This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/3A3E36B6631811F089107C4AC4F9AE02.roa
File:                     3A3E36B6631811F089107C4AC4F9AE02.roa (raw, json)
Hash identifier:          o4sYy8DACcosKEOscD14T0NGuyOhoqxkHKs6D2ANTmg=
Subject key identifier:   BF:6E:27:55:EC:DB:3B:63:66:6E:C5:6D:6F:E9:06:33:50:F8:A2:B9
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       03F2
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/3A3E36B6631811F089107C4AC4F9AE02.roa
Signing time:             Sat 08 Nov 2025 23:16:03 +0000
ROA not before:           Sat 08 Nov 2025 23:16:03 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     142063
IP address blocks:        103.172.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010 (0x3f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: Nov  8 23:16:03 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=690fcf33-b625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:25:21:a0:7e:f8:4a:45:d3:da:d9:56:e1:27:
                    c6:fc:1e:0e:22:d2:3a:bf:44:1b:0e:0e:60:08:fe:
                    36:54:79:19:4e:f2:e4:43:41:e0:5d:55:b1:1e:af:
                    be:66:36:f6:09:b6:93:da:94:bf:d2:59:76:be:27:
                    49:25:2c:64:f9:dd:c3:46:1d:22:66:c1:86:9a:05:
                    57:ab:f3:87:68:77:69:07:1f:e6:0d:a4:9b:d5:9d:
                    4a:3c:e0:18:b6:bb:65:33:45:20:41:f0:ed:66:ed:
                    55:5f:0a:53:fb:71:f3:76:20:80:24:0e:c0:5f:28:
                    3d:f5:37:8e:51:a2:76:01:fa:bc:09:b3:6d:ce:d3:
                    32:65:83:f3:d2:52:c1:80:23:6c:70:83:be:fb:30:
                    fd:8a:d9:1e:b1:38:0b:4f:46:f2:29:d0:e0:4e:15:
                    11:aa:ce:fa:cb:91:68:50:8a:db:06:38:eb:14:50:
                    8e:54:ae:b9:56:49:51:92:00:66:ae:1a:0e:6a:35:
                    e6:9a:db:b0:89:af:96:7d:31:f2:de:0a:3a:39:12:
                    e7:76:95:55:67:53:2a:1e:3c:7d:12:8d:e0:12:70:
                    f2:67:f3:72:a6:ee:b8:7e:fb:c2:c6:38:48:09:40:
                    7f:30:80:51:6a:46:48:32:22:d6:65:74:8b:03:9a:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6E:27:55:EC:DB:3B:63:66:6E:C5:6D:6F:E9:06:33:50:F8:A2:B9
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/3A3E36B6631811F089107C4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:96:f6:04:08:48:29:d3:cd:5f:01:22:0c:24:6d:8a:5c:c4:
         e6:64:7d:9e:ab:f7:6e:2f:50:ce:64:ec:68:4a:e2:78:93:d7:
         1d:a1:2f:53:f8:a1:5d:90:b4:9f:0a:78:60:eb:c8:5e:c2:86:
         1c:51:29:e1:b4:f7:de:7d:de:f0:d1:e0:ef:44:bb:68:5f:c6:
         b7:09:df:dc:be:0f:d8:b5:c6:5c:ac:34:40:7b:fe:1a:13:be:
         43:b8:01:a7:8c:06:35:dd:5b:b4:d4:6f:22:6b:de:20:16:53:
         b3:29:c0:64:af:eb:43:31:bf:aa:ac:ab:6d:e4:da:33:ea:c1:
         f3:b0:72:ff:c6:e9:11:28:ad:55:d7:39:f1:c4:ee:b1:d1:c1:
         ff:3b:71:5f:52:1c:28:e4:d6:d0:c6:9e:6c:cc:72:14:08:2f:
         47:15:38:ab:10:af:c6:88:59:f1:b6:f1:ee:f7:32:3d:6e:38:
         e6:3e:72:ff:4b:33:3b:68:c2:c8:77:b3:16:e2:72:91:82:ca:
         f2:0a:93:a5:55:f4:23:62:97:88:bc:af:98:98:bd:54:32:ca:
         1c:96:11:39:54:73:0e:f5:7d:d0:c9:27:72:26:4d:46:55:37:
         47:84:f3:0d:18:b0:43:11:dc:d3:03:8c:83:08:83:6f:b3:23:
         24:68:b2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:34 2025 by rpki-client