This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/C9811862D9C311F09C41289D70D3641D.roa
File:                     C9811862D9C311F09C41289D70D3641D.roa (raw, json)
Hash identifier:          q3ur6vaj0QiCKwLl3DFzE1DC8goZKUMd7d4YfxBfcJI=
Subject key identifier:   F8:CF:B2:C2:33:29:AC:46:6E:F0:35:ED:C7:3F:AF:28:3D:A8:D1:E1
Certificate issuer:       /CN=A91A9E58/serialNumber=B30F9630254EA7E4291DF6FC64A6989818375FC2
Certificate serial:       0C
Authority key identifier: B3:0F:96:30:25:4E:A7:E4:29:1D:F6:FC:64:A6:98:98:18:37:5F:C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/C9811862D9C311F09C41289D70D3641D.roa
Signing time:             Mon 15 Dec 2025 14:38:57 +0000
ROA not before:           Mon 15 Dec 2025 14:38:57 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     153038
IP address blocks:        144.79.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E58, serialNumber=B30F9630254EA7E4291DF6FC64A6989818375FC2
        Validity
            Not Before: Dec 15 14:38:57 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69401d81-364d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:9d:07:02:70:c9:93:b2:48:ad:4c:d6:cc:
                    09:50:0b:f6:6e:8a:a9:3f:fe:f8:57:cd:aa:60:bb:
                    f9:a7:fd:36:54:a8:a3:c5:2a:5f:c0:19:e5:17:e2:
                    80:98:bd:52:cd:07:e5:7a:7c:49:49:a9:ab:c8:0c:
                    42:b5:29:81:11:9d:33:b4:65:37:ef:cf:39:1e:09:
                    52:4f:7e:c2:5b:b8:40:62:cb:57:b2:0f:0b:bd:4c:
                    77:a4:5e:01:c6:cb:50:9d:9d:de:e8:03:8b:1c:9f:
                    16:10:68:b1:38:b3:98:d4:4d:35:fd:61:9a:96:b4:
                    48:b4:a0:11:7a:34:58:8b:95:f8:ed:78:f1:25:0a:
                    ac:7a:13:eb:c7:14:84:13:cc:b5:fc:df:ac:ef:42:
                    ec:da:f9:de:be:97:c8:4d:d0:a6:89:5f:96:43:2f:
                    68:95:e4:76:4c:b3:4b:bd:21:99:39:00:2c:04:80:
                    e5:2e:6e:ea:26:e8:fd:d8:7e:93:f5:06:af:1f:63:
                    e8:9a:b8:34:80:23:1a:5d:95:7c:6b:a2:dc:b6:8c:
                    e4:68:24:85:32:ab:31:fb:33:bb:1e:3d:43:2f:1c:
                    c8:d8:ad:27:e1:4b:ed:9c:15:64:2c:5d:20:e1:d0:
                    9c:36:d6:0a:ae:74:bf:3d:18:53:a1:00:2a:2f:6f:
                    00:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CF:B2:C2:33:29:AC:46:6E:F0:35:ED:C7:3F:AF:28:3D:A8:D1:E1
            X509v3 Authority Key Identifier:
                keyid:B3:0F:96:30:25:4E:A7:E4:29:1D:F6:FC:64:A6:98:98:18:37:5F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/C9811862D9C311F09C41289D70D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:e3:19:58:27:51:c1:ef:08:fe:a8:45:7b:71:f4:bf:85:78:
         4e:43:07:d4:0f:7d:9f:d2:78:1a:fc:e3:a0:cb:0d:85:17:b1:
         e7:96:25:e1:62:b6:04:dc:25:f5:7b:e0:7d:82:4c:ca:eb:16:
         28:b3:ee:f4:e2:ca:19:fa:05:94:d9:ed:2a:62:a5:ce:a6:26:
         5b:64:7c:5c:16:15:02:3c:76:7e:8f:18:37:a6:9e:d3:33:ed:
         39:9a:e9:7c:b0:ec:d4:56:b9:69:a9:8f:7d:a1:51:f3:83:e3:
         36:14:b0:79:20:ef:06:81:f5:22:04:0c:01:36:9c:5b:61:b1:
         00:8b:d3:5f:a8:49:7b:57:4e:65:98:ae:f4:8e:a0:cd:49:32:
         f9:f4:ed:ba:5d:6b:06:06:5a:2f:88:88:84:62:62:ea:ca:b2:
         bf:2c:42:79:1a:55:84:0f:47:a7:0d:47:10:df:d6:12:be:1d:
         0a:a8:80:ef:5e:45:47:19:91:03:29:b0:16:3a:2b:0a:55:9b:
         b7:c1:eb:00:8d:15:d3:21:12:a4:47:97:10:df:09:48:a2:c7:
         43:60:f5:03:43:83:1a:a7:8f:12:a0:8a:b1:51:e8:96:55:bf:
         d6:50:f8:88:bc:a3:d6:32:90:b3:d2:b3:bf:57:58:35:dd:2b:
         ee:25:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:00:12 2025 by rpki-client