This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/4C70AC90D64711F0B16EA59AA7248E41.roa
File:                     4C70AC90D64711F0B16EA59AA7248E41.roa (raw, json)
Hash identifier:          KL5PVxZyjV7/K0xyAF5RdqKzKy+8KdbI7YKAMfZ3khc=
Subject key identifier:   DC:5E:61:85:F3:72:65:97:E6:88:5D:CB:2B:6F:F6:A4:0F:E8:DC:0D
Certificate issuer:       /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Certificate serial:       0159
Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/4C70AC90D64711F0B16EA59AA7248E41.roa
Signing time:             Thu 11 Dec 2025 04:10:16 +0000
ROA not before:           Thu 11 Dec 2025 04:10:16 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     13335
IP address blocks:        203.3.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
                          rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
        Validity
            Not Before: Dec 11 04:10:16 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=693a4428-1c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c3:0d:2d:85:00:a9:55:9b:28:ea:39:26:e7:
                    e5:80:3c:bc:66:a9:d7:4f:d6:62:87:b1:cf:09:9d:
                    97:33:0f:5d:21:fc:cf:83:b6:68:5d:e7:9a:a0:ff:
                    a1:f0:3e:70:a1:68:0b:50:26:99:dd:2e:11:47:3c:
                    5c:d4:f3:17:3c:e3:17:80:fe:94:15:7b:0f:79:0c:
                    cd:d3:8c:b4:84:73:a8:3c:4c:e4:ae:0d:40:8d:1b:
                    67:3e:1f:ce:32:5b:ac:a0:e1:f6:15:8a:60:c2:88:
                    a4:86:8f:50:28:0d:47:76:7f:29:87:0c:8c:ed:77:
                    62:1a:a0:b4:96:0d:e2:f2:56:4a:37:6b:04:44:38:
                    a4:91:af:ca:35:38:12:f9:ed:8d:da:59:a7:96:36:
                    15:98:3c:c8:c3:7a:83:1d:31:9d:06:21:49:92:e6:
                    52:f9:81:47:37:ad:11:2e:67:25:5b:b1:86:59:44:
                    dc:f9:a5:10:32:45:54:f2:5c:56:66:e8:73:7f:8d:
                    eb:27:bc:06:d1:27:c4:51:93:cd:db:1b:92:88:7c:
                    7e:24:92:02:02:fb:48:9e:1d:a3:ab:3a:01:af:09:
                    4c:1d:59:9f:01:f6:01:42:46:7e:d0:8e:23:13:6e:
                    e3:e4:2a:8a:0a:58:ee:f1:c6:b8:b5:d8:3b:32:92:
                    db:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5E:61:85:F3:72:65:97:E6:88:5D:CB:2B:6F:F6:A4:0F:E8:DC:0D
            X509v3 Authority Key Identifier:
                keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/4C70AC90D64711F0B16EA59AA7248E41.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.3.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:d2:9a:a1:d2:41:6e:e4:c7:8e:95:12:44:d3:7b:8d:f0:cd:
         2a:78:56:c3:d2:5f:d9:f9:af:84:64:30:c9:a5:3e:da:eb:d2:
         b5:be:66:dd:86:48:78:ff:f2:48:8e:3d:6d:a6:0c:1f:3d:54:
         3d:f4:a7:b8:02:ff:66:41:6b:09:91:b0:02:43:b6:b6:9e:66:
         0a:50:d2:2f:75:01:d6:05:3f:7c:23:b7:df:46:86:cc:cd:c7:
         15:68:c5:b5:91:d3:db:0e:5d:3f:6c:af:0f:21:a8:da:c1:48:
         bc:0d:69:13:d7:3b:2e:a4:18:53:f9:38:68:81:54:c9:89:37:
         f3:4e:c2:5d:5d:ed:1d:0a:64:4a:56:ad:dc:ce:f5:4d:e4:b3:
         f3:48:e9:95:d6:71:b3:95:42:82:f8:04:d3:5a:03:46:37:1a:
         a8:31:b5:a4:b8:c2:68:42:b7:d6:95:75:7f:ab:89:3d:c3:5d:
         af:7e:b1:e7:d1:e4:c8:1d:63:e6:79:a5:15:4a:93:95:c6:76:
         bd:62:39:c9:b3:df:d6:4a:80:38:e0:bd:91:ac:40:f3:b2:cb:
         6e:08:37:de:2d:e2:b2:a2:de:b3:d0:14:21:9c:81:70:23:06:
         c8:f5:77:7f:0b:c2:4c:70:b4:78:ce:ef:6c:0a:83:ee:e8:7b:
         4e:46:f9:6d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU1QzkxMTAvBgNVBAUTKDc4MzlBMUZDMDE3NDAyNEJDQkE4NEQwMTJEM0VDNENB
NDY3OUFDNzEwHhcNMjUxMjExMDQxMDE2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDDA02OTNhNDQyOC0xYzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnsMNLYUAqVWbKOo5JuflgDy8ZqnXT9Zih7HPCZ2XMw9dIfzPg7ZoXeeaoP+h
8D5woWgLUCaZ3S4RRzxc1PMXPOMXgP6UFXsPeQzN04y0hHOoPEzkrg1AjRtnPh/O
MlusoOH2FYpgwoikho9QKA1Hdn8phwyM7XdiGqC0lg3i8lZKN2sERDikka/KNTgS
+e2N2lmnljYVmDzIw3qDHTGdBiFJkuZS+YFHN60RLmclW7GGWUTc+aUQMkVU8lxW
Zuhzf43rJ7wG0SfEUZPN2xuSiHx+JJICAvtInh2jqzoBrwlMHVmfAfYBQkZ+0I4j
E27j5CqKClju8ca4tdg7MpLbowIDAQABo4IClTCCApEwHQYDVR0OBBYEFNxeYYXz
cmWX5ohdyytv9qQP6NwNMB8GA1UdIwQYMBaAFHg5ofwBdAJLy6hNAS0+xMpGeaxx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS84ODJGMjMyMEM5
RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFrdkxxRTBCTFQ3RXlrWjVy
SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VEbWhfQUYwQWt2THFFMEJMVDdFeWtaNXJIRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU1QzkvODgyRjIzMjBDOUVCMTFFRThCODU3QjBDQzRGOUFFMDIvNEM3MEFDOTBE
NjQ3MTFGMEIxNkVBNTlBQTcyNDhFNDEucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLA+0wDQYJKoZIhvcNAQELBQADggEBADfSmqHSQW7kx46V
EkTTe43wzSp4VsPSX9n5r4RkMMmlPtrr0rW+Zt2GSHj/8kiOPW2mDB89VD30p7gC
/2ZBawmRsAJDtraeZgpQ0i91AdYFP3wjt99GhszNxxVoxbWR09sOXT9srw8hqNrB
SLwNaRPXOy6kGFP5OGiBVMmJN/NOwl1d7R0KZEpWrdzO9U3ks/NI6ZXWcbOVQoL4
BNNaA0Y3GqgxtaS4wmhCt9aVdX+riT3DXa9+sefR5MgdY+Z5pRVKk5XGdr1iOcmz
39ZKgDjgvZGsQPOyy24IN94t4rKi3rPQFCGcgXAjBsj1d38LwkxwtHjO72wKg+7o
e05G+W0=
-----END CERTIFICATE-----
Generated at Sat Dec 20 04:44:33 2025 by rpki-client