This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/8CB86F5AC21A11EFAB75870CC4F9AE02.roa
File:                     8CB86F5AC21A11EFAB75870CC4F9AE02.roa (raw, json)
Hash identifier:          WQb8lcNBaBBkPoF6ncdjgRAg3hdCvuxgxSDRSWRx1cY=
Subject key identifier:   1E:36:D7:07:AC:2B:73:D7:E5:48:A4:11:76:98:16:C1:92:19:0D:4B
Certificate issuer:       /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial:       08C2
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/8CB86F5AC21A11EFAB75870CC4F9AE02.roa
Signing time:             Wed 16 Apr 2025 17:26:22 +0000
ROA not before:           Wed 16 Apr 2025 17:26:22 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     138619
IP address blocks:        103.134.200.0/24 maxlen: 24
                          2404:6ac0::/32 maxlen: 36
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242 (0x8c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
        Validity
            Not Before: Apr 16 17:26:22 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67ffe83d-0332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6f:42:73:d3:2f:27:c8:55:a7:d4:74:82:b3:
                    f4:83:9c:0e:c8:d6:ea:2a:38:23:a6:1a:a7:04:da:
                    3e:89:dd:9b:ad:8f:d7:95:aa:45:c5:d9:b7:58:62:
                    4a:e9:3c:ed:b3:12:f5:46:2f:dd:21:85:ae:c8:87:
                    90:ba:d3:7f:a2:c5:bd:9f:f2:a8:d5:75:25:84:46:
                    72:94:c9:25:a8:1a:0b:09:11:e0:d0:12:c4:2b:fd:
                    04:ba:8c:3a:4a:86:37:c2:0f:49:39:f6:ff:75:e5:
                    ba:98:be:d2:d5:5f:92:da:9e:32:4c:67:96:e8:81:
                    00:d9:ee:f3:89:48:7f:20:38:21:03:3c:1f:6b:93:
                    0a:d9:76:aa:8e:fd:c0:55:d9:33:70:a2:af:b4:a9:
                    00:80:dc:05:e1:35:4d:93:57:42:6f:19:11:de:35:
                    fe:34:08:f5:d7:7f:0f:5b:59:35:e4:6f:75:70:4b:
                    e1:ac:87:1d:86:89:a2:ec:b9:f7:7d:01:cd:aa:90:
                    7f:1e:d7:be:97:a7:c5:c9:97:02:8d:99:e1:b9:af:
                    c6:ac:e5:71:12:f5:2d:2d:c5:18:ef:39:a2:2e:d9:
                    ff:8b:ac:9f:33:de:33:93:c2:df:45:ad:9d:e8:33:
                    df:4b:d0:ba:36:c4:5c:b1:6c:12:ef:9a:64:fc:53:
                    36:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:36:D7:07:AC:2B:73:D7:E5:48:A4:11:76:98:16:C1:92:19:0D:4B
            X509v3 Authority Key Identifier:
                keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/8CB86F5AC21A11EFAB75870CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.200.0/24
                IPv6:
                  2404:6ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:08:f1:fa:d5:9d:1f:a0:3c:dc:10:f8:ea:bc:99:7f:7c:69:
         84:9c:d6:01:cb:f4:2c:ee:d1:8c:29:12:1e:c1:17:5b:bf:fc:
         8c:53:dc:0a:b4:6d:fb:59:a4:48:1e:68:1d:57:e0:3f:a3:93:
         19:f1:4e:61:99:e2:00:d1:6f:f8:e9:ef:08:e8:e6:4f:32:30:
         f2:a0:79:e4:57:92:a9:de:da:5c:4c:ac:18:91:3b:95:ab:8b:
         18:c4:cf:54:0c:89:14:e4:d2:38:02:8a:33:d9:03:a1:d4:f0:
         f3:eb:84:5f:8e:ef:eb:5f:0d:86:e3:fd:db:2d:8f:ae:2e:f0:
         f2:26:ea:e6:7f:36:9c:eb:22:93:21:8c:7b:17:fc:3f:e0:5a:
         ad:f7:24:b8:40:af:70:bf:99:02:96:5f:72:a8:73:07:1a:6c:
         c2:1a:e3:b1:af:70:35:31:ad:cc:19:21:b6:8c:30:57:c5:3c:
         74:7f:34:e4:71:a3:01:21:2b:fb:51:c4:2b:51:ab:9b:7a:22:
         0b:5a:e5:dc:e1:13:9c:3a:89:63:2c:0a:4c:87:11:ca:f6:9b:
         b1:fa:18:2f:bb:da:56:61:df:76:4e:fa:82:c6:51:97:96:c1:
         af:96:74:35:cb:23:28:01:bf:cb:f2:94:db:34:b8:63:52:85:
         36:4e:f0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----