This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/3D85B786EF7211F08C9974335B6F56BC.roa
File:                     3D85B786EF7211F08C9974335B6F56BC.roa (raw, json)
Hash identifier:          Jn6LUQTIm0Dpg1Ko7eo8YNgg7LbdkDyBWUmsJszAx7s=
Subject key identifier:   5E:19:E0:D4:62:B8:C3:7E:8F:5B:E5:66:80:B3:1B:E0:BA:BD:A0:4D
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       0575
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/3D85B786EF7211F08C9974335B6F56BC.roa
Signing time:             Mon 12 Jan 2026 04:50:39 +0000
ROA not before:           Mon 12 Jan 2026 04:50:39 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     152179
IP address blocks:        103.73.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 22:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1397 (0x575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: Jan 12 04:50:39 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69647d9e-0a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:de:31:ce:4d:bc:ce:48:cb:4a:b5:c5:47:
                    93:4f:87:d3:c7:54:3d:d5:bd:96:40:1b:db:6a:61:
                    3e:75:59:df:10:b1:e9:8f:3f:c0:33:1a:55:f3:96:
                    54:cc:30:06:e6:6f:df:fa:bc:62:02:0e:85:3d:f2:
                    59:cd:48:85:71:1e:c5:0f:52:20:4c:d7:d0:d8:cf:
                    02:9c:8c:51:a0:7a:61:d0:92:cb:f7:03:8d:86:e3:
                    4c:66:c4:31:8a:b2:cc:56:69:cd:02:33:58:0b:f2:
                    75:b5:27:27:41:b4:cb:2e:14:3f:25:ae:09:0d:66:
                    1d:92:cd:e2:2d:fe:96:8f:ce:80:26:9c:20:f9:63:
                    03:4e:b7:5f:c1:50:ff:90:3f:90:da:fc:c6:5b:c9:
                    31:ed:dc:d2:f8:83:be:bf:ac:9c:44:a3:08:36:7d:
                    a6:77:b7:b2:75:a7:47:11:de:3b:95:79:81:e1:8f:
                    c5:4c:6f:a3:9c:ac:b7:96:08:c6:9e:77:b0:83:eb:
                    ca:45:40:0d:95:80:df:8c:eb:5b:0f:cc:af:34:74:
                    da:3b:08:f9:0a:22:97:8c:d0:df:d7:dd:a7:6f:3f:
                    0a:fb:cf:50:0c:00:82:22:dd:8a:4a:d3:96:a3:9e:
                    ae:26:63:77:91:7b:d1:76:90:f1:9b:51:0f:01:44:
                    88:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:19:E0:D4:62:B8:C3:7E:8F:5B:E5:66:80:B3:1B:E0:BA:BD:A0:4D
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/3D85B786EF7211F08C9974335B6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:8f:93:6d:03:e3:71:97:dc:30:98:77:91:dc:03:2c:3c:09:
         3f:4d:2c:48:fe:1a:42:fc:ac:23:70:0c:60:b1:57:ad:60:5b:
         b8:85:b1:69:fd:63:2d:75:93:27:e6:08:51:02:1a:ef:44:56:
         64:70:fa:44:03:cb:27:53:47:ff:f9:62:89:da:13:13:b0:4a:
         a0:94:eb:f3:d1:6e:e1:6c:69:6c:2f:b7:42:62:02:d0:58:61:
         aa:13:8a:f7:be:c4:8a:91:be:f2:19:5d:33:2f:d1:b9:63:a3:
         61:69:77:a1:8a:42:ba:9e:5b:21:b8:2f:32:34:22:7f:6f:9e:
         52:b2:5e:79:81:6f:3a:04:62:3b:bd:d2:58:3b:46:3d:ba:00:
         37:22:93:cb:ad:99:06:ff:40:d5:77:24:7e:b7:4b:f4:af:f7:
         bf:4f:7c:bc:f5:33:c2:d8:9c:6e:ac:56:03:aa:7a:52:f4:f8:
         47:e8:00:3d:1a:c9:c1:29:17:64:ae:d2:99:49:52:86:3f:25:
         4c:f2:c3:9a:82:66:14:86:e4:dc:07:ca:c8:b1:e4:5c:21:5f:
         08:99:bb:79:b6:e5:6b:ce:1d:73:40:26:6a:c7:c1:e8:65:e6:
         b7:64:5b:41:76:e0:39:78:e9:eb:6b:81:0d:f8:d5:7b:df:a7:
         c1:1b:00:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:18:06 2026 by rpki-client