This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/3CCE23342EF211EE8BE1AB1DC4F9AE02.roa
File:                     3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (raw, json)
Hash identifier:          liB32LHWoTY1DeFXivtb2A9uOYDMDxMmgU/KmD+uViE=
Subject key identifier:   67:CD:0D:EA:CC:66:C8:86:28:8B:47:70:0A:BE:AB:B8:1B:2D:C3:3B
Certificate issuer:       /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80
Certificate serial:       024F
Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/3CCE23342EF211EE8BE1AB1DC4F9AE02.roa
Signing time:             Fri 05 Dec 2025 00:09:40 +0000
ROA not before:           Fri 05 Dec 2025 00:09:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139812
IP address blocks:        103.145.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl
                          rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827F2, serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80
        Validity
            Not Before: Dec  5 00:09:40 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=693222c4-a430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b7:f8:c1:6e:b6:a9:08:08:6f:59:06:c0:4f:
                    7e:97:c0:6a:15:48:f9:84:12:e9:cb:fa:1f:75:5b:
                    be:ad:d9:8f:c1:25:af:b7:31:2c:44:ce:82:e9:8a:
                    c5:2f:09:aa:a3:bc:3d:7b:17:0c:16:3d:c3:31:3b:
                    cd:36:3d:46:a9:7b:71:8c:31:26:6f:b7:b4:b6:44:
                    1e:59:36:e2:a3:e8:de:19:c1:26:9e:b2:d5:81:96:
                    dd:89:05:b4:b4:3a:a6:20:9d:b5:1d:30:62:0b:82:
                    aa:d5:6a:cf:05:1f:8e:e7:84:4c:96:80:11:c7:56:
                    4d:2d:62:29:9e:0d:e4:98:16:e5:a8:1e:b1:6e:d6:
                    e9:06:f5:53:74:73:96:65:04:c6:60:93:ba:81:c1:
                    d5:f3:c5:fc:17:05:a8:94:ad:cd:7d:6e:52:ff:6e:
                    07:43:49:22:53:5f:3d:d6:d5:90:65:3c:01:4b:94:
                    7b:33:8c:9d:13:97:c7:4e:bc:2f:51:6a:3c:d8:9c:
                    39:e0:81:17:62:40:28:61:dd:e7:c5:db:c9:a1:f2:
                    8a:a4:f9:02:43:a8:c7:76:5b:a3:e3:7f:30:a3:fc:
                    5c:c3:3b:74:fb:3d:58:c3:e3:98:3f:2d:c3:1d:b2:
                    6c:db:40:9b:f9:d9:32:7e:52:1a:a7:3c:4b:f4:57:
                    7f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CD:0D:EA:CC:66:C8:86:28:8B:47:70:0A:BE:AB:B8:1B:2D:C3:3B
            X509v3 Authority Key Identifier:
                keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/3CCE23342EF211EE8BE1AB1DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:16:12:92:64:0b:3b:5f:02:3e:85:bf:4e:56:40:5b:91:d6:
         76:54:2d:c1:e7:82:da:7e:3e:7c:39:f7:9d:14:fd:c4:45:ba:
         0a:ac:d0:1a:82:94:be:90:74:03:95:a2:8e:b1:d7:ab:17:20:
         60:0e:0e:ad:f8:b7:5c:45:35:de:ce:ce:78:ba:31:0b:6c:1a:
         f7:00:e7:a9:e0:c6:40:2c:6a:23:bc:61:4d:36:06:5f:2f:1f:
         5c:24:b5:55:c1:b8:e3:07:52:e4:02:ef:2d:ee:da:1b:b4:54:
         9b:bc:ca:79:d5:32:c5:b6:85:fd:8c:81:cc:0e:cb:b0:0c:a2:
         57:23:df:e8:79:c5:09:f1:29:3b:02:96:9a:ae:27:8d:8a:53:
         66:2d:15:5e:08:bb:cd:0e:fb:4f:fb:97:14:51:86:63:d6:b4:
         d7:f5:3e:d5:62:ba:bf:d4:bd:37:7b:94:78:fa:c6:83:7d:95:
         12:e9:a5:b3:9d:da:ae:9f:47:2c:18:0d:b3:db:c3:59:29:df:
         d5:4a:5f:0f:c3:6b:10:f1:a3:38:54:ed:0c:12:0d:c6:cc:6e:
         fb:96:95:3d:94:43:80:d1:9a:7a:93:a8:ee:2a:c5:c5:4e:ee:
         fc:4d:b2:9b:1f:69:dd:88:f1:4b:a1:e9:c4:69:0c:c4:58:0f:
         d2:27:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:34:26 2025 by rpki-client