This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/B6783AB2DBC511F0ACB3398151641951.roa
File:                     B6783AB2DBC511F0ACB3398151641951.roa (raw, json)
Hash identifier:          ilMU6YpUeSSvj64sWk0DcJ4Llg1hF4XoXqpmsG1kd/Y=
Subject key identifier:   06:66:4C:3E:88:6B:3B:B0:93:4D:00:83:6E:C4:4F:7E:3E:A4:9E:E9
Certificate issuer:       /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
Certificate serial:       EF
Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/B6783AB2DBC511F0ACB3398151641951.roa
Signing time:             Thu 18 Dec 2025 03:57:46 +0000
ROA not before:           Thu 18 Dec 2025 03:57:46 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     6134
IP address blocks:        103.224.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl
                          rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2364, serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
        Validity
            Not Before: Dec 18 03:57:46 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69437bba-7203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:72:01:1e:ec:87:ff:04:0a:8d:7d:40:6a:
                    00:19:fa:e5:1c:18:95:04:aa:16:6b:ca:45:e7:bf:
                    17:ac:14:c1:3f:11:06:5a:be:c4:b9:ff:30:04:1e:
                    5e:0e:45:22:15:cf:11:0b:98:1a:73:a7:87:1b:6d:
                    c5:7a:35:91:79:29:f1:6e:f8:f1:92:29:ef:23:b2:
                    01:dc:b8:25:0b:0c:9d:dd:6a:98:45:15:2c:50:27:
                    a8:63:15:bf:3d:b3:23:b2:17:a4:ff:64:19:90:69:
                    06:ce:e8:22:e9:28:ba:43:36:13:ba:d0:ff:b4:cf:
                    8a:47:53:1b:e8:1e:f3:24:a7:67:ce:91:01:07:7c:
                    14:8e:33:50:cd:95:49:41:c3:84:f9:e3:2f:23:de:
                    36:81:f1:87:dd:cc:7f:cd:0d:19:7f:d7:56:f3:ce:
                    5d:60:cf:77:35:81:54:00:a6:9b:60:7b:58:f2:8b:
                    de:71:55:51:3a:6b:b1:84:62:42:45:31:fc:fd:0a:
                    5c:44:82:e8:09:b5:d8:96:31:3f:00:10:20:aa:bf:
                    99:86:c7:f6:1d:15:e2:3b:19:22:55:0d:22:db:7d:
                    46:25:0e:97:4b:a7:6b:a8:3b:b0:c0:d2:d4:32:0f:
                    7c:7d:42:43:0c:fd:ea:eb:40:7a:c3:90:27:77:b2:
                    0d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:66:4C:3E:88:6B:3B:B0:93:4D:00:83:6E:C4:4F:7E:3E:A4:9E:E9
            X509v3 Authority Key Identifier:
                keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/B6783AB2DBC511F0ACB3398151641951.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:3e:5f:ef:79:07:ae:30:8c:aa:3a:b5:df:73:5a:5a:2e:8d:
         62:1c:a0:d0:d3:be:80:08:2a:61:8e:83:16:c6:51:b0:f1:a9:
         00:40:b5:d7:ff:fb:93:42:e8:c9:8f:4f:86:81:04:34:4b:6c:
         32:e8:94:b4:7d:66:55:5a:58:04:6a:07:a8:d1:9f:13:77:2a:
         33:e7:57:e1:7a:18:30:fc:5c:8a:0e:72:15:96:c9:0d:17:da:
         0b:da:21:4c:44:3a:1a:a5:e1:c0:a8:b8:52:c8:c3:88:74:dd:
         60:69:33:10:f9:9d:70:21:8a:d0:22:c0:bb:44:4e:37:78:b9:
         a5:20:dc:bd:6f:a8:a1:ca:f0:6b:8f:b6:ed:17:07:a4:75:71:
         cc:96:15:cb:ba:a6:e6:b6:65:e4:4e:d3:c5:2a:23:f6:8c:7e:
         b3:4f:f3:7c:02:e6:88:4b:a3:f6:a7:05:8b:3b:b3:c1:b3:2f:
         99:20:1c:eb:24:fe:6a:cc:ab:41:d1:1b:13:87:3b:68:aa:94:
         cd:3d:63:51:1c:4f:1e:e9:c7:79:f1:a5:e5:3d:b7:64:69:36:
         07:a1:8b:b6:2d:39:86:b9:0e:ce:96:e1:e2:36:5d:d3:3f:74:
         2d:89:4b:16:1a:ca:c3:3f:9c:9f:83:2f:92:0a:f6:6f:52:2e:
         40:1e:fe:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:06:17 2025 by rpki-client