This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/61B3CBDC631911ECAE6AA33DC4F9AE02.roa
File:                     61B3CBDC631911ECAE6AA33DC4F9AE02.roa (raw, json)
Hash identifier:          5jUnpiK90pdhSrw0aDnaZCFzrrcXvAV1QTg4pIkNsPM=
Subject key identifier:   C2:79:56:E1:E4:6E:BB:DA:37:60:96:D7:B9:50:64:CE:D5:3D:D4:85
Certificate issuer:       /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7
Certificate serial:       0495
Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/61B3CBDC631911ECAE6AA33DC4F9AE02.roa
Signing time:             Wed 17 Dec 2025 00:19:55 +0000
ROA not before:           Wed 17 Dec 2025 00:19:55 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149012
IP address blocks:        103.176.82.0/23 maxlen: 23
                          103.176.82.0/24 maxlen: 24
                          103.176.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl
                          rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173 (0x495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2BD6, serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7
        Validity
            Not Before: Dec 17 00:19:55 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6941f72b-c1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:50:d4:1b:7b:c5:bc:1f:f1:37:00:7d:1e:
                    09:54:36:14:0b:dc:77:d7:2a:4c:2e:68:bf:8d:39:
                    40:91:30:58:29:48:13:7d:27:f1:86:f7:54:8f:de:
                    69:fa:a0:e4:41:ef:57:20:ce:c7:e5:0b:f0:97:c3:
                    13:8f:34:3d:07:cc:b2:97:43:72:27:cf:35:96:96:
                    22:34:fc:e6:52:d8:46:ae:65:49:f4:8b:4b:3e:84:
                    ab:69:8c:82:e9:4e:92:69:66:e2:3b:2f:70:c4:8b:
                    6b:fa:29:92:ed:49:67:03:9b:4a:ef:8d:d8:1c:24:
                    42:1c:64:5a:4f:17:1e:16:25:20:5e:77:35:cd:b4:
                    02:40:a9:96:a1:2c:1c:ad:ff:94:94:79:22:0b:be:
                    d9:c8:e1:68:38:4e:20:8c:21:33:f0:ff:54:68:8b:
                    55:9c:8f:5f:c4:cd:4d:66:59:57:45:d4:0d:5b:74:
                    d3:4b:5b:62:1d:af:b9:46:e4:25:f4:01:4e:1a:a0:
                    54:ff:76:29:03:f6:a2:22:f2:13:82:3c:5b:46:90:
                    24:60:bf:ed:ae:28:c8:94:51:8e:0b:42:c1:6e:aa:
                    2b:3d:f7:2b:0f:5b:e0:b5:a4:94:f3:67:25:b0:3f:
                    03:ae:f1:61:ac:36:38:83:37:a5:c5:e0:d5:67:cd:
                    6d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:79:56:E1:E4:6E:BB:DA:37:60:96:D7:B9:50:64:CE:D5:3D:D4:85
            X509v3 Authority Key Identifier:
                keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/61B3CBDC631911ECAE6AA33DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:10:36:2a:62:e7:ed:bc:d7:96:ba:2a:e0:0f:13:d6:f7:5c:
         ed:29:3b:c9:61:92:37:20:9a:e2:28:f3:b0:75:10:c1:ff:c7:
         c3:e2:49:0b:5f:91:24:77:47:87:b0:a6:c9:64:a3:43:88:e6:
         a7:66:a9:c6:8a:96:d0:e4:68:49:c5:81:b0:ff:6e:4f:6e:e1:
         cc:8b:f3:2d:8b:81:c6:18:09:90:09:a1:4a:ee:78:c4:47:72:
         0b:6c:95:64:ef:06:af:89:d4:6c:3d:fb:22:c3:d3:d6:f3:6e:
         29:6e:f4:13:13:69:0d:d1:e5:89:80:12:aa:09:af:bb:67:23:
         dd:93:85:22:90:76:eb:38:44:7a:35:94:fc:5f:48:e6:11:71:
         d9:24:56:23:a4:0e:b3:af:5f:87:cb:f9:4b:d1:67:4b:91:06:
         c3:37:b6:37:ec:18:e7:79:7b:58:c6:a4:09:5e:84:f5:91:f8:
         0a:40:e4:57:96:05:75:35:3a:e9:7e:a7:93:67:09:d8:7a:97:
         25:10:c1:48:4d:f7:71:59:21:6f:ca:92:6c:bd:7a:3b:23:51:
         e5:0a:2b:43:8e:97:03:e0:c1:20:52:66:11:6f:66:e0:64:03:
         c3:d2:6b:70:fb:2b:b2:80:be:a4:e3:f6:1c:6a:57:96:de:16:
         ff:49:fc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:03:20 2025 by rpki-client