This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/97F41C10818811F0AE59F81AC4F9AE02.roa
File:                     97F41C10818811F0AE59F81AC4F9AE02.roa (raw, json)
Hash identifier:          2zsEA3yDI1cCdtbUgMxFXhTvbjlM5hAGTHb5uzRp4IY=
Subject key identifier:   E0:8D:C1:32:E8:45:06:DB:E8:95:B6:D4:19:55:3F:DC:D1:53:06:A4
Certificate issuer:       /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial:       0450
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/97F41C10818811F0AE59F81AC4F9AE02.roa
Signing time:             Thu 08 Jan 2026 05:54:47 +0000
ROA not before:           Thu 08 Jan 2026 05:54:47 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     9232
IP address blocks:        103.151.228.0/24 maxlen: 24
                          103.151.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104 (0x450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
        Validity
            Not Before: Jan  8 05:54:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=695f46a7-d788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:49:b9:26:c8:3b:27:c3:9c:d0:5e:b5:37:
                    48:93:79:3b:6b:70:5e:49:2e:27:83:43:d3:28:a0:
                    2e:3c:10:e1:05:cb:1a:5d:ae:81:a8:1c:ac:4c:12:
                    1b:e3:cf:d1:24:7e:d0:17:ed:17:d0:4e:59:1d:5f:
                    8f:4b:22:ce:06:50:49:a2:7c:b5:f0:57:cc:46:61:
                    c9:13:c9:2d:f7:3b:8f:7b:90:bf:ae:8b:60:0e:bc:
                    91:4a:c6:48:df:1f:28:93:62:17:3c:22:bb:c5:0c:
                    14:f3:ed:c3:6c:70:77:bb:95:33:01:5c:78:6e:08:
                    e1:e0:ef:ac:6c:38:87:b3:cd:88:de:92:97:29:7a:
                    d0:62:b0:54:01:63:76:e1:63:42:cb:5b:be:76:d9:
                    72:3d:86:4e:06:c8:36:7e:77:21:b4:bb:69:c8:0b:
                    48:5e:ad:8a:aa:93:b7:8f:11:ac:95:d1:3a:15:10:
                    4c:99:38:e6:0c:73:2b:c0:fb:01:22:b3:7c:2a:ad:
                    08:18:be:7f:13:02:85:89:05:63:1d:0a:05:c3:41:
                    47:f3:48:3d:44:57:81:55:1c:5d:20:b8:e3:be:ad:
                    52:98:e4:e8:1d:eb:5f:ad:cb:ce:5d:d1:39:f2:be:
                    f3:a0:9e:a7:02:20:a7:62:82:7e:7f:85:4d:0d:66:
                    25:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8D:C1:32:E8:45:06:DB:E8:95:B6:D4:19:55:3F:DC:D1:53:06:A4
            X509v3 Authority Key Identifier:
                keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/97F41C10818811F0AE59F81AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:1d:ad:85:ed:7d:4f:6e:27:63:ec:59:61:19:e2:de:a7:62:
         5f:5b:c4:08:17:3d:45:7b:42:18:55:34:aa:0b:60:34:c9:03:
         09:68:1b:a9:9e:f4:92:e9:c0:76:2f:d6:30:e6:6f:d0:24:b5:
         92:39:88:57:44:dc:84:b4:57:8d:48:57:31:00:95:d7:8b:47:
         d1:15:de:e7:bf:d5:e3:ef:36:de:c6:e1:72:24:7c:95:ab:b9:
         b2:cb:12:81:e0:c7:8c:b0:81:53:22:d3:4a:c2:a5:30:54:a6:
         7c:87:be:e0:06:76:79:0a:04:39:bc:3d:ae:41:58:15:e0:66:
         46:d4:49:6b:2a:2d:14:2c:a7:51:52:a9:e3:db:ec:f9:87:dd:
         a6:fe:11:ae:e2:ca:8a:79:aa:e0:e0:af:c7:90:d5:c9:d5:38:
         69:bb:04:25:e0:56:26:a1:b7:10:44:8a:1b:4f:fa:62:01:27:
         5e:1e:0f:b5:94:5c:c6:2e:dc:b6:ee:16:b6:bb:2a:e5:9d:d2:
         0b:da:1a:15:97:66:a1:27:b8:08:f6:ae:95:47:b2:d6:39:c3:
         5a:89:ed:38:87:cd:3c:17:a7:f8:b0:76:ea:a5:ec:fa:2b:e2:
         12:6f:c7:0c:0c:88:95:24:09:14:04:92:ff:bf:ba:9e:71:7c:
         d0:3a:63:bb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC
NDc1QzdCOUEwHhcNMjYwMTA4MDU1NDQ3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTVmNDZhNy1kNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl0hJuSbIOyfDnNBetTdIk3k7a3BeSS4ng0PTKKAuPBDhBcsaXa6BqBysTBIb
48/RJH7QF+0X0E5ZHV+PSyLOBlBJony18FfMRmHJE8kt9zuPe5C/rotgDryRSsZI
3x8ok2IXPCK7xQwU8+3DbHB3u5UzAVx4bgjh4O+sbDiHs82I3pKXKXrQYrBUAWN2
4WNCy1u+dtlyPYZOBsg2fnchtLtpyAtIXq2KqpO3jxGsldE6FRBMmTjmDHMrwPsB
IrN8Kq0IGL5/EwKFiQVjHQoFw0FH80g9RFeBVRxdILjjvq1SmOToHetfrcvOXdE5
8r7zoJ6nAiCnYoJ+f4VNDWYltwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOCNwTLo
RQbb6JW21BlVP9zRUwakMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4
M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkRDRjEvRUI1OTExMjJBODNDMTFFQ0EzQTRGMzI1QzRGOUFFMDIvOTdGNDFDMTA4
MTg4MTFGMEFFNTlGODFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnl+QwDQYJKoZIhvcNAQELBQADggEBADUdrYXtfU9uJ2Ps
WWEZ4t6nYl9bxAgXPUV7QhhVNKoLYDTJAwloG6me9JLpwHYv1jDmb9AktZI5iFdE
3IS0V41IVzEAldeLR9EV3ue/1ePvNt7G4XIkfJWrubLLEoHgx4ywgVMi00rCpTBU
pnyHvuAGdnkKBDm8Pa5BWBXgZkbUSWsqLRQsp1FSqePb7PmH3ab+Ea7iyop5quDg
r8eQ1cnVOGm7BCXgViahtxBEihtP+mIBJ14eD7WUXMYu3LbuFra7KuWd0gvaGhWX
ZqEnuAj2rpVHstY5w1qJ7TiHzTwXp/iwduql7Por4hJvxwwMiJUkCRQEkv+/up5x
fNA6Y7s=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:55:36 2026 by rpki-client