This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/873831CC8A7E11EC8FD93687C4F9AE02.roa
File:                     873831CC8A7E11EC8FD93687C4F9AE02.roa (raw, json)
Hash identifier:          8KO+Q9P6KHzj4wwuvlI7pw98DEKqP2cBSu5Rme0si3s=
Subject key identifier:   DA:E8:02:7B:35:5B:23:53:F3:04:2D:0E:40:03:3F:33:27:27:8C:A6
Certificate issuer:       /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58
Certificate serial:       0453
Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/873831CC8A7E11EC8FD93687C4F9AE02.roa
Signing time:             Wed 11 Feb 2026 00:20:30 +0000
ROA not before:           Wed 11 Feb 2026 00:20:30 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.180.30.0/24 maxlen: 24
                          2001:df0:5640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl
                          rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Feb 2026 23:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58
        Validity
            Not Before: Feb 11 00:20:30 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698bcb4d-6ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:27:16:f2:27:73:72:3e:dd:d5:ec:05:99:
                    03:66:92:0c:62:7f:bb:05:9b:ab:64:bc:c0:e6:a6:
                    bb:77:0b:bd:80:60:b1:63:dd:c3:4c:79:fe:09:af:
                    b1:0e:1e:d6:3a:39:64:f3:9e:a2:03:48:c6:83:b5:
                    17:a1:7d:77:ef:a9:4f:89:13:62:7d:e8:2c:16:f1:
                    0f:cd:ca:bc:97:00:38:d8:9d:5d:26:cd:ea:9d:3f:
                    30:a8:fb:60:66:85:c0:36:81:bb:10:6f:b9:fa:79:
                    10:be:99:f3:bb:66:f5:82:c7:62:40:2c:45:84:8a:
                    fc:de:33:61:c8:df:44:97:bb:4d:7f:24:45:bb:f7:
                    c0:04:b7:9f:c4:3c:29:32:70:fd:d9:2d:fd:b6:09:
                    42:c1:1b:2c:ba:39:4b:1c:7e:4e:c3:b5:a3:c1:8b:
                    69:14:24:7e:02:1c:c3:d6:7f:c9:67:2c:98:3d:13:
                    25:b3:08:c4:78:d6:8a:00:a9:12:b3:f4:98:12:ac:
                    8c:38:0a:84:e7:00:80:1e:1b:40:e5:7f:6e:94:d0:
                    88:4e:10:28:9f:34:93:93:0b:3a:95:c4:fc:84:79:
                    8f:b5:85:3e:38:3a:b5:c1:9c:eb:f4:8c:cc:f1:1d:
                    76:07:84:eb:4c:01:00:0e:75:7c:01:8b:0b:2c:48:
                    03:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E8:02:7B:35:5B:23:53:F3:04:2D:0E:40:03:3F:33:27:27:8C:A6
            X509v3 Authority Key Identifier:
                keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/873831CC8A7E11EC8FD93687C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.30.0/24
                IPv6:
                  2001:df0:5640::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:28:84:da:8f:3d:6c:0d:1c:64:c4:78:4d:6d:c4:b2:45:64:
         f6:55:31:8b:36:a4:cc:ac:1d:6a:5c:b6:58:3c:de:1e:8e:41:
         14:e2:65:6d:4f:dc:f6:08:0e:b0:0f:49:c1:50:3d:13:a7:b4:
         c0:e4:50:94:4c:a3:ba:27:e7:33:8a:e0:88:21:b6:20:3f:cc:
         42:1c:61:b1:d6:69:1b:4f:ca:4e:34:8d:df:39:8e:11:f3:c5:
         de:4b:56:fe:70:ea:03:71:71:4f:87:87:fa:12:6c:11:cf:b4:
         c8:96:20:7f:57:93:6c:cd:02:71:67:9f:3c:67:7c:60:19:5a:
         b9:cb:70:3c:f0:3a:41:ae:10:7e:98:63:9c:de:4a:b5:8c:24:
         84:69:48:64:a6:8b:25:25:14:a9:18:60:31:e7:28:8b:90:ce:
         92:bc:e1:14:18:63:12:c3:70:41:be:44:6d:bf:a6:67:47:72:
         85:d5:71:9e:a8:18:78:99:d6:a0:3a:d5:eb:e9:14:85:a9:36:
         61:da:e6:9f:a6:3b:17:22:45:8a:33:54:06:6d:b4:0b:a5:bc:
         84:7c:a9:23:8f:a2:fc:bc:16:89:5c:5d:2c:cb:dc:9f:08:dd:
         66:1d:d7:53:66:3a:fd:c9:d6:8e:e5:1e:21:4e:32:ee:80:bc:
         73:68:9d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 06:41:18 2026 by rpki-client