This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/058EA22EDB0A11F080DEC20382D3641D.roa
File:                     058EA22EDB0A11F080DEC20382D3641D.roa (raw, json)
Hash identifier:          IqDiDqFtVjIRopdlZHPBabUajsPyIoKHoBOGPIyEc5w=
Subject key identifier:   FC:7C:F7:87:AC:94:4D:26:5B:32:93:F8:F9:4B:16:8F:E7:03:CB:C0
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       0565
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/058EA22EDB0A11F080DEC20382D3641D.roa
Signing time:             Wed 17 Dec 2025 05:34:14 +0000
ROA not before:           Wed 17 Dec 2025 05:34:14 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.73.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 22:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1381 (0x565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: Dec 17 05:34:14 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=694240d6-d44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:5d:27:8a:9d:c1:8f:ad:9f:db:68:d4:c9:
                    58:2b:b4:d3:4c:fa:b9:f9:4b:e7:47:10:d5:b3:78:
                    80:cf:bb:f7:36:72:13:21:9b:c3:d9:e9:65:a7:b8:
                    4d:7d:e1:2e:83:0c:7a:84:5f:bc:06:c2:df:56:4a:
                    30:f3:e3:b4:3a:55:f4:95:70:a6:92:96:43:5e:3d:
                    6c:c5:e5:fa:08:da:34:85:30:bc:24:1f:a1:58:29:
                    1d:f5:7b:ab:fc:8c:04:53:fd:44:26:ad:a0:25:b8:
                    6b:7d:1a:f4:6c:ab:e2:cb:f7:70:34:86:17:92:ca:
                    10:90:2e:d9:f9:a3:f6:4c:c7:b9:0f:98:e4:27:56:
                    9b:c0:1a:36:39:d3:72:44:fb:38:e4:02:f4:1e:62:
                    e2:49:04:8f:d3:58:69:c4:04:2e:b9:8a:65:91:2a:
                    c3:d3:2d:f2:af:65:c0:b1:df:f2:62:fe:2d:1b:b2:
                    8e:f3:07:d1:91:72:28:9d:fd:27:6c:d7:10:b9:6b:
                    2a:e6:5c:91:ea:a0:3b:2b:8e:a8:39:c4:9d:30:d1:
                    bf:3e:3f:32:e6:97:2a:a4:e7:7c:0b:23:d9:99:e0:
                    04:76:e3:2f:c0:49:38:9d:21:f6:ad:13:db:d2:77:
                    dc:c5:c8:34:69:a0:b5:f1:e2:ab:ae:61:22:d0:9d:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7C:F7:87:AC:94:4D:26:5B:32:93:F8:F9:4B:16:8F:E7:03:CB:C0
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/058EA22EDB0A11F080DEC20382D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:f7:c0:42:d6:be:fe:40:9d:6b:a1:81:b8:20:e0:c5:66:fb:
         55:53:63:40:f9:49:9e:2a:df:52:be:5b:be:bf:6d:a5:94:29:
         fa:88:e5:d7:a7:d1:6b:d6:6d:c2:a2:bd:77:0b:d0:4d:dd:30:
         64:db:46:79:58:4e:4b:28:73:01:9b:4f:f9:e0:c8:0b:e5:4d:
         aa:91:83:66:d6:4d:f4:ff:4a:c8:1c:a1:ee:1f:db:a6:cb:39:
         bd:99:c3:b8:9b:56:6a:2c:16:92:b9:b7:de:42:84:ce:a8:44:
         2e:a9:7c:cd:09:45:9e:c6:f9:11:2c:03:e1:89:3e:3f:6d:21:
         df:b3:c8:85:b3:b2:ed:e0:f0:2f:7f:d2:54:38:18:5c:8f:aa:
         6b:c3:b9:26:c9:15:fb:ee:e7:73:d5:38:2a:d5:f3:72:ba:c7:
         49:d7:98:c8:b9:07:5c:5e:9d:cd:d7:cf:a7:a9:ee:11:54:25:
         9e:98:2c:fd:80:db:03:9b:25:41:9d:98:a4:49:ca:36:80:39:
         dc:e7:bf:9f:61:a7:e0:bd:34:02:37:53:3f:de:56:74:a4:73:
         41:7c:2c:7e:15:36:df:e5:49:4f:e0:ce:1f:60:cd:1a:b2:1f:
         9a:65:71:c1:35:ca:40:e8:06:b8:bb:37:57:ba:ac:3d:3b:3f:
         a2:30:c7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:18:38 2025 by rpki-client