This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/1D98617687B311EFB4972044C4F9AE02.roa
File:                     1D98617687B311EFB4972044C4F9AE02.roa (raw, json)
Hash identifier:          QgMj3I5bGTGmmj+YPUJfTzhJ0oh+U+bAGWMsBoGH6bk=
Subject key identifier:   D7:95:50:94:9B:07:AD:07:5C:6B:43:87:5B:7B:34:65:E8:84:2A:B3
Certificate issuer:       /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
Certificate serial:       01D0
Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/1D98617687B311EFB4972044C4F9AE02.roa
Signing time:             Fri 19 Dec 2025 03:22:58 +0000
ROA not before:           Fri 19 Dec 2025 03:22:58 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137453
IP address blocks:        203.99.144.0/24 maxlen: 24
                          203.99.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl
                          rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
        Validity
            Not Before: Dec 19 03:22:58 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6944c512-06bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:2a:62:3a:98:fb:de:98:90:fd:08:d2:ed:6a:
                    9f:04:1a:5c:45:ff:7d:6b:85:2c:53:e0:35:30:7e:
                    1e:3b:6f:4e:5a:c1:0b:95:5d:06:06:da:bc:60:da:
                    99:32:4f:b7:28:8b:16:97:15:7b:14:8c:32:b1:9c:
                    49:d5:60:27:db:c4:04:2e:a6:f3:fc:7f:66:be:b3:
                    d9:cc:2d:4e:74:62:c8:d7:c4:cf:e2:df:02:13:10:
                    5c:0e:ab:d4:9c:66:85:fc:7f:22:51:f9:4f:3a:9e:
                    e9:2b:c8:7a:65:a6:d0:22:cc:e8:4a:2f:d6:e6:80:
                    7d:53:d9:4d:01:12:73:b1:69:d8:6b:f5:db:19:3b:
                    7c:94:bd:75:d5:66:67:21:86:fe:94:95:f4:a6:30:
                    18:43:d8:1d:fa:da:b6:05:9a:09:c5:03:be:a4:cc:
                    4b:9e:69:16:5e:59:70:63:ee:d6:99:18:53:ae:81:
                    9c:cf:c8:4d:7f:2d:45:98:76:19:1b:1c:9d:2a:ee:
                    b3:c3:0c:da:82:96:b4:d7:47:5b:ce:d0:12:fd:2a:
                    02:24:a9:f2:68:5a:0a:00:b9:19:47:2a:4a:ff:32:
                    97:f0:5e:a9:91:70:b9:da:e5:7a:34:b8:43:22:db:
                    5c:ac:f4:64:a1:97:b8:fb:35:06:84:a3:17:64:eb:
                    3d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:95:50:94:9B:07:AD:07:5C:6B:43:87:5B:7B:34:65:E8:84:2A:B3
            X509v3 Authority Key Identifier:
                keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/1D98617687B311EFB4972044C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.99.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:94:2e:20:5d:a1:d2:c9:f6:0b:83:67:5d:53:f5:3a:8f:1a:
         fa:c0:2d:fb:00:30:7f:f3:a8:fb:47:9b:6f:b5:65:59:a2:9c:
         76:1e:0e:23:ed:b6:c5:50:ce:0e:34:a3:75:b3:5a:d7:f7:40:
         98:b9:25:b8:fe:31:c4:cb:f4:db:eb:0e:d2:84:81:71:01:8d:
         66:c5:c8:ef:94:53:70:1a:62:00:e5:54:15:86:a0:2d:04:79:
         52:7b:e1:d8:5c:f9:34:d5:85:57:37:ca:ff:59:b9:e6:0b:14:
         c9:db:c3:42:16:fc:cb:23:cb:b4:cc:58:93:28:99:e5:9d:92:
         ce:5c:7d:8f:58:23:f0:f1:37:c6:27:b8:05:ac:85:d2:31:5a:
         c2:29:f2:53:a2:b9:86:88:32:d1:03:1e:19:fd:f6:b8:b7:84:
         c9:98:c9:cb:fc:5f:a5:1b:69:cc:de:1b:0f:80:f3:9f:37:08:
         2c:fb:5a:62:78:43:67:f0:f2:79:29:23:07:a6:cc:43:9d:bb:
         61:48:42:85:13:18:ef:5c:31:e0:04:eb:50:e4:8a:61:1e:61:
         9d:74:ff:e4:2d:46:f5:b4:2d:49:67:65:30:d1:4f:df:4d:6e:
         58:3c:e0:de:84:df:6b:3e:3e:b1:b4:d9:12:cd:71:72:85:72:
         7f:7d:2d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:08:16 2025 by rpki-client