This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/511564A2ED2B11F08C401BDD456F56BC.roa
File:                     511564A2ED2B11F08C401BDD456F56BC.roa (raw, json)
Hash identifier:          AVbE1i7Oy7wljsn75aLM04CYS65KFNSXwAhksX6zM28=
Subject key identifier:   CA:27:CD:D2:B9:8D:4C:77:21:D4:DD:6B:42:97:D0:11:EA:35:A9:82
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       01E9
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/511564A2ED2B11F08C401BDD456F56BC.roa
Signing time:             Fri 09 Jan 2026 07:17:55 +0000
ROA not before:           Fri 09 Jan 2026 07:17:55 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     148996
IP address blocks:        103.141.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 02:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Jan  9 07:17:55 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6960aba3-318b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:94:5a:73:86:a2:f8:ea:e1:bf:b7:77:a0:
                    36:13:04:c6:9d:c8:10:c1:39:93:04:70:e5:b3:7a:
                    6b:be:85:03:f0:00:69:ac:9e:02:09:bc:c1:27:b1:
                    e3:67:08:55:96:f8:de:15:5c:d7:ca:c4:b9:c1:c5:
                    5e:79:cd:3a:0d:f1:2d:53:99:6b:1c:20:36:a9:a5:
                    ef:be:23:e1:a6:8e:d2:84:b0:10:c6:9a:6a:f2:cd:
                    0f:5b:43:8c:c7:5e:fb:01:a3:a0:3e:25:a7:ef:91:
                    95:9d:f6:c6:0b:3c:7b:3c:49:4b:34:b9:ed:d0:f8:
                    77:ad:5f:6d:11:53:60:c5:1b:f9:3a:ee:df:de:b3:
                    6a:02:b8:95:b4:ab:0b:4f:78:7c:3a:6b:50:a7:33:
                    e0:1c:40:05:44:03:0f:1c:e4:3b:1d:e0:c8:23:aa:
                    58:6a:81:20:36:cb:c9:e8:de:5d:41:85:4b:a8:f8:
                    3a:42:46:dc:ff:08:65:fc:76:21:4d:88:51:0a:e7:
                    46:d1:6d:23:f3:55:a5:a5:33:04:a9:51:99:83:71:
                    21:2b:d0:fc:d8:db:ee:49:34:a6:b0:6e:ae:43:1c:
                    0d:b7:3a:3b:25:4d:d0:c0:6d:1f:52:c7:3a:00:6f:
                    27:be:b5:93:39:35:58:90:88:58:2f:f0:c7:4f:4e:
                    83:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:27:CD:D2:B9:8D:4C:77:21:D4:DD:6B:42:97:D0:11:EA:35:A9:82
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/511564A2ED2B11F08C401BDD456F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:96:71:97:dd:ab:92:38:65:81:ad:44:3c:10:bb:28:82:12:
         d9:15:fe:86:ec:8e:46:f0:1f:a9:85:40:ac:5e:d5:d1:3b:26:
         55:3a:8f:9c:8a:1c:15:03:8d:fd:f4:a9:dc:a3:29:70:c0:86:
         75:ff:49:55:b5:f1:ce:3f:63:86:d2:8d:81:8c:d5:7a:e4:1e:
         f7:1f:1f:b0:95:83:af:29:23:3c:91:fb:7e:74:c9:58:9f:65:
         31:12:e3:02:7c:54:36:35:86:87:04:20:3f:3b:b7:b3:02:bf:
         07:83:3f:0a:25:65:13:ac:b4:ee:f7:33:f7:7b:c9:7e:8a:0d:
         c6:e5:07:c2:8b:1b:86:33:2a:39:7e:f3:b0:9a:36:8e:44:00:
         1b:d7:b1:55:b8:be:b4:f2:ff:96:2b:39:24:48:f4:78:ba:c4:
         89:53:09:b4:fa:7c:f9:11:5b:f9:2a:1b:db:cf:0b:5b:d0:69:
         d1:a5:cc:21:af:d0:16:f9:c6:8e:2c:9e:b4:1a:3f:3a:47:6e:
         dc:2f:9f:21:d8:23:0c:5b:91:fc:eb:4e:64:5c:5a:01:2e:e8:
         52:9e:3c:85:bd:ed:62:b6:c1:bf:6b:9e:4d:38:34:dc:81:7c:
         a0:69:cb:c2:1f:e9:86:31:e3:50:07:82:51:b8:43:bd:b8:a8:
         9a:6c:56:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 21:16:51 2026 by rpki-client