This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/31D77D7ED99811F0B81C7A7265D3641D.roa
File:                     31D77D7ED99811F0B81C7A7265D3641D.roa (raw, json)
Hash identifier:          UGcEdy2YnXgl+J1snGlC99HRrkyZEQrbBCiTVou5PQ8=
Subject key identifier:   7F:50:E4:31:C7:48:B2:7A:4F:43:6A:6A:BF:64:90:79:CA:BA:34:EE
Certificate issuer:       /CN=A91731AD/serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
Certificate serial:       65
Authority key identifier: C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/31D77D7ED99811F0B81C7A7265D3641D.roa
Signing time:             Mon 15 Dec 2025 09:26:54 +0000
ROA not before:           Mon 15 Dec 2025 09:26:54 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153930
IP address blocks:        165.99.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl
                          rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731AD, serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
        Validity
            Not Before: Dec 15 09:26:54 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=693fd45e-dc00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:c8:cd:20:ce:3d:61:d7:ee:d8:e6:d9:3f:
                    8e:97:36:71:ff:30:e7:ce:88:8e:3a:ce:15:bd:52:
                    cb:56:3b:19:5f:1c:e4:00:36:fb:cd:2a:b2:55:30:
                    6f:49:84:ab:b4:96:b5:db:a2:42:c2:77:dd:da:d3:
                    c6:3c:87:91:31:00:6d:e6:04:e3:4d:27:5d:4f:34:
                    f3:80:48:06:eb:e6:12:35:d0:da:de:76:e1:1e:6a:
                    3b:c5:d3:b9:ca:8f:4f:0a:cd:5e:3a:57:80:7a:cf:
                    52:ee:28:85:b1:f5:ed:c9:bb:f6:31:2c:f4:c0:b6:
                    e8:e8:e3:72:02:98:09:cc:49:67:29:d8:a5:be:90:
                    5c:13:1e:d7:a3:93:1d:4c:2a:2e:d0:b2:24:12:2e:
                    e4:21:ef:44:a8:5d:12:cd:2c:16:e9:97:98:25:f0:
                    f2:a4:f2:3f:ba:f8:cb:ac:02:f1:c5:cb:a5:82:7f:
                    39:f2:7d:5d:72:e8:7b:ab:8d:47:df:1b:ec:f4:f0:
                    9d:d1:c7:d5:b4:cc:1e:1c:88:a4:00:18:0e:1f:04:
                    b5:69:9c:9b:23:9e:2c:80:5f:2b:b1:1e:6a:fa:81:
                    cb:bc:b3:b8:9d:84:57:6b:ad:11:75:26:de:54:0b:
                    66:b9:d4:a4:b8:5c:d6:df:20:a3:bd:89:ae:e9:dc:
                    36:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:50:E4:31:C7:48:B2:7A:4F:43:6A:6A:BF:64:90:79:CA:BA:34:EE
            X509v3 Authority Key Identifier:
                keyid:C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/31D77D7ED99811F0B81C7A7265D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:5e:dc:53:d5:de:74:a5:31:a4:52:2c:be:d4:15:da:61:b6:
         34:8d:1d:4b:2a:cd:81:2c:07:be:ec:e0:d1:5d:f7:68:56:08:
         ef:a4:4c:14:f9:f1:ad:7e:4b:e6:32:9b:a8:ef:45:1e:79:8e:
         8b:c6:03:41:d1:d7:e8:10:0a:80:66:a6:6a:cc:c4:15:0e:8b:
         c2:6b:63:57:36:a6:c0:03:fb:34:b6:6e:80:30:87:d7:9f:f2:
         c8:ad:03:40:e0:9f:b5:36:a2:30:b5:46:70:ed:07:44:0a:fc:
         71:d6:7b:22:a8:15:4d:22:21:2b:76:3e:d9:7c:e2:3a:4c:dc:
         3f:a5:d0:7a:93:b0:de:a1:1a:e0:f8:f4:aa:a3:ab:f5:41:39:
         39:d0:e2:3d:db:dd:57:bd:0d:31:61:23:b6:5c:e1:a5:9d:7c:
         dc:7a:2a:a1:10:cc:a2:e7:08:d4:b5:38:25:af:41:29:cb:82:
         89:bb:37:c5:43:fa:1c:16:ad:cf:51:36:f6:98:10:79:6f:c8:
         4a:6a:0a:39:ca:cd:ee:37:34:3c:53:78:dc:3b:31:3e:d3:b7:
         d6:ba:cd:f0:aa:17:e9:97:69:bf:65:26:c4:74:e1:27:1e:1f:
         94:ca:78:f2:ca:ed:23:30:a7:fc:e1:c2:ae:27:69:22:c2:45:
         d1:9b:7e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:20:50 2025 by rpki-client