This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9F88C3542ADF11F0B3006D40C4F9AE02.roa
File:                     9F88C3542ADF11F0B3006D40C4F9AE02.roa (raw, json)
Hash identifier:          MCYapqJJn25HSBUdIU2//eLRRdVWTHyVws8goqwfwG8=
Subject key identifier:   B6:83:53:38:71:90:40:07:50:01:42:33:3E:77:99:50:4F:1C:06:F7
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       03F3
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9F88C3542ADF11F0B3006D40C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 23:16:04 +0000
ROA not before:           Sat 08 Nov 2025 23:16:04 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     151983
IP address blocks:        103.172.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1011 (0x3f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: Nov  8 23:16:04 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=690fcf33-01fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:92:0b:87:ef:4c:87:8a:63:1a:67:c3:1f:
                    a9:fc:6a:c5:f0:1f:49:77:94:ef:23:bb:d4:0d:34:
                    44:7d:ed:82:e0:08:72:5d:36:de:8b:0c:8d:94:a3:
                    ae:8a:7a:a1:77:c7:ff:0c:af:8c:23:04:e4:aa:7f:
                    00:20:8e:1d:93:b5:32:ef:64:95:7a:71:54:f0:f4:
                    bc:1b:64:e4:2c:1d:84:1f:a6:55:64:13:1d:91:3f:
                    60:43:7a:84:fc:7e:14:ce:c2:19:e6:e3:2f:13:2a:
                    34:d2:d8:22:4d:b9:c5:f3:30:82:21:d8:87:6b:af:
                    30:90:01:75:4c:ba:bf:88:12:07:78:cc:37:89:ad:
                    bc:88:6f:dd:bf:87:11:cd:4a:5b:74:41:c2:99:9c:
                    3d:e6:95:11:52:bf:b5:42:15:cb:93:9c:67:b1:86:
                    9d:78:96:ae:0e:9e:ed:28:13:9e:c0:6f:b2:2c:ef:
                    6a:c6:c1:c8:71:be:c9:fa:e3:e5:2c:d4:01:2a:a3:
                    a5:7d:a0:99:a4:19:7d:00:c8:b9:e8:a8:19:59:9d:
                    5d:63:f8:69:89:90:8a:31:16:02:2c:63:ba:d2:95:
                    8d:05:dd:fb:f9:af:61:15:f6:f1:0b:70:0b:b0:ac:
                    85:87:76:27:7a:75:7a:7a:16:67:5f:fe:03:bf:32:
                    83:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:83:53:38:71:90:40:07:50:01:42:33:3E:77:99:50:4F:1C:06:F7
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/9F88C3542ADF11F0B3006D40C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:1e:13:6e:b2:c1:4e:03:63:f6:a0:be:db:73:57:c6:43:f7:
         fe:cf:16:41:b0:45:46:04:35:53:2c:82:a8:ad:0c:6f:0f:14:
         66:38:b9:b1:49:0a:61:92:0c:d6:fe:25:82:19:8b:09:62:a8:
         08:4b:37:b9:f9:39:20:7c:a7:0b:21:fd:27:75:9f:d8:2d:03:
         86:c7:99:c0:df:fd:e5:b6:f5:ce:ee:05:c6:be:8b:c0:2b:08:
         ca:74:41:2c:12:41:65:7d:69:6c:2b:b4:fa:e3:93:f5:e5:77:
         a0:8e:3a:13:79:dd:34:8a:29:89:20:bc:c5:20:a0:ae:b7:c3:
         94:d5:8c:9b:4c:f5:40:db:03:4d:ca:2d:d0:09:83:2f:59:3c:
         b4:d9:d1:1e:ef:5e:e2:7f:ee:6f:ff:c7:a2:aa:01:14:b1:ac:
         90:9c:35:ac:61:cf:0b:1d:bc:5c:61:65:67:df:02:04:0b:26:
         73:58:33:e7:76:c9:0b:f4:6d:32:70:30:af:5e:4b:5b:d9:0c:
         0e:f8:e1:79:e8:49:4e:87:79:26:e1:38:50:e4:7d:3a:35:e2:
         68:0b:a3:41:b5:b5:4e:43:de:1a:0d:88:4e:fc:f9:03:39:7d:
         10:6b:a2:eb:d8:6c:4c:33:d4:27:79:f4:c9:cf:28:96:3a:f7:
         b1:92:5a:1d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc3NzExMTAvBgNVBAUTKDMwQzU4MkI2Nzk5MjUyQkFBQzNCMzgxQUJBNENDMzM3
QUJGOTdERTMwHhcNMjUxMTA4MjMxNjA0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTBmY2YzMy0wMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsgWSC4fvTIeKYxpnwx+p/GrF8B9Jd5TvI7vUDTREfe2C4AhyXTbeiwyNlKOu
inqhd8f/DK+MIwTkqn8AII4dk7Uy72SVenFU8PS8G2TkLB2EH6ZVZBMdkT9gQ3qE
/H4UzsIZ5uMvEyo00tgiTbnF8zCCIdiHa68wkAF1TLq/iBIHeMw3ia28iG/dv4cR
zUpbdEHCmZw95pURUr+1QhXLk5xnsYadeJauDp7tKBOewG+yLO9qxsHIcb7J+uPl
LNQBKqOlfaCZpBl9AMi56KgZWZ1dY/hpiZCKMRYCLGO60pWNBd37+a9hFfbxC3AL
sKyFh3YnenV6ehZnX/4DvzKD5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLaDUzhx
kEAHUAFCMz53mVBPHAb3MB8GA1UdIwQYMBaAFDDFgrZ5klK6rDs4GrpMwzer+X3j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc3MS81NUYyRjBGRUIx
N0QxMUVDQjk3MzYyNDFDNEY5QUUwMi9NTVdDdG5tU1VycXNPemdhdWt6RE42djVm
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01NV0N0bm1TVXJxc096Z2F1a3pETjZ2NWZlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDc3NzEvNTVGMkYwRkVCMTdEMTFFQ0I5NzM2MjQxQzRGOUFFMDIvOUY4OEMzNTQy
QURGMTFGMEIzMDA2RDQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnrKcwDQYJKoZIhvcNAQELBQADggEBACkeE26ywU4DY/ag
vttzV8ZD9/7PFkGwRUYENVMsgqitDG8PFGY4ubFJCmGSDNb+JYIZiwliqAhLN7n5
OSB8pwsh/Sd1n9gtA4bHmcDf/eW29c7uBca+i8ArCMp0QSwSQWV9aWwrtPrjk/Xl
d6COOhN53TSKKYkgvMUgoK63w5TVjJtM9UDbA03KLdAJgy9ZPLTZ0R7vXuJ/7m//
x6KqARSxrJCcNaxhzwsdvFxhZWffAgQLJnNYM+d2yQv0bTJwMK9eS1vZDA744Xno
SU6HeSbhOFDkfTo14mgLo0G1tU5D3hoNiE78+QM5fRBrouvYbEwz1Cd59MnPKJY6
97GSWh0=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:56:29 2025 by rpki-client