This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/B3C29AE8D3C711F09E46353CC4F9AE02.roa
File:                     B3C29AE8D3C711F09E46353CC4F9AE02.roa (raw, json)
Hash identifier:          Jb/Harc2a3koeaaZ6I7bDftucuee7kjp7yofjbYSiJQ=
Subject key identifier:   70:99:4B:F9:FD:39:3A:7E:DA:5F:7A:1D:91:49:91:06:E2:71:B7:01
Certificate issuer:       /CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3
Certificate serial:       07DB
Authority key identifier: 50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/B3C29AE8D3C711F09E46353CC4F9AE02.roa
Signing time:             Sun 07 Dec 2025 23:51:52 +0000
ROA not before:           Sun 07 Dec 2025 23:51:52 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     4764
IP address blocks:        103.139.228.0/24 maxlen: 24
                          103.139.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl
                          rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2011 (0x7db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5191, serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3
        Validity
            Not Before: Dec  7 23:51:52 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69361317-4794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:28:f1:c8:cd:4a:6c:86:5a:fb:c8:a2:0f:
                    52:ab:19:ac:1b:ae:7b:d2:39:13:5e:ce:21:17:9f:
                    16:b6:05:d0:db:30:b8:e5:26:b1:50:64:19:a6:d0:
                    f3:e6:83:f1:7c:d6:8b:9c:98:5e:ab:60:97:21:f8:
                    47:71:cd:77:97:a7:cb:89:9b:a3:e1:ba:1b:c0:82:
                    50:40:02:08:73:29:f0:2e:25:f7:be:dc:48:50:cd:
                    b6:03:fb:a3:20:3d:67:2b:65:6d:7e:93:f3:c4:d4:
                    81:a7:7f:98:bb:bc:fa:c8:f3:97:bd:c9:1f:80:71:
                    0c:79:e7:3e:a2:09:a7:07:6a:bf:87:e5:ba:94:0b:
                    d8:f4:c4:82:e0:25:36:8c:46:df:0e:1f:6d:80:55:
                    98:30:ac:69:f3:15:0d:4b:53:57:7d:ae:e9:bc:f1:
                    b7:49:f1:35:e1:18:a3:24:d1:19:3d:f1:0b:90:f8:
                    61:9a:3d:97:f1:64:2f:19:7b:7f:fa:5f:40:65:79:
                    de:05:08:aa:82:91:46:39:27:f1:11:82:cf:68:8a:
                    6d:33:c6:0a:bb:f8:98:ed:9c:c1:59:3c:43:18:dc:
                    12:37:96:a3:bc:e1:30:be:13:f8:81:ef:da:0c:49:
                    b9:87:bb:c1:45:e1:2d:b2:b6:8b:03:9f:17:26:35:
                    12:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:99:4B:F9:FD:39:3A:7E:DA:5F:7A:1D:91:49:91:06:E2:71:B7:01
            X509v3 Authority Key Identifier:
                keyid:50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/B3C29AE8D3C711F09E46353CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:7a:58:d0:84:ea:8d:f5:a5:fb:3b:07:75:88:9a:d3:e9:3f:
         7e:e5:51:58:2f:33:42:e1:a3:4d:82:c5:85:c7:89:54:ce:aa:
         1e:e3:92:91:0e:ca:11:dc:39:02:1d:ec:e9:ef:48:6f:85:1f:
         c7:63:ef:88:eb:ed:9b:8a:d0:0d:71:f5:58:9b:38:39:38:28:
         46:3a:71:7c:93:68:77:e9:25:21:8c:4c:93:2c:96:59:df:ac:
         24:21:19:23:1b:cc:8c:aa:a5:98:e0:71:5f:c0:00:70:69:79:
         a0:04:31:36:e8:d0:6e:15:01:1c:19:f5:9d:84:de:ef:cb:4d:
         76:f7:5a:cd:0a:8f:10:d4:b7:b1:d0:80:ae:7b:f6:8b:eb:0c:
         c7:06:f2:ea:51:b9:11:83:3f:a3:df:90:24:7e:d3:a4:5d:d4:
         27:ba:80:29:8f:db:3f:26:4c:7a:c4:d9:5f:73:dd:90:5f:ce:
         82:75:c0:25:c8:fb:96:b8:76:e4:e3:04:fd:b5:e4:0a:68:62:
         f4:ad:5b:02:06:e2:ea:61:ed:4f:86:fa:c4:21:6e:51:c5:a2:
         59:37:5c:0f:cf:a8:4b:da:4c:8f:04:ef:37:28:31:bf:64:5e:
         b8:d7:66:59:d2:51:9c:f2:8d:1b:78:38:54:16:6a:6c:b0:d9:
         7d:c4:45:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:46:41 2025 by rpki-client