This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/A50FD050DA7911EDB0D3866BC4F9AE02.roa
File:                     A50FD050DA7911EDB0D3866BC4F9AE02.roa (raw, json)
Hash identifier:          9a1saGzvGV5svACVPCkxUcwM3m5jx8fjMnSuv7DH99Y=
Subject key identifier:   7B:BF:0C:85:AD:6A:26:7A:67:DB:C7:69:37:30:2B:21:1C:97:6B:78
Certificate issuer:       /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Certificate serial:       025A
Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/A50FD050DA7911EDB0D3866BC4F9AE02.roa
Signing time:             Sat 27 Dec 2025 01:21:20 +0000
ROA not before:           Sat 27 Dec 2025 01:21:20 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150452
IP address blocks:        103.46.184.0/23 maxlen: 24
                          2400:c620::/32 maxlen: 32
                          2400:c620:10::/44 maxlen: 48
                          2400:c620:20::/44 maxlen: 48
                          2400:c620:30::/44 maxlen: 44
                          2400:c620:40::/44 maxlen: 44
                          2400:c620:50::/44 maxlen: 44
                          2400:c620:60::/44 maxlen: 44
                          2400:c620:70::/44 maxlen: 44
                          2400:c620:80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
                          rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 01:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
        Validity
            Not Before: Dec 27 01:21:20 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=694f3490-51bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:10:52:86:11:af:0b:7e:3c:02:ee:21:d2:e7:
                    df:6c:7d:ac:bc:03:d3:fd:bf:bb:67:ed:39:5d:b0:
                    35:9c:b0:45:5e:f7:68:f7:35:ad:e5:93:67:70:b7:
                    74:31:43:b8:83:b3:02:33:6f:4a:38:0f:94:77:20:
                    15:a6:7d:de:0c:dd:91:14:79:f1:3b:5d:63:70:4f:
                    02:97:9b:43:61:ee:7e:47:72:11:e7:83:99:8c:4d:
                    cb:c7:b6:cf:35:d2:34:90:20:bb:f1:c3:fd:dc:78:
                    25:0d:ef:c2:60:a8:e9:22:91:96:85:a7:4e:32:6b:
                    7a:f3:ad:95:2a:cc:d0:7e:7f:a2:f5:eb:1f:bc:d2:
                    4d:13:e8:f5:d6:fb:01:c2:09:70:4e:4d:24:73:82:
                    25:9e:05:aa:e6:3d:b3:55:1c:a5:3e:f7:da:07:bb:
                    75:5d:b0:36:87:02:b6:d5:c0:9b:c3:be:6c:4c:94:
                    ff:17:4b:ad:33:7f:50:d9:0b:a3:ba:5f:ad:21:8a:
                    77:a2:7e:cc:6f:64:0e:cf:21:d3:61:fb:cd:3c:23:
                    96:22:97:10:90:83:4f:d7:d9:20:e6:b5:54:f6:f0:
                    4e:b5:30:b9:5e:fe:f9:2b:49:34:bb:06:59:83:fa:
                    d4:c7:08:52:22:9a:85:aa:92:1e:43:36:a9:49:f9:
                    53:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BF:0C:85:AD:6A:26:7A:67:DB:C7:69:37:30:2B:21:1C:97:6B:78
            X509v3 Authority Key Identifier:
                keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/A50FD050DA7911EDB0D3866BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.184.0/23
                IPv6:
                  2400:c620::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:e4:5c:86:a5:10:b3:06:5a:26:8a:9a:11:c4:96:c2:2d:04:
         c4:8b:5c:58:4f:2c:ce:75:cb:2a:dd:85:78:86:a8:c7:f8:38:
         39:4d:51:0f:2a:04:76:a8:da:b0:38:98:8b:f0:55:69:a6:85:
         73:de:b0:2b:c2:c8:a8:e9:d1:e7:f4:15:59:38:0a:d5:ab:6c:
         84:51:20:d3:57:a9:9e:9c:1f:70:2b:24:be:4e:40:ab:bd:d2:
         15:53:6b:1f:ec:1e:ab:a9:c8:79:d1:73:15:52:49:4e:4f:79:
         c4:ef:69:48:56:b4:ed:b5:90:53:48:22:4a:27:38:bd:db:33:
         1a:02:d7:b2:d7:d6:85:87:f2:d5:8f:c3:ca:21:1e:3f:7a:f0:
         e0:8f:75:74:1b:5a:cd:3b:34:1a:e3:f2:03:44:95:f6:67:da:
         9c:eb:a4:54:bb:dc:55:b6:eb:33:57:75:f4:f8:3a:79:d3:e3:
         35:22:3d:27:70:84:64:57:17:bb:b3:1f:f4:96:0f:00:20:1d:
         5b:ca:95:0a:74:03:27:fe:d2:80:0f:fd:29:41:eb:95:d2:66:
         46:ed:3a:15:32:44:87:f4:8e:e1:3c:09:1a:24:24:a0:e7:58:
         e2:c3:2f:f4:ba:f8:58:e8:f1:8e:7b:43:12:94:2a:03:07:80:
         ab:35:17:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 22:12:13 2025 by rpki-client