This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/A60006804EAE11EDBF0D8256C4F9AE02.roa
File:                     A60006804EAE11EDBF0D8256C4F9AE02.roa (raw, json)
Hash identifier:          3pXJQr7nPShAPAN+LVcC9TTkocAUC/oyN/9F1ZksrkI=
Subject key identifier:   C0:C3:F0:12:12:83:9E:B6:8C:76:70:68:78:0E:30:4F:00:BD:43:8E
Certificate issuer:       /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924
Certificate serial:       04A6
Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/A60006804EAE11EDBF0D8256C4F9AE02.roa
Signing time:             Mon 26 Jan 2026 23:19:52 +0000
ROA not before:           Mon 26 Jan 2026 23:19:52 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     58715
IP address blocks:        103.178.186.0/23 maxlen: 24
                          2001:df0:3c40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl
                          rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 23:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1190 (0x4a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABE54, serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924
        Validity
            Not Before: Jan 26 23:19:52 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6977f698-958e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:af:68:19:ba:b2:7d:eb:8d:34:c4:e1:54:38:
                    85:df:e1:c2:27:82:d1:78:a4:e2:92:23:c2:17:3e:
                    3a:69:ba:15:29:d8:28:8b:e7:e9:06:5b:47:23:a5:
                    20:fd:9b:3a:2c:b2:0b:ff:41:83:a7:65:f1:4d:42:
                    8d:1b:07:60:ea:cc:a1:26:e0:87:44:af:7e:1c:d1:
                    af:8d:4b:e6:6a:e1:79:1a:99:fe:f1:4b:32:7c:e5:
                    0e:f8:8b:76:6c:5f:4b:2b:9a:f9:36:40:92:3a:e9:
                    f3:c2:c4:a1:c1:c3:a2:12:65:8f:32:6b:a5:87:38:
                    bd:34:e1:51:7d:02:4c:4d:79:c6:3c:32:56:b7:15:
                    71:07:0f:b3:3d:cb:3c:fe:c8:0a:89:0e:4a:09:f0:
                    01:83:1d:55:4d:4a:b7:16:c7:fa:d1:dc:5b:50:d6:
                    de:4e:e6:92:3f:ed:90:a2:58:20:87:95:bf:5d:de:
                    d0:47:63:07:cb:a7:2e:eb:0e:2e:78:97:8a:28:82:
                    73:9f:c2:b4:83:c6:ac:8c:f3:51:9c:ae:4f:95:06:
                    fc:1e:43:a5:79:2d:21:55:72:fd:7b:a1:5c:32:4f:
                    17:b7:b1:b3:80:ac:3e:e9:b0:c1:fd:72:81:11:01:
                    91:ac:c4:54:1b:ee:55:bb:cc:db:8b:e3:47:1c:a9:
                    7b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C3:F0:12:12:83:9E:B6:8C:76:70:68:78:0E:30:4F:00:BD:43:8E
            X509v3 Authority Key Identifier:
                keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/A60006804EAE11EDBF0D8256C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.186.0/23
                IPv6:
                  2001:df0:3c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:18:48:78:41:91:62:08:84:bc:af:07:eb:72:71:79:35:e1:
         4d:be:13:ed:85:eb:c1:2f:5b:45:40:79:9f:78:ad:9c:ed:b7:
         e4:63:53:58:9c:a2:ea:1f:a4:5e:bf:a8:32:fc:e1:02:52:d7:
         04:c9:5b:4a:6c:8e:ae:27:87:eb:cc:47:17:f7:96:8d:fb:c5:
         db:8d:cc:2e:5a:02:e7:90:a4:c2:c5:d1:45:90:5d:ea:0b:77:
         d0:74:4f:4e:ac:2e:8a:a8:a0:40:1f:cf:d1:b2:b6:f8:7c:76:
         fb:09:5b:82:b8:89:aa:6c:d9:9b:53:3e:5e:2c:e8:d7:aa:15:
         fe:de:0a:9a:45:8d:f3:60:c0:79:02:ef:ad:82:76:d8:3c:bb:
         6d:48:73:8a:84:f0:c5:c5:6b:8b:96:31:8a:f1:07:de:c1:e2:
         94:d3:e5:97:1c:24:c0:aa:f3:53:b6:4c:40:6c:19:e0:ca:f1:
         70:e9:b0:42:6c:2e:0d:a3:60:11:6a:de:fa:2e:d2:42:ea:9c:
         50:0b:10:1a:83:89:6d:ae:fa:ee:ef:67:8e:2e:f3:5c:26:6f:
         50:2f:83:7f:a4:e5:a2:99:9a:d7:c2:74:d8:5b:41:3d:0f:99:
         57:fa:f2:92:fb:c3:31:4c:f4:fb:64:c1:47:54:75:5b:dc:05:
         cd:4e:ad:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 03:54:23 2026 by rpki-client