This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/53200314F84411F0A835BFBA3E6F56BC.roa
File:                     53200314F84411F0A835BFBA3E6F56BC.roa (raw, json)
Hash identifier:          H59T4sI4soDE4ovH3+jZiHLAAVlv36Yx7Pp9zv/HZRQ=
Subject key identifier:   D7:3F:DB:3B:70:57:28:A1:16:35:D6:16:AC:28:22:66:B4:6F:83:25
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4F94
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/53200314F84411F0A835BFBA3E6F56BC.roa
Signing time:             Fri 23 Jan 2026 10:14:38 +0000
ROA not before:           Fri 23 Jan 2026 10:14:38 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63763
IP address blocks:        103.153.70.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20372 (0x4f94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Jan 23 10:14:38 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69734a0e-63f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:85:c0:b3:08:f9:fe:90:09:76:95:fd:2b:fd:
                    08:34:a2:a6:1f:45:cb:9f:53:16:ad:71:e0:1f:22:
                    54:7e:6e:85:0a:c8:39:2d:95:28:64:8a:da:ae:2d:
                    91:00:55:fa:2d:06:9d:7f:21:88:ad:2e:b7:16:a9:
                    76:12:4c:08:f1:ea:5e:fe:be:03:1a:8b:84:69:4b:
                    5f:f2:8f:f7:13:bf:ff:9f:d8:c9:68:e6:99:1d:96:
                    44:40:08:69:2f:89:58:85:34:9c:62:46:ad:e4:b3:
                    82:73:25:a9:63:06:68:df:57:e1:46:9c:34:eb:d1:
                    f5:6e:72:0b:ab:29:96:b6:4b:f2:7b:67:0a:23:90:
                    21:c4:b0:f2:4e:f2:36:1f:8a:f1:d4:30:97:39:f9:
                    c3:00:f3:72:f7:5e:f8:cc:f7:17:ce:fc:75:b2:76:
                    1a:20:7d:7a:46:2c:60:2a:86:d6:54:86:ba:38:6c:
                    9f:da:a4:c4:c4:2b:ef:c7:86:a6:ed:41:6a:e7:e8:
                    2c:88:7e:92:38:11:3c:40:e5:85:c5:94:43:2e:88:
                    3e:aa:fa:f6:10:90:1b:5c:2a:68:a2:37:3b:60:6e:
                    19:2a:89:2b:02:39:6f:9c:72:0b:fb:0b:8f:3c:d4:
                    58:27:1d:5d:41:fe:e8:16:a8:85:64:16:11:f8:19:
                    87:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3F:DB:3B:70:57:28:A1:16:35:D6:16:AC:28:22:66:B4:6F:83:25
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/53200314F84411F0A835BFBA3E6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:14:79:c0:22:26:83:be:3b:08:21:0c:55:27:98:8f:26:08:
         6f:c7:45:66:d6:a9:a8:88:11:57:8f:fe:37:37:b4:90:6d:d0:
         af:7f:d1:05:1a:e0:0e:7b:7c:a9:d4:47:10:c2:4f:60:a7:77:
         e7:96:c3:e8:d9:d6:a5:fc:35:b3:02:57:2b:92:9a:5c:e7:08:
         91:98:f7:7e:77:f2:9d:28:e4:e8:ae:0d:ff:90:c9:86:f9:ad:
         31:01:33:5f:7e:53:5e:fe:ff:2a:56:ed:67:78:cf:90:4d:ee:
         54:8d:9c:b7:15:ef:f9:e3:78:09:68:4d:28:24:98:a1:da:3a:
         05:7d:5e:43:f2:16:b6:de:56:1b:33:a1:b1:a4:f1:4c:12:c0:
         33:fb:be:be:9d:b3:e2:4a:ed:e7:46:0d:e3:31:11:c3:d6:1d:
         00:cd:d3:d0:65:cc:3a:e1:42:b3:68:5a:ad:e6:be:a5:b4:e6:
         12:07:24:bb:29:4a:b6:6c:f1:db:12:c2:19:94:81:3f:41:0c:
         84:55:1d:64:74:68:09:e2:57:72:ac:55:d1:d7:74:66:65:89:
         b6:38:a8:8e:af:d2:f8:9b:9d:8b:e5:cb:08:20:f9:5c:c6:6d:
         0e:19:da:7f:70:a4:d1:2d:a6:ac:a6:57:ef:52:fa:39:b2:ee:
         e9:0b:48:45
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICT5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYwMTIzMTAxNDM4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTczNGEwZS02M2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx4XAswj5/pAJdpX9K/0INKKmH0XLn1MWrXHgHyJUfm6FCsg5LZUoZIrari2R
AFX6LQadfyGIrS63Fql2EkwI8epe/r4DGouEaUtf8o/3E7//n9jJaOaZHZZEQAhp
L4lYhTScYkat5LOCcyWpYwZo31fhRpw069H1bnILqymWtkvye2cKI5AhxLDyTvI2
H4rx1DCXOfnDAPNy9174zPcXzvx1snYaIH16RixgKobWVIa6OGyf2qTExCvvx4am
7UFq5+gsiH6SOBE8QOWFxZRDLog+qvr2EJAbXCpoojc7YG4ZKokrAjlvnHIL+wuP
PNRYJx1dQf7oFqiFZBYR+BmHQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNc/2ztw
VyihFjXWFqwoIma0b4MlMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNTMyMDAzMTRG
ODQ0MTFGMEE4MzVCRkJBM0U2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnmUYwDQYJKoZIhvcNAQELBQADggEBAIoUecAiJoO+Owgh
DFUnmI8mCG/HRWbWqaiIEVeP/jc3tJBt0K9/0QUa4A57fKnURxDCT2Cnd+eWw+jZ
1qX8NbMCVyuSmlznCJGY93538p0o5OiuDf+QyYb5rTEBM19+U17+/ypW7Wd4z5BN
7lSNnLcV7/njeAloTSgkmKHaOgV9XkPyFrbeVhszobGk8UwSwDP7vr6ds+JK7edG
DeMxEcPWHQDN09BlzDrhQrNoWq3mvqW05hIHJLspSrZs8dsSwhmUgT9BDIRVHWR0
aAniV3KsVdHXdGZlibY4qI6v0vibnYvlywgg+VzGbQ4Z2n9wpNEtpqymV+9S+jmy
7ukLSEU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:26:22 2026 by rpki-client