This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/23D4183024D711EF932FC941C4F9AE02.roa
File:                     23D4183024D711EF932FC941C4F9AE02.roa (raw, json)
Hash identifier:          jHywDoNB/M5/JWK2missGRiO0nqIo+DRSIZ4F6Z5slM=
Subject key identifier:   11:A7:B7:8F:4D:A4:2B:D3:A9:52:32:58:BC:C8:8E:21:6C:05:09:BB
Certificate issuer:       /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
Certificate serial:       01D1
Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/23D4183024D711EF932FC941C4F9AE02.roa
Signing time:             Fri 19 Dec 2025 03:22:59 +0000
ROA not before:           Fri 19 Dec 2025 03:22:59 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     138640
IP address blocks:        203.99.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl
                          rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
        Validity
            Not Before: Dec 19 03:22:59 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6944c513-f603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:7c:f2:39:7d:12:ae:7b:ed:cc:8b:5d:b2:
                    bc:ae:f7:24:2c:3c:23:63:00:60:49:cb:b7:b1:29:
                    9b:35:a8:ea:0d:da:17:7c:ea:a9:85:50:21:7d:b3:
                    29:14:1e:b4:9a:a5:e8:42:aa:df:f6:9a:8c:d7:6e:
                    5c:ae:8e:25:a5:50:e0:8e:89:9f:c1:39:e3:cc:5d:
                    f4:77:bf:44:95:18:d3:95:a6:56:78:f7:29:a3:f8:
                    00:ac:7a:22:ae:ed:cd:65:9f:be:2f:7d:15:82:01:
                    c1:79:ed:a9:1d:98:c8:65:a7:76:c7:6f:59:cc:d1:
                    b7:b1:19:fa:56:da:ac:73:32:86:0c:eb:73:81:e4:
                    8c:e5:a8:9c:f5:59:61:bf:c9:f4:4f:61:a4:38:9b:
                    b3:73:2a:6d:ed:cb:a0:62:28:9f:f6:62:7c:64:5d:
                    cb:df:6b:fd:dd:db:37:db:5d:1d:7d:ba:5c:82:40:
                    e0:62:97:cb:f0:4d:51:4f:f0:dd:93:c3:88:31:81:
                    77:dd:51:aa:dd:fb:96:0b:13:6c:e5:e2:e9:d1:d3:
                    44:eb:5f:bd:9c:a4:54:82:3e:7b:61:3b:41:a0:cc:
                    d0:a8:14:a5:14:d0:f1:99:f8:df:5b:f2:60:39:e8:
                    e3:e8:a9:4c:6a:a2:f6:a6:b0:0e:49:8d:21:11:9e:
                    b2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A7:B7:8F:4D:A4:2B:D3:A9:52:32:58:BC:C8:8E:21:6C:05:09:BB
            X509v3 Authority Key Identifier:
                keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/23D4183024D711EF932FC941C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.99.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:fd:9c:97:20:cb:0f:96:a4:a6:e0:04:78:e5:ff:76:51:3c:
         6e:33:a7:6e:cc:3e:dd:ed:ca:2d:93:c6:da:f8:83:28:22:42:
         70:8e:ef:a8:41:9b:37:1d:b9:cd:3c:25:1f:36:0f:b8:7c:4a:
         e6:f2:63:20:7b:8f:d3:8f:5c:9d:ce:4a:ce:e0:f2:f9:ee:8e:
         c8:18:72:8a:14:78:2e:69:cd:14:84:53:ab:e0:a3:e6:43:1d:
         2a:cf:52:aa:56:e2:a8:4c:02:e2:b1:2d:ef:a2:1e:53:ed:67:
         27:6a:8d:33:0b:f6:d3:ca:c4:a2:4f:cb:02:3a:dc:00:cb:c4:
         34:ba:f7:09:8b:f1:6a:6f:63:32:8a:05:c0:a2:1d:b9:a7:a6:
         fc:d8:bd:de:46:4c:4c:69:c0:f5:f9:b4:ac:a9:a9:92:24:c7:
         2a:5a:cf:fb:53:32:0b:f4:71:41:5c:e5:9f:ee:d5:f6:11:06:
         6a:31:71:a9:3a:e6:a4:a8:50:f4:e9:a0:0e:72:fe:5a:34:3c:
         7d:f7:39:31:6a:d8:22:1c:58:95:78:69:65:d6:58:05:e7:f0:
         d6:92:91:98:c1:2e:87:39:7a:3c:18:c4:19:98:63:f2:ec:c1:
         bd:ed:0e:5a:47:82:22:d1:31:c0:74:61:73:45:17:5f:73:90:
         50:d0:d3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:45:35 2025 by rpki-client