This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/48B639C8B85E11F0B0F0B01CC4F9AE02.roa
File:                     48B639C8B85E11F0B0F0B01CC4F9AE02.roa (raw, json)
Hash identifier:          38dtcu5XNmHe596DDUxh/YiXpcTFN/ujsTf1rBJPJf4=
Subject key identifier:   22:C1:F1:17:C6:20:E6:F4:65:95:9D:BB:76:95:D8:8C:36:F1:31:E3
Certificate issuer:       /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
Certificate serial:       02A3
Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/48B639C8B85E11F0B0F0B01CC4F9AE02.roa
Signing time:             Tue 09 Dec 2025 00:08:03 +0000
ROA not before:           Tue 09 Dec 2025 00:08:03 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     4764
IP address blocks:        103.242.32.0/22 maxlen: 22
                          113.52.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl
                          rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
        Validity
            Not Before: Dec  9 00:08:03 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69376863-bb1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:78:68:7e:1f:98:41:de:bb:d3:39:e7:aa:
                    4d:7d:3f:90:8b:bd:1f:22:8e:cf:87:e6:7f:f4:b0:
                    9c:b8:6f:29:f6:76:d9:73:d8:a4:06:be:68:02:cb:
                    10:15:b0:0a:0b:a3:c7:68:ea:4c:98:57:ea:5c:16:
                    45:38:88:88:be:22:f0:bb:92:24:dc:0f:51:34:31:
                    48:5a:bb:78:5d:96:58:e0:6f:a0:09:b2:c1:c5:3e:
                    f4:9e:29:ca:49:6a:87:14:4f:ab:59:8f:fb:04:e6:
                    16:4b:4b:5b:f6:23:70:0d:98:01:90:b6:b5:0f:a6:
                    6a:44:2f:fb:fc:b6:fd:1a:04:7a:a6:42:e7:29:f3:
                    c5:47:a7:f5:90:5d:cb:8e:3f:6a:97:5c:5d:d1:77:
                    eb:c2:b3:01:a1:84:ed:97:aa:4a:fe:fb:8f:42:06:
                    64:8d:56:36:62:94:f3:68:8f:6e:ab:15:93:fe:29:
                    55:63:c6:97:89:40:39:f8:15:87:b8:6b:81:af:37:
                    2f:68:e1:00:cf:10:e4:a7:d0:cb:94:0e:95:27:66:
                    b7:1c:0a:c6:8c:15:56:4e:69:b3:c2:77:95:56:80:
                    06:18:6f:2f:a6:2c:0c:2e:ef:da:18:c0:7d:e9:28:
                    19:0b:e8:ce:25:44:16:c2:8a:5f:a9:ba:bb:a7:e0:
                    3a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C1:F1:17:C6:20:E6:F4:65:95:9D:BB:76:95:D8:8C:36:F1:31:E3
            X509v3 Authority Key Identifier:
                keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/48B639C8B85E11F0B0F0B01CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.32.0/22
                  113.52.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:72:1e:c3:f3:89:5c:29:b5:c6:b4:03:7a:a0:d7:15:e9:91:
         91:3f:51:57:2d:ff:0a:b9:da:6c:24:c1:30:e1:62:1b:94:f4:
         6e:ee:eb:96:74:4b:ba:2f:e8:b9:85:06:cb:09:a0:60:27:d2:
         c5:95:5d:a5:8f:18:00:c6:b3:0e:53:64:96:05:55:56:b9:c1:
         96:6c:6b:73:23:d6:f8:3f:f8:4e:fc:90:85:73:85:53:a7:1e:
         d6:cd:89:c6:6e:62:5d:a4:26:3e:f1:67:9d:89:0b:5e:b5:eb:
         47:7f:2c:bd:12:ce:5e:26:fe:80:59:fe:30:aa:d0:0b:64:ef:
         32:de:88:46:81:a3:70:39:c4:d8:cb:90:a8:b9:d8:17:29:87:
         12:1c:34:f0:b2:de:7d:15:0d:87:d5:7b:b2:4a:66:4f:ca:b5:
         6f:78:46:cb:95:7f:0b:b6:1e:68:5c:1a:22:f0:da:6d:ae:cc:
         fe:0e:29:82:7f:1d:8b:5c:13:b8:85:45:23:08:a8:7f:22:a0:
         91:c7:1b:e2:5a:31:15:b9:3d:cd:8f:f1:51:74:81:bd:2d:ff:
         84:27:96:d8:d1:3a:4d:6f:0d:3a:21:f6:af:c9:25:0a:06:f9:
         85:7c:ec:39:c0:af:3d:61:9b:53:30:02:aa:ff:49:2b:99:36:
         7b:94:6d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:35:59 2025 by rpki-client