This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/87840F3AFBD111EFB4804F27C4F9AE02.roa
File:                     87840F3AFBD111EFB4804F27C4F9AE02.roa (raw, json)
Hash identifier:          XEGmKD795YZlLqRq5mxXRuhSLfvM8giXSaR4iM1yE7A=
Subject key identifier:   F1:36:E7:F7:DE:38:A3:FA:85:CE:96:33:75:F3:0A:73:10:21:27:0B
Certificate issuer:       /CN=A91524AF/serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Certificate serial:       04F1
Authority key identifier: 5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/87840F3AFBD111EFB4804F27C4F9AE02.roa
Signing time:             Tue 16 Dec 2025 23:20:17 +0000
ROA not before:           Tue 16 Dec 2025 23:20:17 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149039
IP address blocks:        103.177.72.0/23 maxlen: 23
                          2001:df0:1ec0::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl
                          rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 23:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1265 (0x4f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91524AF, serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
        Validity
            Not Before: Dec 16 23:20:17 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6941e930-735f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fd:dd:c1:56:71:ce:43:50:6d:70:c9:b9:d7:
                    9c:6a:94:5f:04:7e:51:6a:35:dc:78:7d:b0:2d:26:
                    6f:d5:7e:d1:42:ec:ad:61:8d:60:d2:23:bf:71:b9:
                    92:5d:f5:b9:42:94:1a:05:25:04:7a:f0:90:47:a9:
                    af:cc:e1:6d:99:84:44:0c:1c:ae:b3:9f:0e:72:84:
                    d7:89:a4:c7:9b:38:45:de:9a:2b:69:15:14:13:5d:
                    ea:db:15:4a:61:51:80:c2:a3:34:6b:02:8a:1a:72:
                    61:79:68:7b:c5:99:2a:cb:0d:67:9a:c3:df:33:9e:
                    b6:38:cb:10:30:5e:15:fa:c1:10:d9:fa:3a:1e:93:
                    cd:70:bb:16:d1:68:60:09:80:7e:ca:9c:3a:39:6a:
                    99:2c:b4:25:91:07:f0:cc:0b:20:f0:e2:4e:df:f2:
                    e1:92:a5:c8:20:e8:f7:08:3f:fb:36:93:4b:57:fc:
                    a3:63:63:42:46:cf:9f:c4:80:3b:67:f6:e3:e1:ba:
                    05:2a:4d:75:67:89:f2:88:6b:01:00:ad:31:ff:9e:
                    cf:a8:77:82:91:42:4b:e9:db:99:a9:39:1f:17:e1:
                    a1:a8:cb:28:5b:53:c0:69:5a:ec:c0:df:c7:32:d3:
                    99:ff:1d:2e:ba:81:a4:5e:e8:57:c4:fc:d2:00:48:
                    7c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:36:E7:F7:DE:38:A3:FA:85:CE:96:33:75:F3:0A:73:10:21:27:0B
            X509v3 Authority Key Identifier:
                keyid:5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/87840F3AFBD111EFB4804F27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.72.0/23
                IPv6:
                  2001:df0:1ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:15:d3:b4:ed:dc:33:1e:9b:55:4f:79:a2:94:32:6e:bd:fe:
         62:89:8d:54:fb:84:04:81:f3:f9:78:19:f2:9b:8e:de:bf:a1:
         ee:06:46:a6:d9:45:17:b9:bc:13:ce:23:b6:8d:3c:cd:c6:7f:
         ce:4c:59:a8:06:b1:d6:16:ca:12:45:9f:d2:7c:72:84:92:8a:
         be:9f:97:d2:27:0a:91:3c:57:01:a5:c7:3e:2c:2d:67:71:8a:
         5e:52:f5:c1:7e:1d:52:e7:9e:20:80:c2:15:8f:bc:11:d4:a1:
         d8:b5:f9:62:09:8b:bd:5c:98:30:93:f8:14:2d:73:66:77:3d:
         03:dd:44:43:c4:a1:d9:e3:20:89:dd:80:f5:5f:c5:e2:0d:0b:
         de:70:91:d8:53:ce:fc:42:ae:10:51:2b:6f:66:c0:0c:76:13:
         0e:ef:0b:bb:21:11:93:bb:6c:6d:bb:e9:a4:3d:5b:25:6c:94:
         64:08:57:64:41:fd:cf:6d:4c:49:3f:3f:a0:bc:2f:1b:ce:aa:
         78:50:38:8c:69:1b:82:6d:fb:9c:dd:59:c4:8b:68:5e:b4:63:
         05:da:14:92:4e:79:0a:1f:67:40:c6:d7:c1:e9:f1:9a:a9:fe:
         ec:63:a8:b6:67:45:c7:87:8c:df:d2:ca:a8:2c:83:89:39:8d:
         ec:ff:62:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 06:22:24 2025 by rpki-client