This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C97B91A2D3E311F0AD18C835C4F9AE02.roa
File:                     C97B91A2D3E311F0AD18C835C4F9AE02.roa (raw, json)
Hash identifier:          tDixoa195PopYf9y4PKaGdwV3z7aFGfggS+eJnhhAmg=
Subject key identifier:   8B:7F:C8:1C:7E:45:E9:B8:B6:E7:70:51:6D:85:2E:0A:47:C0:E8:AE
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4F5B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C97B91A2D3E311F0AD18C835C4F9AE02.roa
Signing time:             Fri 19 Dec 2025 09:38:11 +0000
ROA not before:           Fri 19 Dec 2025 09:38:11 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152933
IP address blocks:        103.165.144.0/23 maxlen: 23
                          103.165.144.0/24 maxlen: 24
                          103.165.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 10:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20315 (0x4f5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Dec 19 09:38:11 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69451d03-7c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:e6:3b:fa:a6:8d:d8:c2:68:0c:7b:23:0c:
                    ce:32:5b:40:cb:29:30:68:2c:cf:ed:14:07:ee:13:
                    36:24:f3:a3:af:67:cf:3f:f8:b4:64:a1:f0:ef:55:
                    ac:12:f4:45:83:54:66:38:01:79:ac:c9:4f:6e:c6:
                    6b:77:59:87:ed:08:bd:0d:76:a7:9f:7f:d0:ac:37:
                    1b:37:ee:35:07:78:55:30:80:90:48:f2:13:ee:c1:
                    76:9e:00:0d:7f:d1:97:ca:a2:c1:23:d0:23:6c:0e:
                    53:71:ea:c7:51:7e:3b:d4:0d:0b:26:a7:3e:bb:8a:
                    9b:14:b8:6f:92:f7:00:bf:47:9a:c5:11:bb:ac:a5:
                    6a:5f:c1:5c:0c:91:de:2c:5e:03:e0:29:5c:f9:ee:
                    c6:76:7f:0d:41:f6:46:d0:31:42:90:05:ab:d3:e8:
                    4e:82:fb:65:13:a0:43:ae:4d:89:d2:65:c6:23:6b:
                    47:11:e8:62:a6:32:9a:52:15:bf:8a:98:4a:f6:17:
                    43:1c:f1:47:bc:73:3c:20:9d:2c:da:3b:da:16:ea:
                    6d:d1:2f:90:81:e1:fb:34:bf:e0:3f:99:ff:3b:44:
                    9a:e9:53:59:c9:c1:d4:43:0e:df:17:45:ea:35:a1:
                    ea:60:aa:97:aa:7f:8b:1f:2a:5f:0e:5e:26:4a:35:
                    cd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7F:C8:1C:7E:45:E9:B8:B6:E7:70:51:6D:85:2E:0A:47:C0:E8:AE
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C97B91A2D3E311F0AD18C835C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:65:8a:b6:17:cd:59:e1:77:5a:c5:75:28:ee:29:3e:fc:c2:
         20:e4:63:e9:52:34:35:c2:68:c3:a5:ec:5b:5d:ba:ee:7d:31:
         e9:68:5b:d5:e5:16:6a:6e:f6:5e:e6:36:5c:09:0a:35:c7:3c:
         50:5d:18:a4:5f:c3:30:bf:0a:96:e6:9c:ab:f9:76:9e:6a:85:
         9a:ba:1e:a8:f5:f1:04:75:24:53:5c:6d:27:6c:21:43:3a:fe:
         35:33:4d:48:82:60:f7:52:bd:bd:d4:0c:21:93:a6:94:6b:ac:
         e5:fc:da:a2:e1:2c:a8:0d:5c:05:15:8d:30:9d:ec:e0:db:c6:
         4e:ec:68:40:39:86:71:a2:20:d0:24:4c:97:46:5d:80:55:cd:
         32:f6:17:d5:51:8d:15:78:58:a1:84:59:5d:70:a7:58:70:8d:
         fa:bf:65:35:74:f4:77:e3:32:ea:c7:e8:a3:df:1c:7f:96:60:
         34:38:3e:44:28:b3:70:4e:19:5f:db:3b:bf:e6:18:67:ac:cc:
         1f:b7:8e:aa:80:0b:03:5b:fc:ce:45:1f:24:bc:d5:0f:eb:bd:
         13:a7:39:33:d2:a7:ed:28:16:1d:68:57:8f:dc:63:14:74:9f:
         e4:04:8f:d3:d0:be:59:32:82:29:f8:e5:24:11:26:d5:ea:85:
         8b:25:30:fa
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICT1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUxMjE5MDkzODExWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQ1MWQwMy03YzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy5nmO/qmjdjCaAx7IwzOMltAyykwaCzP7RQH7hM2JPOjr2fPP/i0ZKHw71Ws
EvRFg1RmOAF5rMlPbsZrd1mH7Qi9DXann3/QrDcbN+41B3hVMICQSPIT7sF2ngAN
f9GXyqLBI9AjbA5TcerHUX471A0LJqc+u4qbFLhvkvcAv0eaxRG7rKVqX8FcDJHe
LF4D4Clc+e7Gdn8NQfZG0DFCkAWr0+hOgvtlE6BDrk2J0mXGI2tHEehipjKaUhW/
iphK9hdDHPFHvHM8IJ0s2jvaFupt0S+QgeH7NL/gP5n/O0Sa6VNZycHUQw7fF0Xq
NaHqYKqXqn+LHypfDl4mSjXNzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIt/yBx+
Rem4tudwUW2FLgpHwOiuMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzk3QjkxQTJE
M0UzMTFGMEFEMThDODM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnpZAwDQYJKoZIhvcNAQELBQADggEBAKplirYXzVnhd1rF
dSjuKT78wiDkY+lSNDXCaMOl7Ftduu59MeloW9XlFmpu9l7mNlwJCjXHPFBdGKRf
wzC/CpbmnKv5dp5qhZq6Hqj18QR1JFNcbSdsIUM6/jUzTUiCYPdSvb3UDCGTppRr
rOX82qLhLKgNXAUVjTCd7ODbxk7saEA5hnGiINAkTJdGXYBVzTL2F9VRjRV4WKGE
WV1wp1hwjfq/ZTV09HfjMurH6KPfHH+WYDQ4PkQos3BOGV/bO7/mGGeszB+3jqqA
CwNb/M5FHyS81Q/rvROnOTPSp+0oFh1oV4/cYxR0n+QEj9PQvlkygin45SQRJtXq
hYslMPo=
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:54:43 2025 by rpki-client