This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/BC56EB8EA21811ED94424B59C4F9AE02.roa
File:                     BC56EB8EA21811ED94424B59C4F9AE02.roa (raw, json)
Hash identifier:          pAV7viUmTMcSFkdd1syyomDPDhx4ELAs+EsIzTR52gE=
Subject key identifier:   D5:44:EE:49:BB:40:10:C6:4E:4F:79:1B:47:63:45:A8:D0:3A:AA:F2
Certificate issuer:       /CN=A91A5EF2/serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
Certificate serial:       06A8
Authority key identifier: 7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/BC56EB8EA21811ED94424B59C4F9AE02.roa
Signing time:             Fri 12 Dec 2025 13:43:02 +0000
ROA not before:           Fri 12 Dec 2025 13:43:02 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     150744
IP address blocks:        103.162.228.0/24 maxlen: 24
                          103.162.229.0/24 maxlen: 24
                          2001:df6:180:ca::/64 maxlen: 64
                          2001:df6:180:cb::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl
                          rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1704 (0x6a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5EF2, serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
        Validity
            Not Before: Dec 12 13:43:02 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=693c1be6-6d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:be:84:a8:40:d5:01:21:8b:56:65:a2:bf:
                    85:18:7f:36:8c:e4:a7:d7:7a:1d:9a:94:38:48:a3:
                    80:fb:44:ce:fe:f3:61:43:2a:d2:29:8c:0d:c7:27:
                    0c:c7:a9:48:d8:b3:df:55:de:ee:0b:f7:51:32:7c:
                    9e:14:47:09:2d:d9:28:d1:9a:33:2d:20:34:ba:a6:
                    09:59:2a:7a:16:79:9d:8c:41:9f:de:da:1c:07:d4:
                    d7:94:d1:9e:85:4c:ca:f4:1c:dd:a4:10:1d:7c:eb:
                    20:c7:b1:24:5e:b8:bd:80:5a:ef:c4:e3:0f:df:3b:
                    82:53:c9:a2:09:9f:dc:5e:0e:b5:26:6e:8d:85:b8:
                    9b:b8:06:e0:e6:99:84:b6:f9:f7:62:d8:22:2e:1b:
                    aa:86:84:1f:5a:a0:f9:d4:49:ee:c0:de:cc:4d:e3:
                    38:55:11:40:2d:39:cb:15:bb:67:29:c7:8e:a8:bf:
                    1a:17:1d:3f:f3:54:10:e8:f7:ce:b6:4c:c6:60:6b:
                    03:e7:b6:7d:3c:aa:f7:e3:c2:05:a6:08:56:09:fc:
                    c1:8b:71:3e:f7:55:ae:dc:43:f9:12:bf:e4:a0:f5:
                    e6:d2:82:1c:ed:2a:34:92:94:ad:f1:0a:ac:69:3f:
                    84:8f:2f:7d:c0:af:b3:54:ce:65:f2:17:7a:fe:d9:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:44:EE:49:BB:40:10:C6:4E:4F:79:1B:47:63:45:A8:D0:3A:AA:F2
            X509v3 Authority Key Identifier:
                keyid:7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/BC56EB8EA21811ED94424B59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.228.0/23
                IPv6:
                  2001:df6:180:ca::/63

    Signature Algorithm: sha256WithRSAEncryption
         12:9e:55:0b:8e:61:fc:b8:4f:8f:bd:21:aa:19:2b:10:51:56:
         ed:b7:9a:50:51:20:61:cc:63:45:9f:97:d3:6f:4e:d5:ed:05:
         82:e8:ae:1a:d7:24:c4:98:ca:39:96:96:e3:0d:ae:db:df:e2:
         6e:c9:86:28:82:fa:4b:28:76:23:5e:36:e1:1c:07:36:6e:56:
         79:a8:02:d1:3b:bd:ad:1d:3f:48:5b:05:e1:8f:cc:91:db:2d:
         a8:1a:39:0d:cf:9b:f1:10:78:2c:b2:b6:5c:50:a5:1d:5d:e8:
         f8:c1:33:f0:7a:26:94:46:40:02:5d:55:fb:3b:fd:f5:fe:1c:
         74:ac:6d:6d:ce:c5:35:3b:86:d5:5d:f0:ee:c3:df:5e:83:ef:
         d5:3b:b0:b7:ec:b6:ea:7c:41:25:0f:aa:20:f3:fd:f1:f5:41:
         ab:85:56:77:4c:d8:9d:4b:ae:be:c1:a1:3b:b8:96:ba:e0:8e:
         fe:19:7b:5c:36:43:1d:24:62:6d:d0:6d:0f:84:3b:10:a7:00:
         c4:83:06:8e:f5:e9:ba:6e:34:81:08:a7:38:91:85:8a:8d:b7:
         21:b1:d5:ed:ee:2c:fc:54:96:21:2c:eb:81:81:7a:35:39:56:
         1e:82:ff:d2:ee:31:b2:18:a3:7b:17:9e:aa:a3:25:63:bc:51:
         fe:f1:b8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:51:08 2025 by rpki-client