This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/23278196817011F08F821330C4F9AE02.roa
File:                     23278196817011F08F821330C4F9AE02.roa (raw, json)
Hash identifier:          F9/4OGEn9US48P4qHII/S/4zdZD+P05LdTXcqrJwqCc=
Subject key identifier:   3D:35:FC:52:8A:69:45:FD:F5:CC:59:3A:46:E4:C7:AB:06:02:F0:97
Certificate issuer:       /CN=A91764C1/serialNumber=E7B98725E10E70EAF4ED44CB8D9CFC2ED0277482
Certificate serial:       43
Authority key identifier: E7:B9:87:25:E1:0E:70:EA:F4:ED:44:CB:8D:9C:FC:2E:D0:27:74:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/23278196817011F08F821330C4F9AE02.roa
Signing time:             Sat 27 Dec 2025 06:25:39 +0000
ROA not before:           Sat 27 Dec 2025 06:25:39 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149014
IP address blocks:        103.160.50.0/23 maxlen: 23
                          103.160.50.0/24 maxlen: 24
                          103.160.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.crl
                          rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 06:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764C1, serialNumber=E7B98725E10E70EAF4ED44CB8D9CFC2ED0277482
        Validity
            Not Before: Dec 27 06:25:39 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=694f7be3-b954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:02:b9:e4:dc:4e:1e:e5:9d:5f:31:7e:0a:
                    95:0c:e0:0f:1c:94:b8:41:db:51:52:3f:da:d9:7b:
                    fb:ab:58:98:8c:a7:5e:45:2c:c5:fa:5b:92:51:65:
                    7d:3a:3b:6d:84:f9:34:16:61:4d:97:5d:70:61:fa:
                    85:e1:59:9c:e2:0d:12:0a:c5:b2:46:c7:bf:00:41:
                    22:44:4c:1a:28:cd:63:b5:8d:00:d8:a4:fb:fd:0d:
                    2c:ac:d7:28:ea:19:a0:9e:5e:f2:d8:41:9c:32:3a:
                    33:29:8f:cc:33:85:d0:42:1c:8e:13:0c:e7:b3:e4:
                    0d:47:4e:21:26:a1:69:57:a2:f9:27:33:a2:9a:a9:
                    34:02:0c:20:44:b4:fe:03:b4:9f:c4:54:66:d6:2d:
                    d6:ae:36:14:38:3e:fb:06:8e:2e:e1:87:77:1a:ba:
                    dc:96:ef:78:38:78:bb:92:b3:6f:22:9f:b1:99:c9:
                    6a:91:b4:98:2e:3d:c6:83:5b:ba:b7:f5:46:7f:8d:
                    ff:1f:cd:c1:e9:08:2c:29:51:2e:a4:05:20:36:4a:
                    a4:f1:fb:8e:ca:af:b0:a8:8f:e1:96:20:87:24:e7:
                    c9:58:8d:08:a4:e7:43:65:c2:12:b2:17:e7:db:3c:
                    9f:e5:ff:97:50:3a:99:24:2c:dc:1f:19:70:17:ae:
                    1e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:35:FC:52:8A:69:45:FD:F5:CC:59:3A:46:E4:C7:AB:06:02:F0:97
            X509v3 Authority Key Identifier:
                keyid:E7:B9:87:25:E1:0E:70:EA:F4:ED:44:CB:8D:9C:FC:2E:D0:27:74:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/23278196817011F08F821330C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:78:5e:cb:57:ba:79:3b:02:5c:c7:78:30:ff:e9:c3:a2:a9:
         96:81:71:57:ad:f4:a5:fd:d0:d9:11:43:c6:40:52:8a:48:6b:
         de:dc:78:33:ec:78:74:79:7a:d4:05:5e:81:a7:16:53:9e:5b:
         de:f4:68:79:a8:d7:36:0c:20:f5:1b:3a:ea:c5:7c:10:19:c9:
         d3:d1:44:bf:2b:e4:d4:b6:a5:23:fa:ad:27:0a:b3:e8:b9:23:
         7f:7d:ab:6c:57:4c:a8:db:f0:0d:bc:c5:6d:e0:37:da:f7:40:
         85:67:6f:09:8e:0b:95:35:c1:b0:6e:b2:1e:bb:be:d9:cf:7d:
         00:73:55:de:f7:29:16:c0:42:1a:c1:a4:22:b5:f1:ed:c3:ca:
         c7:12:a9:32:28:7d:27:57:63:ec:6e:6f:6a:c3:34:94:fc:53:
         88:c0:78:23:9b:ae:a1:f8:53:46:51:72:ab:2b:87:a2:25:ed:
         00:9d:65:6a:4b:69:d2:b5:11:c7:7c:a7:b9:b0:73:95:c6:2d:
         94:64:cf:f3:83:4f:96:cb:ca:f6:45:c6:18:d3:79:b0:4c:0c:
         db:7a:54:a1:63:0a:ba:31:4e:76:75:2d:ba:15:a6:73:75:02:
         0a:44:7e:45:1d:e4:56:9a:02:84:8b:b3:c7:2c:9a:01:c7:65:
         a4:0d:7c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 06:06:36 2026 by rpki-client