This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/091F81047A5411EB9AC2283DC4F9AE02.roa
File:                     091F81047A5411EB9AC2283DC4F9AE02.roa (raw, json)
Hash identifier:          ev4dezOp21LFlNeRPbWfpWI+d+PTYEXRWluADsq/TJA=
Subject key identifier:   E0:AA:1A:18:7A:53:25:F7:C0:AC:AF:C2:37:12:E7:B4:97:67:47:89
Certificate issuer:       /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Certificate serial:       0CA3
Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/091F81047A5411EB9AC2283DC4F9AE02.roa
Signing time:             Wed 31 Dec 2025 18:16:09 +0000
ROA not before:           Wed 31 Dec 2025 18:16:09 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132825
IP address blocks:        103.145.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
                          rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 18:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3235 (0xca3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
        Validity
            Not Before: Dec 31 18:16:09 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69556869-bb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:c7:65:20:32:f7:20:33:95:1d:6d:27:66:
                    4d:59:17:93:0c:91:0e:4e:02:bd:4f:71:71:2a:58:
                    b2:f0:24:ed:8c:ef:07:07:47:cb:a3:fb:ea:c0:e8:
                    50:bd:6a:48:c2:c2:66:c4:d8:a6:13:c9:90:bd:9a:
                    f5:3c:d6:fa:c3:e7:71:78:c7:91:19:5f:18:90:8e:
                    8b:4f:ed:7c:cf:c2:88:96:f9:91:78:48:78:50:a8:
                    7e:c7:96:9b:15:41:b4:bd:b9:4d:2d:62:0a:ce:6b:
                    8b:3b:b9:f0:14:85:78:d3:b1:aa:95:d2:bc:77:08:
                    e0:3d:9c:e3:c7:1c:a7:ce:cd:8f:a5:ec:ad:64:5c:
                    d7:82:b5:41:81:c9:d9:57:ec:84:6c:37:c9:6c:b0:
                    e6:ca:5d:62:3b:cd:ff:36:49:23:15:31:4d:4a:dd:
                    48:38:ca:d1:d6:35:26:ea:d4:f8:33:89:1a:bc:a1:
                    30:6f:2a:05:f3:8b:eb:8d:19:00:21:59:ec:96:c6:
                    aa:e1:b8:71:23:75:05:74:d0:91:61:a9:9a:db:6a:
                    e8:2e:c8:4d:1f:11:f5:99:6d:cb:d6:d0:e8:bc:39:
                    11:ac:b7:f9:90:c6:c9:53:76:43:8b:b3:a3:83:8c:
                    a0:6b:b5:5a:96:b3:f3:50:fa:d2:df:e1:1c:e3:f0:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AA:1A:18:7A:53:25:F7:C0:AC:AF:C2:37:12:E7:B4:97:67:47:89
            X509v3 Authority Key Identifier:
                keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/091F81047A5411EB9AC2283DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:1c:3e:70:94:80:41:54:e1:97:3b:0e:81:14:e2:99:12:1b:
         a7:df:90:7d:b1:a1:eb:e3:67:3d:5b:a4:d1:f0:d1:71:eb:c4:
         40:fe:41:f2:01:64:39:d0:e9:96:57:7d:c0:d5:92:38:f6:b4:
         12:0e:32:4e:a8:62:bf:6a:1a:45:33:4c:bb:b6:aa:02:7f:16:
         16:ea:69:a7:bd:e3:61:7c:47:2f:0d:db:b4:95:82:59:77:6a:
         f5:cf:32:59:59:99:a8:c5:ba:93:32:68:f2:d4:d1:0f:3a:3e:
         06:ca:bd:53:50:9e:c5:1c:43:73:ed:82:f6:d7:1a:9a:0d:40:
         c4:34:55:b8:4f:16:81:9f:f3:b4:40:aa:c1:04:aa:b5:70:36:
         9e:c3:1b:fa:45:4c:13:95:d1:09:e4:e1:52:b2:e9:73:e7:e8:
         a0:c9:51:46:a1:25:dd:3a:68:ce:92:d7:0b:a1:19:e6:b0:58:
         8f:25:4e:4e:0a:71:06:6b:49:91:aa:40:1a:15:a7:ee:e9:e5:
         55:23:7e:d2:76:c7:a2:dc:71:bc:64:a1:3b:0d:b3:4b:78:a9:
         2d:f8:b2:d8:6c:a1:3b:64:ee:33:47:fa:78:93:2f:89:7c:42:
         4e:9c:52:93:fc:ec:03:02:76:a6:52:83:ad:31:24:66:f7:42:
         50:f4:3e:18
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD
MzZGN0VGOTEwHhcNMjUxMjMxMTgxNjA5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU1Njg2OS1iYjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArivHZSAy9yAzlR1tJ2ZNWReTDJEOTgK9T3FxKliy8CTtjO8HB0fLo/vqwOhQ
vWpIwsJmxNimE8mQvZr1PNb6w+dxeMeRGV8YkI6LT+18z8KIlvmReEh4UKh+x5ab
FUG0vblNLWIKzmuLO7nwFIV407GqldK8dwjgPZzjxxynzs2PpeytZFzXgrVBgcnZ
V+yEbDfJbLDmyl1iO83/NkkjFTFNSt1IOMrR1jUm6tT4M4kavKEwbyoF84vrjRkA
IVnslsaq4bhxI3UFdNCRYama22roLshNHxH1mW3L1tDovDkRrLf5kMbJU3ZDi7Oj
g4yga7ValrPzUPrS3+Ec4/AAKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOCqGhh6
UyX3wKyvwjcS57SXZ0eJMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG
NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3
NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUJGREEvNjgxMjdFMjAwRjRCMTFFQUFEQTM3OTc3QzRGOUFFMDIvMDkxRjgxMDQ3
QTU0MTFFQjlBQzIyODNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnkSYwDQYJKoZIhvcNAQELBQADggEBAFwcPnCUgEFU4Zc7
DoEU4pkSG6ffkH2xoevjZz1bpNHw0XHrxED+QfIBZDnQ6ZZXfcDVkjj2tBIOMk6o
Yr9qGkUzTLu2qgJ/Fhbqaae942F8Ry8N27SVgll3avXPMllZmajFupMyaPLU0Q86
PgbKvVNQnsUcQ3PtgvbXGpoNQMQ0VbhPFoGf87RAqsEEqrVwNp7DG/pFTBOV0Qnk
4VKy6XPn6KDJUUahJd06aM6S1wuhGeawWI8lTk4KcQZrSZGqQBoVp+7p5VUjftJ2
x6LccbxkoTsNs0t4qS34sthsoTtk7jNH+niTL4l8Qk6cUpP87AMCdqZSg60xJGb3
QlD0Phg=
-----END CERTIFICATE-----
Generated at Thu Jan 1 09:06:43 2026 by rpki-client