This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/146F4288C8E711F0A7C33B4CC4F9AE02.roa
File:                     146F4288C8E711F0A7C33B4CC4F9AE02.roa (raw, json)
Hash identifier:          xY4rHh4Ml46b2MxKK+6/FOJjmg0oXpkZR7eYA4dh1tk=
Subject key identifier:   B4:41:F5:74:59:F1:EC:7E:E7:3E:35:72:F5:DA:7B:95:1E:9F:31:F4
Certificate issuer:       /CN=A91B62E1/serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B
Certificate serial:       02
Authority key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/146F4288C8E711F0A7C33B4CC4F9AE02.roa
Signing time:             Mon 24 Nov 2025 03:38:46 +0000
ROA not before:           Mon 24 Nov 2025 03:38:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     135647
IP address blocks:        103.77.225.0/24 maxlen: 24
                          103.137.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl
                          rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B
        Validity
            Not Before: Nov 24 03:38:46 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6923d345-4233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3d:92:79:52:31:4d:04:9b:54:d7:06:db:b4:
                    ef:60:97:f8:f8:e0:95:a2:b0:06:1e:6b:ef:91:6b:
                    59:aa:e5:c9:2e:21:83:ba:2e:40:f2:38:b4:3f:e1:
                    05:54:69:7a:75:fb:d7:52:36:7b:ba:1e:57:b1:38:
                    44:d0:ae:f7:97:ec:98:43:d5:80:16:f7:5b:65:77:
                    49:e4:b3:d4:e0:d4:b5:22:8a:cf:73:70:e2:8b:9a:
                    b6:65:d7:ae:7c:e4:32:21:47:4c:1e:ca:f7:4e:66:
                    f7:45:eb:f8:a8:cd:48:f8:aa:38:ea:16:92:0a:60:
                    0d:1d:98:83:9d:ce:83:57:52:64:16:d1:e2:42:d5:
                    e8:85:65:2b:3e:06:cd:1a:12:1a:ee:c6:3a:61:7b:
                    3b:3e:88:f6:ca:49:d5:0e:34:43:06:81:6a:9c:28:
                    ac:ba:bb:e7:59:06:24:71:5d:5a:79:82:0b:05:73:
                    2c:57:b1:09:ad:a2:39:91:a0:f6:c8:58:ee:a6:d2:
                    91:1a:2a:0d:c8:0b:8a:6e:5a:90:1d:27:ed:4f:05:
                    62:b8:a5:62:0f:0c:18:6d:f0:28:9d:88:ba:bb:a9:
                    98:b1:9c:7e:c9:29:40:04:8f:1c:7e:75:ba:1d:6b:
                    dd:da:df:b8:89:d3:4d:d1:21:cc:17:11:ae:16:d4:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:41:F5:74:59:F1:EC:7E:E7:3E:35:72:F5:DA:7B:95:1E:9F:31:F4
            X509v3 Authority Key Identifier:
                keyid:85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/146F4288C8E711F0A7C33B4CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.225.0/24
                  103.137.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:1a:87:26:f4:98:02:24:be:9b:f4:cc:da:76:aa:b9:60:c7:
         a4:1a:47:3b:d1:66:b4:90:d7:09:bb:b2:30:d1:ba:1e:42:e2:
         07:20:b6:95:cd:79:2c:64:17:a9:63:3c:66:11:b1:18:6d:76:
         78:be:87:44:54:b6:ac:62:20:e6:27:30:b7:6b:e9:9c:5e:0a:
         dc:32:2b:ab:ff:cf:d3:7a:42:d8:12:90:03:53:5f:70:5e:c7:
         a3:1b:9d:d2:fb:d1:6e:dc:93:2d:1a:95:4b:8c:0f:2b:9d:a2:
         82:cd:4c:d5:e8:a2:4d:cb:8f:13:3f:68:c2:2f:77:c5:3d:5b:
         49:75:5a:dd:8b:bd:a0:6c:1a:a8:f4:e7:18:b0:4a:86:0f:63:
         f3:97:89:b5:9d:a8:81:a1:74:54:47:af:c2:8d:95:3b:07:f2:
         d1:3a:35:c5:74:7e:81:c5:cc:ef:7f:a6:31:c9:a1:01:e9:5a:
         ef:6a:bb:de:59:0f:3b:2f:bd:4d:57:45:a2:81:e1:18:d8:d0:
         52:5e:28:d7:f0:cc:d5:85:c4:cd:4a:0f:7e:06:25:95:60:d6:
         42:33:4e:91:87:8c:b7:ce:0e:9a:f7:7d:cc:50:f4:8b:95:c9:
         3b:64:a0:f9:e6:48:63:e6:cc:b4:a3:d4:6c:ad:2e:46:86:41:
         f9:0d:b8:25
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NjJFMTExMC8GA1UEBRMoODVCN0VEQjVBNjg0QkUzRDlBNjI5NzU5OTBBNzFEOTk4
REVGNTE4QjAeFw0yNTExMjQwMzM4NDZaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MjNkMzQ1LTQyMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5PZJ5UjFNBJtU1wbbtO9gl/j44JWisAYea++Ra1mq5ckuIYO6LkDyOLQ/4QVU
aXp1+9dSNnu6HlexOETQrveX7JhD1YAW91tld0nks9Tg1LUiis9zcOKLmrZl1658
5DIhR0weyvdOZvdF6/iozUj4qjjqFpIKYA0dmIOdzoNXUmQW0eJC1eiFZSs+Bs0a
Ehruxjphezs+iPbKSdUONEMGgWqcKKy6u+dZBiRxXVp5ggsFcyxXsQmtojmRoPbI
WO6m0pEaKg3IC4puWpAdJ+1PBWK4pWIPDBht8CidiLq7qZixnH7JKUAEjxx+dbod
a93a37iJ003RIcwXEa4W1GYnAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUtEH1dFnx
7H7nPjVy9dp7lR6fMfQwHwYDVR0jBBgwFoAUhbfttaaEvj2aYpdZkKcdmY3vUYsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MkUxLzBBQkIzNTY4QzhF
NjExRjBBQTBDNUI0N0M0RjlBRTAyL2hiZnR0YWFFdmoyYVlwZFprS2NkbVkzdlVZ
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaGJmdHRhYUV2ajJhWXBkWmtLY2RtWTN2VVlzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjJFMS8wQUJCMzU2OEM4RTYxMUYwQUEwQzVCNDdDNEY5QUUwMi8xNDZGNDI4OEM4
RTcxMUYwQTdDMzNCNENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAGdN4QMEAGeJgTANBgkqhkiG9w0BAQsFAAOCAQEAcBqHJvSY
AiS+m/TM2naquWDHpBpHO9FmtJDXCbuyMNG6HkLiByC2lc15LGQXqWM8ZhGxGG12
eL6HRFS2rGIg5icwt2vpnF4K3DIrq//P03pC2BKQA1NfcF7Hoxud0vvRbtyTLRqV
S4wPK52igs1M1eiiTcuPEz9owi93xT1bSXVa3Yu9oGwaqPTnGLBKhg9j85eJtZ2o
gaF0VEevwo2VOwfy0To1xXR+gcXM73+mMcmhAela72q73lkPOy+9TVdFooHhGNjQ
Ul4o1/DM1YXEzUoPfgYllWDWQjNOkYeMt84Omvd9zFD0i5XJO2Sg+eZIY+bMtKPU
bK0uRoZB+Q24JQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 22:05:30 2025 by rpki-client