:72:55:e9:bd:fd:10:03:b3:96:3d:4a:47:
         01:85:6c:b5:74:38:9a:59:96:92:9e:e9:c0:c5:d9:13:27:11:
         fb:09:10:60:c7:20:fd:24:74:3b:7d:55:a6:31:51:4c:6e:12:
         fc:26:dc:ce:f4:cd:e6:d6:97:13:47:1b:22:d6:8f:82:ec:6c:
         36:7e:44:ff:10:8a:b2:22:39:1e:f2:a3:7c:49:80:4c:1d:c9:
         3c:99:f5:2a:ce:89:8b:bb:bb:a0:6e:31:84:06:19:5b:45:27:
         84:d2:b0:42:88:86:1e:3d:f2:79:1c:3e:87:58:98:e8:c4:02:
         01:b3:7f:4d:d9:94:25:37:9d:bf:57:67:3e:52:c7:c8:11:5a:
         68:6b:19:dc:8d:b8:f9:26:fb:1b:22:c9:aa:53:6f:19:80:f5:
         fc:87:43:65:24:a4:5f:70:49:df:88:9d:c8:ec:bd:6e:08:6b:
         78:03:c7:7f:74:c0:09:77:96:b2:1e:18:5b:8c:25:e2:8d:37:
         06:74:c5:5d:75:da:3e:c7:d0:2f:c4:66:93:25:0e:16:50:49:
         aa:57:1a:bb:a8:96:c3:65:2f:83:ca:2c:79:e4:69:9c:e2:2f:
         4f:a7:1b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 17:44:18 2025 by rpki-client