This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/6B096E780B8511EA97C80D52C4F9AE02.roa
File:                     6B096E780B8511EA97C80D52C4F9AE02.roa (raw, json)
Hash identifier:          BkjDTlDXiLb184XcwheLXYHUcW7lSFDCL708YWhcDi4=
Subject key identifier:   1A:C8:EB:25:06:AC:E6:3D:C7:6F:3E:DC:D1:E8:69:C9:BA:A5:D4:0F
Certificate issuer:       /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
Certificate serial:       0CAA
Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/6B096E780B8511EA97C80D52C4F9AE02.roa
Signing time:             Fri 19 Dec 2025 07:33:16 +0000
ROA not before:           Fri 19 Dec 2025 07:33:16 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     138346
IP address blocks:        103.123.168.0/22 maxlen: 22
                          103.123.168.0/23 maxlen: 23
                          103.123.168.0/24 maxlen: 24
                          103.123.169.0/24 maxlen: 24
                          103.123.170.0/24 maxlen: 24
                          103.123.171.0/24 maxlen: 24
                          2403:a540::/32 maxlen: 32
                          2403:a540::/33 maxlen: 33
                          2403:a540::/34 maxlen: 34
                          2403:a540::/40 maxlen: 40
                          2403:a540::/48 maxlen: 48
                          2403:a540:2::/48 maxlen: 48
                          2403:a540:3::/48 maxlen: 48
                          2403:a540:4::/48 maxlen: 48
                          2403:a540:5::/48 maxlen: 48
                          2403:a540:6::/48 maxlen: 48
                          2403:a540:7::/48 maxlen: 48
                          2403:a540:8::/48 maxlen: 48
                          2403:a540:9::/48 maxlen: 48
                          2403:a540:a::/48 maxlen: 48
                          2403:a540:b::/48 maxlen: 48
                          2403:a540:204::/48 maxlen: 48
                          2403:a540:20f::/48 maxlen: 48
                          2403:a540:21f::/48 maxlen: 48
                          2403:a540:4000::/34 maxlen: 34
                          2403:a540:8000::/33 maxlen: 33
                          2403:a540:8000::/34 maxlen: 34
                          2403:a540:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl
                          rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 18:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3242 (0xcaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
        Validity
            Not Before: Dec 19 07:33:16 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6944ffbc-e4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:00:40:51:83:be:6e:16:bc:d5:09:1d:4c:
                    43:78:fa:b9:83:4e:82:15:f7:ba:09:92:ec:7a:52:
                    a8:a7:a7:9c:82:43:b4:3b:cb:43:03:51:78:eb:02:
                    84:3b:11:2b:d8:81:38:ed:f4:23:2e:b2:6d:81:28:
                    99:53:e9:fe:5f:a8:28:2e:aa:08:0c:99:4d:6e:1e:
                    50:bc:70:62:f3:48:af:46:89:11:e7:49:eb:08:fb:
                    34:55:5d:1e:7e:89:a5:6d:f0:55:5f:86:6f:6c:80:
                    1f:e4:35:fe:22:6f:0e:05:8b:57:c1:34:00:09:4e:
                    c4:17:b7:1f:d6:69:05:4d:fc:2d:09:96:f1:ed:59:
                    4b:1e:6d:d9:25:f1:d3:ed:29:53:6a:c8:24:f5:e7:
                    e2:ae:6a:6e:83:c5:01:0e:61:3a:77:96:b1:b9:62:
                    31:ad:6d:81:2e:6c:ef:e7:27:b8:f5:f7:af:22:f6:
                    ac:3c:4a:69:92:4b:fe:ad:53:70:4f:98:4e:74:ef:
                    a9:cd:03:3a:b7:f1:1e:67:c8:2c:bf:3b:e0:32:f5:
                    3d:45:c2:b0:fd:8d:95:49:25:fe:c9:ba:b5:86:6c:
                    12:f6:c8:06:d0:a2:95:28:c3:ef:51:62:16:0b:61:
                    4b:bb:60:0e:3a:15:3c:b0:0f:96:d6:b8:87:3b:d4:
                    b0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C8:EB:25:06:AC:E6:3D:C7:6F:3E:DC:D1:E8:69:C9:BA:A5:D4:0F
            X509v3 Authority Key Identifier:
                keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/6B096E780B8511EA97C80D52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.168.0/22
                IPv6:
                  2403:a540::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:63:10:5c:0b:65:f2:f1:e8:01:ca:8b:00:0a:de:fc:92:53:
         f4:ef:05:46:a3:b1:d5:99:f2:2a:e5:a9:d6:59:1f:6f:5a:0d:
         ae:ba:2b:ae:63:db:24:43:27:f8:24:b1:07:a5:cf:66:45:e7:
         d1:60:6d:85:77:17:69:8c:cc:da:a3:81:5b:62:db:88:cb:7a:
         89:5c:38:1d:7b:65:d4:e0:1a:f0:b2:93:98:7c:be:40:e2:ab:
         48:cf:0c:ef:9f:5c:40:d9:28:3c:a0:80:bb:c4:6a:3b:07:7c:
         66:cb:a7:4d:4e:86:4e:86:02:a2:95:02:9c:da:a9:41:d2:6f:
         02:67:2d:f8:47:7e:74:37:0c:9d:2e:f7:2b:84:5c:5f:49:10:
         49:b4:54:96:65:74:c6:07:16:ef:ee:1c:ec:93:fa:88:cb:e2:
         f5:5d:2c:ca:5b:64:6f:1c:52:83:f8:60:28:a5:1e:a8:a2:7c:
         04:69:46:32:2d:c2:63:82:8c:0e:53:6d:1d:04:04:1f:2b:e5:
         b3:af:d9:8a:dd:b4:ba:e6:c3:9d:61:43:8e:2a:3b:8b:0d:04:
         9d:10:41:39:c8:ba:7c:01:9c:21:18:63:a5:8d:e5:1f:ff:6d:
         6e:cb:30:57:38:0b:db:d2:82:f4:68:8d:d6:c5:ff:1b:ec:ba:
         93:5c:8b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:47:19 2025 by rpki-client