This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/A9AB917CDF2A11F092E976D2656F56BC.roa
File:                     A9AB917CDF2A11F092E976D2656F56BC.roa (raw, json)
Hash identifier:          hFybGfFrMHjkE0yROGxNrNMcjfr38O9Z4PJhiWuMpCk=
Subject key identifier:   8C:13:EE:D0:DD:DC:8C:45:38:BE:FB:43:1C:B0:FA:FD:96:DC:56:9A
Certificate issuer:       /CN=A91761A9/serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0
Certificate serial:       02
Authority key identifier: C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/A9AB917CDF2A11F092E976D2656F56BC.roa
Signing time:             Mon 22 Dec 2025 11:37:58 +0000
ROA not before:           Mon 22 Dec 2025 11:37:58 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     137386
IP address blocks:        103.51.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl
                          rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 11:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91761A9, serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0
        Validity
            Not Before: Dec 22 11:37:58 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69492d95-9e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1a:98:78:17:5e:95:4f:a3:eb:d0:55:7c:62:
                    75:04:93:78:57:43:7e:4f:59:27:8d:d5:0e:0c:01:
                    d7:87:10:33:d6:94:68:c0:52:41:db:5d:52:56:8d:
                    92:3c:70:3d:d7:f5:49:46:4b:06:cc:26:1c:1c:e4:
                    c3:53:75:f0:9b:0a:6a:6c:77:d7:94:fa:29:58:39:
                    37:d5:d2:d0:55:27:5e:e7:e6:dd:d2:9b:7c:dd:8b:
                    0c:9f:30:9a:d7:62:9a:c3:c2:98:96:3b:ae:9c:f3:
                    71:4d:66:53:b2:44:cc:92:48:1d:0a:86:5c:dd:d8:
                    07:2d:3c:b1:0d:17:24:41:41:67:35:ec:8b:9c:15:
                    98:b1:38:6c:53:28:a0:b1:23:ed:65:ca:26:70:61:
                    69:a8:74:55:fa:d2:77:30:6a:85:74:ad:22:47:7a:
                    c8:14:24:ca:f2:78:a4:cd:91:2b:19:8f:60:ee:ed:
                    ac:25:da:8e:54:fd:8f:e3:40:9b:e7:87:97:0d:01:
                    57:82:08:5c:c2:7d:24:0b:dc:ad:d2:1c:1a:b7:4e:
                    6c:aa:2b:20:99:14:93:67:13:6b:48:eb:32:c3:56:
                    91:ec:e5:0e:b2:f1:71:25:87:8f:6e:64:4e:fb:a3:
                    42:99:2f:76:28:f9:51:af:8e:3a:14:03:65:48:cc:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:13:EE:D0:DD:DC:8C:45:38:BE:FB:43:1C:B0:FA:FD:96:DC:56:9A
            X509v3 Authority Key Identifier:
                keyid:C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/A9AB917CDF2A11F092E976D2656F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:dc:1f:6f:8e:75:ea:05:94:25:79:b5:a5:ac:96:44:c8:4d:
         b2:95:87:11:28:59:88:f2:a2:7c:55:c1:dc:65:3a:5a:16:73:
         2b:f7:83:64:51:5d:4a:4c:d2:6e:d5:84:ff:83:44:41:6a:5c:
         b2:bf:c0:94:70:54:b6:de:91:aa:53:27:2f:39:f1:be:eb:c6:
         03:30:d0:1c:f0:a1:ad:1d:48:ab:10:45:b3:4f:71:ff:69:a8:
         a9:60:43:fa:06:90:7a:db:f4:e0:28:7b:2b:4f:32:f8:81:30:
         12:d7:92:f5:7c:c1:75:9a:44:04:57:94:7e:ad:05:96:08:ed:
         55:8b:73:ca:cc:dd:d9:ae:fd:d1:f8:82:98:7e:4f:25:93:72:
         7d:d5:dd:f2:46:35:78:fb:a6:f6:a0:6b:be:dd:9e:42:ea:0f:
         1f:31:7e:54:47:ea:f9:cd:52:29:e2:74:19:8f:8d:20:57:7a:
         b8:c8:98:e1:d4:b6:98:6f:3e:4c:a8:e5:f0:ff:47:d6:ad:7d:
         02:44:23:f3:d2:b6:84:9a:77:8a:ba:4d:9a:d2:78:50:c2:23:
         e5:81:9c:b1:ff:95:e9:2d:dd:ea:2d:87:41:0e:d4:2d:d3:4f:
         91:9c:c8:8a:3a:de:9b:95:40:2f:9e:91:d8:97:5e:f1:6c:5b:
         b2:9b:99:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:16:34 2025 by rpki-client