This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/E2256F74D97011F0A26925FA9AD3641D.roa
File:                     E2256F74D97011F0A26925FA9AD3641D.roa (raw, json)
Hash identifier:          TI44+NsGD7V8BTrwcUhxiq64WHAzH6NcxXdWKxOfCZU=
Subject key identifier:   33:6C:7C:2E:BC:99:18:24:0F:0D:66:0C:2C:21:F0:54:2D:66:69:A2
Certificate issuer:       /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial:       0591
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/E2256F74D97011F0A26925FA9AD3641D.roa
Signing time:             Mon 15 Dec 2025 04:45:30 +0000
ROA not before:           Mon 15 Dec 2025 04:45:30 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     31715
IP address blocks:        103.204.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1425 (0x591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
        Validity
            Not Before: Dec 15 04:45:30 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=693f926a-f084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:f5:d7:19:89:7d:f4:f5:c7:ff:46:55:1b:
                    c7:91:56:be:b8:c8:b3:31:39:d5:84:98:8d:19:ac:
                    67:13:93:cd:60:4a:8c:fc:73:3b:a2:b2:b0:98:76:
                    d7:ca:7b:13:ce:a7:93:46:83:33:ac:9b:67:2e:6e:
                    74:0c:bd:b6:7d:08:14:5f:38:86:c0:56:18:f9:72:
                    d2:aa:75:9f:7e:3e:3d:29:5c:d2:06:a4:56:98:d9:
                    4a:18:a9:5a:11:eb:98:70:0a:61:e9:70:be:b5:b8:
                    45:7b:89:fe:e7:32:d8:42:21:f4:50:8c:10:1d:b1:
                    45:f4:f3:dc:60:d4:46:1e:9d:ca:ae:8f:ec:7b:95:
                    97:61:70:74:56:37:49:01:c0:07:b6:70:b1:07:38:
                    b1:71:6d:55:29:b4:7e:86:45:8c:98:b1:70:0e:fc:
                    b5:da:c8:df:d0:1d:ff:c5:31:60:d5:b3:d7:ab:d1:
                    a6:22:74:65:cd:ff:1d:08:e2:f9:79:85:0e:19:98:
                    cb:3f:76:ca:a0:ab:64:b3:03:98:12:ad:d8:d9:9f:
                    28:ce:79:c5:40:0d:db:a5:00:1a:9d:d4:89:3b:8f:
                    97:77:21:b5:ec:41:08:f5:78:74:a2:f1:48:13:7d:
                    5c:1e:8f:3f:4a:2d:d5:05:82:c1:68:ae:37:2d:79:
                    60:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6C:7C:2E:BC:99:18:24:0F:0D:66:0C:2C:21:F0:54:2D:66:69:A2
            X509v3 Authority Key Identifier:
                keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/E2256F74D97011F0A26925FA9AD3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:15:e4:96:fd:42:51:75:1e:65:79:3d:de:00:95:02:c3:4b:
         e0:a0:7e:6d:1a:29:e4:22:95:39:37:80:28:ed:80:a0:b7:d2:
         bf:a5:84:f2:1c:3b:03:b9:02:5c:60:9e:51:96:95:86:63:56:
         c8:75:74:2c:f3:75:31:8e:18:ba:dd:41:de:6d:ce:44:61:d6:
         37:91:df:03:30:b4:55:ae:28:ff:9b:a7:07:46:3a:37:c6:38:
         76:2a:49:dd:5a:cb:53:01:30:54:0e:54:78:2f:bb:ed:7f:b7:
         92:cd:46:40:68:06:25:5d:0d:4f:4c:c8:f0:77:22:eb:b2:24:
         94:23:b0:01:99:1b:e5:c3:c4:a9:9a:6a:a8:49:2c:b3:4a:19:
         e2:84:88:cb:a5:53:fe:e8:28:a6:8b:57:9f:90:c8:57:62:b2:
         6e:bc:60:e2:53:d0:c0:f5:62:37:f1:9e:fe:62:06:19:fc:f8:
         8f:63:a0:a1:8a:86:39:3d:0e:a0:d7:65:15:26:00:df:43:b2:
         ae:6f:76:b5:24:f5:c4:17:b3:e6:4b:0a:3c:80:76:d4:83:54:
         7f:cd:57:db:0c:b9:48:e6:8b:1b:e8:02:7c:6a:dd:59:e2:f8:
         1f:7c:66:df:c3:d0:d0:fd:db:70:46:94:ca:7f:e8:7c:0d:28:
         a2:ba:f5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:48:01 2025 by rpki-client