This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/9F890910DA3C11F088DF33818DD3641D.roa
File:                     9F890910DA3C11F088DF33818DD3641D.roa (raw, json)
Hash identifier:          xzSi1UuzNWpD6HyPJQ8fyYnG2jejbsfTjsT5VO2sPn0=
Subject key identifier:   D4:16:4F:99:59:DE:CC:B2:A9:1C:85:16:A3:4B:BE:5E:12:B3:2F:2D
Certificate issuer:       /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Certificate serial:       0545
Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/9F890910DA3C11F088DF33818DD3641D.roa
Signing time:             Tue 16 Dec 2025 05:03:56 +0000
ROA not before:           Tue 16 Dec 2025 05:03:56 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138997
IP address blocks:        103.134.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
                          rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1349 (0x545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
        Validity
            Not Before: Dec 16 05:03:56 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6940e83c-291b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:1f:3e:9e:08:6b:dc:92:9f:2a:a6:62:92:
                    59:6e:f9:ff:74:12:db:de:cb:eb:bb:2d:20:5c:7f:
                    35:b6:8d:0c:75:e4:48:f4:a9:07:2a:f1:6d:7a:0e:
                    f4:85:e7:85:55:f2:4a:fd:44:e5:a2:53:34:7d:80:
                    f9:a4:04:db:dc:59:bf:c5:1a:8f:c4:36:a2:41:ef:
                    71:3f:b1:f6:eb:75:3d:18:cd:cb:29:e8:7d:4e:c8:
                    7f:f7:75:31:af:51:c9:2e:48:d2:c9:ed:b5:cd:af:
                    85:6e:18:05:44:2d:3b:c5:cc:0d:6b:bf:3e:7a:1d:
                    1e:d3:21:9f:a4:c6:c0:fa:ac:9b:c5:e5:a5:72:11:
                    1b:37:8e:df:08:ab:b8:83:53:fd:c8:5f:ad:df:f9:
                    6f:e6:64:ae:56:43:80:74:91:e5:ff:a7:84:23:db:
                    fc:b8:f8:e0:33:11:7a:5e:65:e6:18:52:88:9c:f1:
                    44:05:69:9b:db:4f:d1:83:a4:03:2f:8d:5f:a1:dc:
                    66:bd:0a:a3:45:3f:db:7c:12:6f:ec:6a:59:b0:aa:
                    b0:b6:6c:4d:79:0b:ab:43:89:6d:76:ca:7b:d9:91:
                    5c:23:dd:f1:60:72:c2:75:8c:84:80:f6:3e:89:39:
                    cf:66:0c:9f:d8:73:4b:cf:92:87:1f:c8:a9:cb:6c:
                    0a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:16:4F:99:59:DE:CC:B2:A9:1C:85:16:A3:4B:BE:5E:12:B3:2F:2D
            X509v3 Authority Key Identifier:
                keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/9F890910DA3C11F088DF33818DD3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:bb:e8:55:d0:db:38:e4:f6:f4:7c:ba:99:7b:3f:2d:97:0c:
         b3:aa:2e:f3:17:b4:32:ed:05:c3:bc:22:f3:0c:e0:c3:30:4d:
         6c:09:75:4b:b2:c6:cd:e6:83:b0:1b:73:ce:9e:20:03:9b:97:
         25:2c:c4:fb:17:92:1a:e0:3c:a0:ac:a1:95:22:11:dc:cb:74:
         ec:09:af:94:a6:f7:67:bd:f9:c9:5c:71:ba:32:d1:c7:10:f6:
         82:19:a2:84:1a:2c:43:4f:eb:a5:7b:44:e6:bc:09:36:6d:cd:
         eb:9b:e0:af:f5:3a:8a:88:66:e9:6b:52:d5:f8:5d:c9:ff:df:
         4b:ce:56:39:55:c5:db:1b:78:a6:4a:25:f6:89:14:75:23:48:
         e5:21:a2:07:b0:65:a1:bb:b5:4e:47:c7:a0:cc:53:81:ab:87:
         22:2f:21:16:b9:e3:c3:17:8a:65:b2:02:b3:43:dc:82:23:7a:
         f2:21:1d:d5:01:fb:ec:ca:6f:39:2f:10:d4:ee:cb:82:2c:3d:
         0b:f7:b9:87:44:ff:ca:d0:c3:1e:b3:14:3a:59:49:70:17:bd:
         99:2d:28:f1:48:d6:25:1d:60:2f:f8:5b:01:f7:a0:a6:65:6d:
         33:ee:44:80:10:10:16:5e:3a:33:5e:ff:60:9c:9f:8e:de:3b:
         4e:c3:86:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:50:08 2025 by rpki-client