This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/A3FE68F6081C11F1912AFF69323D8C67.roa
File:                     A3FE68F6081C11F1912AFF69323D8C67.roa (raw, json)
Hash identifier:          relwBMHMd0zQLxrmAJqPdAkZBhv5mEciWJDF4M/1jy8=
Subject key identifier:   DF:33:94:06:FE:F8:5C:D9:34:00:43:AC:7E:A3:6D:49:DB:B4:F0:93
Certificate issuer:       /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial:       0708
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/A3FE68F6081C11F1912AFF69323D8C67.roa
Signing time:             Thu 12 Feb 2026 14:10:53 +0000
ROA not before:           Thu 12 Feb 2026 14:10:53 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.99.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
                          rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Feb 2026 21:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1800 (0x708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
        Validity
            Not Before: Feb 12 14:10:53 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=698ddf6d-d3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:62:14:fd:50:c8:9a:b2:57:35:21:f3:9d:7e:
                    eb:02:ce:47:3f:f2:2d:d6:cd:6a:a7:c5:84:d8:59:
                    02:8b:ab:64:f8:7e:ce:91:26:26:02:07:19:d5:9e:
                    b4:97:c2:af:ef:c2:a4:84:05:76:e3:36:5f:6e:11:
                    07:85:e8:2e:2a:e7:02:3b:40:f8:8e:7c:01:6b:5d:
                    3e:58:98:51:8a:a8:86:6f:dc:73:e8:74:09:96:e1:
                    a8:f2:1b:40:3b:6c:16:93:e0:ff:97:8d:c8:45:64:
                    7f:c9:1a:72:0c:65:d9:c3:7e:e9:3a:d2:e2:18:ee:
                    50:68:45:55:e9:3c:04:c7:4d:87:eb:11:0f:3d:7a:
                    64:70:9e:8b:08:14:ca:64:f9:1c:f5:d6:19:5f:88:
                    51:7d:32:78:6b:17:d7:99:0f:bc:f1:42:ad:5e:fc:
                    9c:a7:63:30:60:f5:86:be:7d:e4:90:99:74:1d:30:
                    69:e8:2c:e2:e3:fd:31:da:27:48:73:9a:3f:e6:63:
                    c7:c2:1d:ce:d2:92:28:f1:7e:4c:5e:45:c2:8d:55:
                    fa:61:88:da:7d:3d:69:8f:eb:94:1f:d2:0d:c0:cd:
                    a5:8a:8c:7a:29:fa:45:55:ca:0f:c2:b9:0a:7d:ee:
                    7a:64:e7:30:86:e3:4a:06:3a:be:9f:5a:88:5e:48:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:33:94:06:FE:F8:5C:D9:34:00:43:AC:7E:A3:6D:49:DB:B4:F0:93
            X509v3 Authority Key Identifier:
                keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/A3FE68F6081C11F1912AFF69323D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:6b:83:54:ff:aa:29:63:e6:6f:af:8e:d6:f0:83:79:27:d6:
         25:8c:e3:ff:19:2f:03:be:1a:b8:f3:eb:de:1f:0b:73:dd:48:
         04:99:4a:14:cc:b8:af:21:5c:f8:3c:bf:70:43:01:97:fd:9e:
         ce:e9:3e:f2:b6:d3:3b:92:d9:40:89:af:95:f1:f1:6c:86:dd:
         6d:12:1d:f8:c7:bb:5f:c9:09:0c:c1:6b:d8:a0:08:75:06:c1:
         b9:74:a8:c5:5a:9c:6a:36:a6:d3:7d:5a:d8:0a:49:8f:d8:de:
         52:56:5c:f8:07:4d:3f:be:5c:a6:6d:7b:ff:06:fe:c0:ad:c3:
         80:73:1c:8c:b1:d0:5b:c3:90:5e:57:6a:ca:30:a8:9e:2d:88:
         70:df:28:0c:1e:3f:88:2e:da:63:d8:eb:ce:1d:99:db:10:1f:
         dc:8a:d3:03:a9:d7:77:15:96:18:c5:8c:48:05:a3:d5:ef:c3:
         57:05:09:b9:f1:4f:e0:af:e9:21:0f:2f:b6:37:be:fa:49:7a:
         fd:10:e9:c0:88:71:0b:ca:7e:08:69:24:3f:ba:79:0c:48:ce:
         51:8b:c4:57:05:64:33:22:31:c8:7f:43:e9:3f:34:9d:08:43:
         a4:96:ce:7f:d2:46:56:a7:66:fd:e1:e0:a2:65:a4:db:38:20:
         fe:a5:3e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:11 2026 by rpki-client