This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/8FD552C071F111F0AE49323FC4F9AE02.roa
File:                     8FD552C071F111F0AE49323FC4F9AE02.roa (raw, json)
Hash identifier:          GFZWZ3rY5zt4p9q/6cuuzyfCvGg513UOOMNp5vgzTLM=
Subject key identifier:   D2:FC:E9:DD:A9:54:7A:48:11:EF:20:8B:5B:4F:00:A6:6A:46:79:96
Certificate issuer:       /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial:       3692
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/8FD552C071F111F0AE49323FC4F9AE02.roa
Signing time:             Fri 12 Dec 2025 14:30:35 +0000
ROA not before:           Fri 12 Dec 2025 14:30:35 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     134489
IP address blocks:        116.90.100.0/24 maxlen: 24
                          116.90.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13970 (0x3692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
        Validity
            Not Before: Dec 12 14:30:35 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=693c270b-f8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:50:9a:2d:b4:f7:c2:f6:be:2e:0c:8f:fe:23:
                    b7:f4:51:0a:e1:a3:60:bd:6c:ab:e5:23:14:ce:a1:
                    b1:a9:46:52:2f:4c:28:6b:40:09:79:52:5d:b7:08:
                    f7:3c:07:e5:90:45:27:ca:fd:89:3b:6f:ae:be:da:
                    f2:28:50:8d:f5:2d:66:c4:d0:38:97:56:ab:ac:4e:
                    68:75:ab:8a:02:14:5b:36:76:94:cc:1c:7f:de:20:
                    4e:47:9b:28:bb:e1:0f:a0:14:fb:90:1b:ed:30:ae:
                    4c:37:05:82:b2:e4:75:92:26:48:d6:b9:90:f7:df:
                    24:e2:6b:dc:d4:76:5a:af:ae:e4:e4:44:93:99:21:
                    0f:5e:46:98:97:04:a7:7f:d1:8d:7a:19:f0:78:c6:
                    ba:71:7b:96:df:aa:ca:1e:5d:63:a6:aa:2b:a9:81:
                    e3:39:d6:66:46:cb:13:7b:00:c0:21:0d:72:5a:97:
                    47:08:23:d0:a9:04:e2:a0:8b:e4:03:14:c8:62:bf:
                    e1:c7:bc:a2:34:57:92:85:0f:74:2b:fc:59:58:3c:
                    bf:c6:d7:45:dd:84:1d:32:13:81:5c:97:1e:8a:3d:
                    7b:12:6b:7d:dd:ee:37:4b:47:70:62:a0:03:55:14:
                    f7:46:5e:35:53:56:e3:53:3d:f6:a0:c8:eb:02:48:
                    e5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FC:E9:DD:A9:54:7A:48:11:EF:20:8B:5B:4F:00:A6:6A:46:79:96
            X509v3 Authority Key Identifier:
                keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/8FD552C071F111F0AE49323FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.100.0/24
                  116.90.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:69:e9:a4:7e:44:6e:b5:4a:8c:ed:43:0a:b8:e4:1a:80:22:
         cb:a5:66:c5:cf:e9:03:25:56:be:6e:a1:b0:61:d0:39:85:0e:
         89:76:7c:46:9f:10:85:cc:f7:0f:45:68:de:3f:60:a7:b8:ea:
         bf:47:10:75:61:21:d5:be:f0:a4:8b:bc:19:a1:5c:9a:37:64:
         ef:8f:a8:92:93:4c:b8:37:cf:67:74:88:1b:df:37:85:1b:2a:
         d2:91:01:7e:33:d9:b6:34:0f:ca:c4:bc:0e:e1:b3:a4:ab:d1:
         51:07:35:7a:42:b0:db:2e:52:2e:5e:80:50:ea:d6:7f:5e:67:
         c7:6a:0e:65:61:42:16:97:bf:42:95:f8:f4:2f:2d:4e:bd:2a:
         f5:e6:79:73:96:4a:38:b3:c1:1a:dc:a2:6c:39:15:d5:04:d8:
         98:b8:44:78:c3:35:24:f0:3a:43:1e:7d:84:a9:7a:bc:4f:c3:
         df:5c:45:40:c8:a7:52:50:54:04:3a:0a:a7:47:1a:4c:88:77:
         d1:b2:ca:99:d5:05:a7:bc:65:fe:27:84:c1:1c:d1:83:12:0a:
         81:5f:36:fe:ef:74:f6:7d:27:26:f1:74:7b:8c:75:96:6d:4e:
         aa:81:f0:ba:16:8d:48:0c:a2:99:b0:73:41:1d:8c:46:fe:d5:
         2a:ac:ad:c6
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICNpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx
NkQxNTdCMzQwHhcNMjUxMjEyMTQzMDM1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTNjMjcwYi1mOGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApFCaLbT3wva+LgyP/iO39FEK4aNgvWyr5SMUzqGxqUZSL0woa0AJeVJdtwj3
PAflkEUnyv2JO2+uvtryKFCN9S1mxNA4l1arrE5odauKAhRbNnaUzBx/3iBOR5so
u+EPoBT7kBvtMK5MNwWCsuR1kiZI1rmQ998k4mvc1HZar67k5ESTmSEPXkaYlwSn
f9GNehnweMa6cXuW36rKHl1jpqorqYHjOdZmRssTewDAIQ1yWpdHCCPQqQTioIvk
AxTIYr/hx7yiNFeShQ90K/xZWDy/xtdF3YQdMhOBXJceij17Emt93e43S0dwYqAD
VRT3Rl41U1bjUz32oMjrAkjl0wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNL86d2p
VHpIEe8gi1tPAKZqRnmWMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE
ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvOEZENTUyQzA3
MUYxMTFGMEFFNDkzMjNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAB0WmQDBAB0WmkwDQYJKoZIhvcNAQELBQADggEBAFJp6aR+
RG61SoztQwq45BqAIsulZsXP6QMlVr5uobBh0DmFDol2fEafEIXM9w9FaN4/YKe4
6r9HEHVhIdW+8KSLvBmhXJo3ZO+PqJKTTLg3z2d0iBvfN4UbKtKRAX4z2bY0D8rE
vA7hs6Sr0VEHNXpCsNsuUi5egFDq1n9eZ8dqDmVhQhaXv0KV+PQvLU69KvXmeXOW
SjizwRrcomw5FdUE2Ji4RHjDNSTwOkMefYSperxPw99cRUDIp1JQVAQ6CqdHGkyI
d9GyypnVBae8Zf4nhMEc0YMSCoFfNv7vdPZ9JybxdHuMdZZtTqqB8LoWjUgMopmw
c0EdjEb+1SqsrcY=
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:18:12 2025 by rpki-client