This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/23A61F1A817011F08F821330C4F9AE02.roa
File:                     23A61F1A817011F08F821330C4F9AE02.roa (raw, json)
Hash identifier:          U0zcILo7LW87hFasmAY538ZZ+Iytg5ds2h/XudxVNXE=
Subject key identifier:   9C:81:D7:A0:81:58:8B:91:67:0A:E9:A5:DF:8F:CA:71:A2:58:40:48
Certificate issuer:       /CN=A91764C1/serialNumber=E7B98725E10E70EAF4ED44CB8D9CFC2ED0277482
Certificate serial:       44
Authority key identifier: E7:B9:87:25:E1:0E:70:EA:F4:ED:44:CB:8D:9C:FC:2E:D0:27:74:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/23A61F1A817011F08F821330C4F9AE02.roa
Signing time:             Sat 27 Dec 2025 06:25:41 +0000
ROA not before:           Sat 27 Dec 2025 06:25:41 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150706
IP address blocks:        103.160.50.0/23 maxlen: 23
                          103.160.50.0/24 maxlen: 24
                          103.160.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.crl
                          rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 06:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764C1, serialNumber=E7B98725E10E70EAF4ED44CB8D9CFC2ED0277482
        Validity
            Not Before: Dec 27 06:25:41 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=694f7be5-ef70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:4b:8b:0f:5c:60:6b:84:8f:14:28:25:93:
                    50:9c:12:e7:7e:ea:9f:f3:f5:5a:62:71:55:fd:9f:
                    d6:5e:7c:ad:c4:2f:4b:4e:20:d4:25:bc:b2:4a:65:
                    bc:30:ea:d4:32:92:72:0b:5c:2e:76:13:43:59:ba:
                    9f:ca:1b:e2:0b:1f:92:35:92:bb:b8:2b:76:cc:4a:
                    a4:e1:bc:e5:0f:5b:d0:31:41:66:ab:29:5e:66:a4:
                    03:e1:da:60:d7:76:b7:2e:0b:dd:89:bd:68:76:d1:
                    ce:6e:42:f7:53:d7:ff:c5:5e:35:19:2b:df:f5:13:
                    bd:08:41:01:32:93:fe:e9:96:c3:5a:7f:73:3a:01:
                    65:e7:5c:f6:24:ce:88:18:cd:8a:e1:42:ff:b4:2f:
                    24:d0:72:42:57:97:1b:17:e6:e2:52:24:06:16:f3:
                    d1:6e:35:3d:cb:f9:06:bd:68:f0:f4:3b:77:e5:2d:
                    3e:39:97:60:d6:5c:2f:f4:90:a6:45:0c:94:90:b6:
                    5c:73:49:d3:5a:32:c6:b2:ba:82:5c:14:53:33:36:
                    5b:1d:26:24:09:04:8c:6c:96:67:31:28:10:43:20:
                    9a:8a:94:e2:7b:2b:5f:24:5e:bf:fe:79:0c:db:6c:
                    0d:11:ff:46:58:04:74:cf:f0:03:b0:01:d3:10:1a:
                    90:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:81:D7:A0:81:58:8B:91:67:0A:E9:A5:DF:8F:CA:71:A2:58:40:48
            X509v3 Authority Key Identifier:
                keyid:E7:B9:87:25:E1:0E:70:EA:F4:ED:44:CB:8D:9C:FC:2E:D0:27:74:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/57mHJeEOcOr07UTLjZz8LtAndII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57mHJeEOcOr07UTLjZz8LtAndII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764C1/74309178816F11F0B0A9432EC4F9AE02/23A61F1A817011F08F821330C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:3f:c4:3d:4a:4c:59:47:68:30:a1:c9:e2:b1:d6:dd:fa:42:
         fb:0f:6b:2b:92:c8:e6:35:b1:d8:e3:a5:4d:68:1f:cd:ea:1c:
         86:97:d6:eb:d3:a9:75:5d:5d:e7:25:6e:8d:cc:af:e6:6e:07:
         8b:12:59:1a:9b:19:62:4d:82:82:49:5f:e9:f2:76:e7:35:cd:
         fe:bb:86:f0:ff:ed:f6:55:51:42:2a:e4:a6:64:41:5e:00:0e:
         01:84:c5:48:ca:b2:98:f2:48:d0:7f:dd:49:48:c6:ba:ba:0e:
         bb:8b:24:c0:33:f7:97:d3:8f:4b:3d:4e:3d:ea:ff:49:b0:b4:
         2b:91:c8:42:8a:20:4e:ca:c1:d5:5e:41:70:86:09:76:34:ad:
         51:70:22:ef:07:ea:91:52:f9:27:a8:b2:8e:4d:f2:94:70:af:
         98:45:ff:8d:dd:d6:a5:17:0f:03:17:86:55:ff:fa:b4:ec:c8:
         19:ab:f7:62:4b:a8:ca:a1:9e:28:a3:32:c5:ea:03:ae:dd:f0:
         1f:53:5c:11:51:2c:a1:71:3d:0c:ff:49:3a:76:24:0e:86:c5:
         cb:cb:50:76:db:58:7f:a4:04:2f:58:3b:42:06:22:0f:3f:37:
         46:1b:f4:bd:8d:d5:e4:c5:48:64:9b:90:62:3f:00:c6:70:67:
         c8:0d:e4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 06:06:15 2026 by rpki-client