This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/53B4619407CB11F19B0357131B3D8C67.roa
File:                     53B4619407CB11F19B0357131B3D8C67.roa (raw, json)
Hash identifier:          cDpOxJyGcDUZfsLfbeDDvwlG60DFBR0tHk2S0DKukZs=
Subject key identifier:   BD:69:1C:76:24:52:6C:49:68:F4:DC:2A:BE:8E:ED:CF:64:73:11:FE
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       0589
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/53B4619407CB11F19B0357131B3D8C67.roa
Signing time:             Thu 12 Feb 2026 04:28:49 +0000
ROA not before:           Thu 12 Feb 2026 04:28:49 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.73.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Feb 2026 22:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417 (0x589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: Feb 12 04:28:49 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=698d5701-1c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:74:a7:9a:c9:66:cd:af:ee:ad:d7:15:cf:
                    b3:07:22:9d:bb:2f:3e:45:8e:c6:06:2d:18:6a:cf:
                    1c:51:23:93:0f:15:48:f0:14:06:0e:b5:71:9c:19:
                    f1:c7:c1:8c:37:20:92:79:df:83:26:ed:bd:1a:f9:
                    a2:fe:68:6c:e0:5a:4e:b9:19:b4:85:09:0e:ff:be:
                    db:58:5c:25:0e:78:51:6a:4e:be:fe:f6:33:44:df:
                    c6:df:bd:72:14:ce:99:10:04:c4:2d:3a:df:c3:6a:
                    52:84:0c:f0:66:57:71:b6:9c:72:b3:7d:71:95:ea:
                    2c:4e:94:ea:2f:7f:ea:82:08:a5:49:58:c4:26:8e:
                    7d:ce:e4:32:e7:73:39:1d:74:79:ab:98:bd:9b:e7:
                    32:e0:85:f8:1a:2e:4e:8f:96:2b:7a:ab:97:c8:85:
                    fd:04:37:ea:6c:82:e2:3d:31:a2:b4:7b:b1:52:c1:
                    20:ff:85:57:05:1d:a9:19:e9:c2:0b:c4:ec:9d:8c:
                    47:f7:a7:08:cc:2c:f9:0e:9e:48:ee:9e:a2:fd:6c:
                    8c:7e:4a:31:e5:9d:02:88:fb:12:fc:61:07:a0:9e:
                    5c:48:14:37:26:d2:78:a6:b3:dd:29:b9:68:d4:82:
                    66:e2:31:23:db:fc:10:80:24:f0:3a:9a:71:c7:f2:
                    75:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:69:1C:76:24:52:6C:49:68:F4:DC:2A:BE:8E:ED:CF:64:73:11:FE
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/53B4619407CB11F19B0357131B3D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:17:e5:b0:5c:dd:de:a2:4a:6e:72:31:7b:cd:18:43:20:12:
         7d:49:2d:ca:68:04:71:f2:34:e7:dc:a8:2e:07:85:a2:89:80:
         64:1d:bf:bc:95:c3:9d:0b:15:19:16:ef:94:61:24:bc:81:53:
         e5:be:c7:d6:8c:8b:2a:e7:75:21:ef:12:16:8a:48:0f:ce:b7:
         2c:a4:8e:c1:ae:3a:33:24:18:3a:d5:59:bb:68:5e:ff:76:1e:
         5d:38:74:dc:95:c5:03:27:0f:6f:92:b7:57:57:7d:80:fc:00:
         aa:7e:b6:35:9d:10:32:b9:1c:bc:62:bd:a6:ff:cf:9f:0e:88:
         78:95:3c:7e:6d:f4:8e:02:a5:b6:6a:c7:02:1a:57:15:19:7f:
         23:bb:45:3a:42:dd:fe:d1:d5:4d:76:21:46:7b:ff:34:f2:64:
         71:ce:a8:db:1c:cc:0d:5b:8c:5b:24:2d:2d:70:82:43:60:a8:
         26:a6:99:d1:6f:1a:35:1b:1f:28:82:be:c4:06:ca:8f:ad:12:
         52:3f:28:db:e2:5d:a0:5d:e6:94:7a:a0:e6:83:25:4c:3c:7b:
         12:ad:6a:0a:e8:f8:54:8c:76:a5:5b:76:7a:d1:27:55:03:3c:
         1c:0e:07:fe:2a:c6:b8:04:d0:2f:8c:06:51:d4:64:15:68:a5:
         5a:90:67:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:31 2026 by rpki-client