This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DEBDCECAC2CF11EFA805380FC4F9AE02.roa
File:                     DEBDCECAC2CF11EFA805380FC4F9AE02.roa (raw, json)
Hash identifier:          7TAaE/8fhVJTw/M9q10IxoBr1ZsLCV+PEces+u8jYss=
Subject key identifier:   E2:55:83:46:EB:96:B1:2C:4D:C0:13:86:4E:9C:CA:F7:C9:C3:4D:A7
Certificate issuer:       /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial:       04F2
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DEBDCECAC2CF11EFA805380FC4F9AE02.roa
Signing time:             Wed 24 Dec 2025 05:12:27 +0000
ROA not before:           Wed 24 Dec 2025 05:12:27 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     135046
IP address blocks:        103.152.116.0/24 maxlen: 24
                          2001:df4:e80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 23:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1266 (0x4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
        Validity
            Not Before: Dec 24 05:12:27 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=694b763b-62dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:36:cf:57:ee:93:db:67:8e:d0:5e:f5:1a:
                    f7:3e:8d:a9:b8:ac:8a:fb:be:02:84:be:da:c3:2f:
                    ee:56:66:ba:01:29:71:6b:cb:72:c5:4e:0d:f2:11:
                    1f:90:8b:ea:25:04:06:f8:96:27:b1:85:8c:c0:f0:
                    8d:8a:08:48:d8:a1:ec:98:e3:29:21:00:64:eb:aa:
                    59:69:19:09:00:b9:c0:a7:b3:b8:ba:28:f4:66:da:
                    0e:91:51:2d:e3:6d:58:bf:bc:01:a5:12:74:22:79:
                    a4:65:d4:db:2b:1b:37:73:54:dd:ee:a1:b2:42:5c:
                    d7:95:1c:f1:b8:a9:d3:95:64:48:b4:5e:63:d2:52:
                    c1:08:12:8e:0b:e6:01:e6:b8:dd:90:76:a1:dc:c5:
                    ce:42:9d:ab:16:7f:2f:b5:db:c9:ef:18:db:8e:d5:
                    76:c8:9b:de:7f:30:66:57:f9:3c:02:ad:98:7b:ef:
                    42:61:02:8c:bf:cc:21:45:3e:a9:68:af:be:a4:21:
                    c3:0b:af:c8:b8:03:13:c6:71:29:47:bd:2a:1b:7d:
                    e1:ee:48:6a:ee:60:6b:8b:be:38:56:3f:be:89:16:
                    41:c1:97:e9:6a:df:0a:82:44:28:07:3a:8d:8d:1e:
                    d6:a4:c9:ff:6f:b2:a9:d1:c9:fd:82:b1:f1:39:80:
                    e7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:55:83:46:EB:96:B1:2C:4D:C0:13:86:4E:9C:CA:F7:C9:C3:4D:A7
            X509v3 Authority Key Identifier:
                keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DEBDCECAC2CF11EFA805380FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.116.0/24
                IPv6:
                  2001:df4:e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:2c:52:9c:0d:75:16:df:5b:f4:cd:c7:af:1f:05:62:49:58:
         31:a5:be:e3:d8:7a:e6:7a:44:77:29:00:dc:76:d4:d7:90:e7:
         36:52:90:9c:d9:48:95:5c:15:bc:4a:9d:23:e9:07:a4:f9:80:
         9a:f7:98:a5:fa:78:fb:db:a8:6c:7b:3f:36:60:d5:8d:16:4b:
         88:ac:5a:4d:87:ff:34:f4:a9:b5:01:86:31:46:42:86:e1:88:
         6e:5c:fa:91:96:d5:6b:fb:e7:75:da:7d:c6:9f:61:fe:bf:7f:
         cf:e1:9a:36:0e:6e:01:26:06:55:34:03:15:ff:99:ce:ac:cb:
         36:48:f8:10:70:86:2f:ff:89:68:33:1b:8b:cd:5b:93:af:6e:
         96:2f:ab:63:6d:e3:dd:77:ae:38:08:a7:c5:bc:23:40:89:4e:
         58:21:88:b1:10:3e:19:13:a6:6e:92:22:af:63:ae:3c:83:12:
         ca:84:c2:3b:0d:96:bc:d2:9e:2e:7b:ac:be:fd:e9:0a:d2:c5:
         e7:b1:01:c7:68:e6:91:8e:f4:dd:39:d9:cc:09:68:b8:20:65:
         d0:2d:a8:12:68:70:c0:02:8e:bc:93:c5:ce:47:49:2f:82:53:
         73:6b:51:82:7d:b2:11:e1:be:3a:1b:e5:f9:fe:6f:df:0d:1a:
         8d:25:26:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 16:12:38 2025 by rpki-client