This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/02817064DCD811F0A33153DF516F56BC.roa
File:                     02817064DCD811F0A33153DF516F56BC.roa (raw, json)
Hash identifier:          8I9UOp4Z+/Xy0X8dibahvto/spl08HnHkRuVpTID/Qo=
Subject key identifier:   B5:74:51:7C:83:C9:61:33:81:B8:C6:48:B4:9D:6A:CD:EC:6E:42:51
Certificate issuer:       /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655
Certificate serial:       0575
Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/02817064DCD811F0A33153DF516F56BC.roa
Signing time:             Fri 19 Dec 2025 12:42:46 +0000
ROA not before:           Fri 19 Dec 2025 12:42:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     132210
IP address blocks:        103.101.236.0/23 maxlen: 23
                          103.101.236.0/24 maxlen: 24
                          103.101.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl
                          rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 16:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1397 (0x575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4707, serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655
        Validity
            Not Before: Dec 19 12:42:46 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69454846-6d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a7:53:af:11:ac:a3:c6:f5:f4:dd:02:41:95:
                    31:f9:cf:03:76:bb:21:a6:11:c7:c9:21:fd:af:10:
                    1f:85:f9:eb:5e:10:79:94:63:e7:62:de:7a:d8:ca:
                    c0:1f:ba:68:7b:58:56:e7:a7:5c:aa:66:87:8a:85:
                    3b:65:27:0d:ca:c5:a3:91:f7:3e:a3:5c:99:c1:1a:
                    5a:39:d1:79:85:cc:f1:ed:84:a7:fe:95:9e:b5:8c:
                    66:23:f0:d7:50:43:07:db:d1:14:27:a7:8a:55:73:
                    9f:53:0c:a6:08:77:34:dc:9d:44:3d:31:0e:41:a9:
                    7d:af:11:bb:28:c1:d1:a4:89:e2:c3:09:92:4b:59:
                    cb:1f:84:fd:6d:6d:36:ed:dc:4c:72:1e:85:90:b7:
                    61:c2:0b:a3:49:38:d7:be:bc:8e:39:6e:79:71:90:
                    5c:c0:cc:b2:d0:81:16:5d:ab:f3:65:e3:0d:31:f0:
                    1e:70:a1:2a:42:e0:61:06:45:e7:ab:b3:a0:f6:f2:
                    80:e4:74:b6:6c:ec:ec:ca:bc:5a:78:ea:c8:e7:91:
                    5a:a3:14:15:f0:9c:72:4b:f2:25:c0:af:02:7f:ed:
                    dc:b6:e1:65:70:f6:4d:00:79:0f:f9:6e:cd:e7:bd:
                    0e:d5:b8:27:2f:bf:bc:c8:e7:92:3e:46:ab:da:ce:
                    32:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:74:51:7C:83:C9:61:33:81:B8:C6:48:B4:9D:6A:CD:EC:6E:42:51
            X509v3 Authority Key Identifier:
                keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/02817064DCD811F0A33153DF516F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:fa:18:f6:27:ca:c2:74:35:02:28:1d:fd:f2:3b:55:de:3c:
         7e:87:38:a3:ee:c2:79:f2:3e:45:1b:f3:11:2c:5a:29:43:9f:
         0a:0d:2d:12:5b:2f:72:d7:47:24:47:01:95:9d:be:7b:82:c6:
         8a:c6:8a:f7:8e:1d:2b:91:93:75:e3:30:43:f8:91:b8:29:9e:
         59:eb:f5:e0:67:45:40:f8:55:64:d8:b5:50:ec:60:e4:6e:7c:
         0f:ac:76:41:a8:e5:de:9d:a8:cb:f7:40:c6:29:86:9b:d2:27:
         ce:65:90:52:96:b3:2e:e8:94:3d:84:80:70:94:ed:23:2d:ca:
         f2:f5:e6:9a:e8:69:30:cd:a7:da:14:8d:fe:11:cd:24:b5:c5:
         cf:a4:d8:e8:e4:77:c3:89:da:b0:8d:e4:a4:75:46:32:4e:7a:
         1f:7b:39:d1:5f:2c:6a:21:46:7c:a2:fc:fa:17:e3:76:dc:72:
         57:f7:09:a7:f9:78:53:30:cc:3c:b9:56:2a:4c:85:27:bc:83:
         4e:99:00:84:b0:0e:00:5e:be:93:1d:77:9c:54:e3:02:37:6e:
         47:51:2a:dc:ab:30:60:07:1c:b5:7b:e6:ab:7b:81:55:84:24:
         c5:b6:57:3f:e8:5e:0c:e1:e2:fd:9a:dc:41:bb:e4:13:8d:89:
         46:a0:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:38:21 2025 by rpki-client