This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/229EA4AC57D811EEAB6EE280C4F9AE02.roa
File:                     229EA4AC57D811EEAB6EE280C4F9AE02.roa (raw, json)
Hash identifier:          leuT8NihMZEPQL69cSoEkbbjn0/OZKhhi70/x4JM3ME=
Subject key identifier:   CC:85:31:01:C6:22:24:41:A8:F9:65:CA:B6:6A:3F:A2:45:61:D4:AF
Certificate issuer:       /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
Certificate serial:       01B4
Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/229EA4AC57D811EEAB6EE280C4F9AE02.roa
Signing time:             Wed 17 Dec 2025 03:22:40 +0000
ROA not before:           Wed 17 Dec 2025 03:22:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     209854
IP address blocks:        103.176.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl
                          rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 02:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
        Validity
            Not Before: Dec 17 03:22:40 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69422200-f8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:f2:93:6a:31:1d:e0:d3:b1:f8:48:a7:c9:
                    4d:2d:62:aa:d5:35:cc:b5:a5:4c:9c:21:7a:63:a8:
                    de:72:0d:6c:86:c9:27:94:3d:40:e6:09:a0:8b:47:
                    4c:a3:e4:48:16:36:e4:0f:be:fc:e2:65:f8:7d:8c:
                    be:2d:70:8f:00:6f:9b:34:77:f7:2b:bc:f9:fd:5c:
                    53:75:f1:48:b8:e7:84:01:9d:31:2e:1d:ae:ea:78:
                    58:16:9a:bb:63:3b:34:bc:0d:3f:69:12:96:9b:cb:
                    79:6d:43:8d:06:3c:17:c6:39:d5:f2:e1:29:d2:88:
                    31:bc:90:93:be:2e:d0:3c:eb:22:fe:5e:93:17:c3:
                    c3:6c:71:5a:97:71:53:d6:84:62:5c:0c:95:29:b3:
                    91:1b:fc:2b:c5:39:c9:60:5a:17:ff:81:22:1c:fe:
                    d5:00:b8:c5:34:cc:e3:79:21:a3:de:51:9d:5f:97:
                    b6:5b:ee:80:ae:cc:27:16:30:46:9b:22:72:5f:2e:
                    e1:f7:f1:57:7e:3f:5d:69:f1:ab:a4:17:55:7a:78:
                    3b:1f:c5:5a:cc:45:9e:50:be:6b:03:05:83:04:f5:
                    a2:b7:9f:0e:6a:20:fd:fa:3a:62:92:53:b6:e6:f8:
                    81:97:05:8d:a2:b2:e5:6c:fb:54:fd:f9:7f:45:11:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:85:31:01:C6:22:24:41:A8:F9:65:CA:B6:6A:3F:A2:45:61:D4:AF
            X509v3 Authority Key Identifier:
                keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/229EA4AC57D811EEAB6EE280C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:c9:12:5e:69:5b:97:8e:52:f5:d7:a0:68:78:af:e3:88:c1:
         a2:4c:07:34:e4:7d:3d:11:80:52:14:9d:9c:b2:f8:87:42:f8:
         87:aa:b4:5c:bc:38:2c:86:0d:55:76:10:83:eb:cc:eb:9e:b7:
         83:03:74:3a:34:b2:a5:ba:61:38:40:68:eb:38:6b:20:97:01:
         86:44:8a:f4:30:9c:86:84:84:08:cb:c1:3b:e6:43:66:26:32:
         70:b1:fc:50:1c:a3:7a:32:c3:c2:bb:d3:2d:fa:0f:34:d2:9c:
         5b:07:01:1f:1d:dd:79:e3:c0:8d:da:19:93:00:a8:41:fa:b8:
         65:fb:b1:0e:7e:9b:4b:4e:77:17:10:90:9b:86:0d:17:8a:a4:
         ce:85:55:28:84:71:63:aa:43:63:89:58:33:bb:09:c4:ef:82:
         21:a9:8d:b2:7d:e6:31:27:41:30:f9:d3:d7:eb:90:93:83:c0:
         d5:f1:9f:94:47:5a:78:fd:73:d7:82:51:4a:41:dc:3c:6d:4d:
         37:92:9a:0b:1b:8f:d1:69:91:68:0d:ec:6a:9c:70:91:e4:67:
         11:33:c7:79:b2:eb:db:a0:4f:a6:06:b0:ce:3c:38:ef:c9:86:
         c1:71:8f:d2:9c:cf:3b:be:46:fd:e0:e6:e4:db:06:9e:68:8a:
         ff:62:f1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:35:13 2026 by rpki-client