This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/A6168350176711EFA13E2C6DC4F9AE02.roa
File:                     A6168350176711EFA13E2C6DC4F9AE02.roa (raw, json)
Hash identifier:          jXXx3q72vgm7DIjfIt8ZENyPU+uh1EOgLpfNFDrVBFk=
Subject key identifier:   36:89:67:EF:8F:47:B9:D4:4A:BA:07:AF:8D:37:43:73:2F:2E:49:F7
Certificate issuer:       /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial:       03E0
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/A6168350176711EFA13E2C6DC4F9AE02.roa
Signing time:             Sat 31 Jan 2026 00:21:47 +0000
ROA not before:           Sat 31 Jan 2026 00:21:47 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     149055
IP address blocks:        103.177.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
                          rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Feb 2026 00:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 992 (0x3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
        Validity
            Not Before: Jan 31 00:21:47 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=697d4b1b-b641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:d8:76:6f:7b:94:2c:32:4c:32:f9:85:59:
                    cd:35:05:d2:2b:58:94:77:d8:c7:32:68:46:27:cf:
                    d3:85:c6:c6:03:ef:71:ea:c5:bd:5c:b3:e2:a4:80:
                    59:20:f7:eb:3e:ee:8b:17:57:df:a0:31:f4:fb:d0:
                    b2:28:20:6d:e3:4a:b7:fa:b1:56:85:ec:b6:1a:e6:
                    29:da:a2:4f:4c:32:f5:9e:32:50:50:a8:61:32:55:
                    8f:5b:a1:d9:1a:a5:eb:08:f4:14:76:26:8a:e3:57:
                    b5:62:29:de:6f:e5:5d:bb:ec:86:75:4a:10:1f:a2:
                    c3:7e:ce:68:3f:a8:88:8a:11:c1:12:d9:44:97:e8:
                    cd:d8:12:fc:84:1a:99:01:81:a3:f1:61:31:ac:b2:
                    eb:18:17:7f:5a:24:84:16:54:0d:ee:5c:ff:6e:35:
                    11:18:03:0c:48:85:5f:a1:d5:fd:27:8c:77:dd:cd:
                    4a:74:76:46:27:45:ca:94:d0:bd:3c:0d:40:71:aa:
                    eb:da:5f:72:0e:91:bd:df:c2:3c:52:0a:99:8b:1b:
                    03:d7:b8:6f:d8:2e:52:70:d4:26:c2:51:ee:59:6f:
                    87:3f:2d:5e:1b:18:79:fb:05:8c:b9:65:8f:33:f2:
                    57:89:fd:43:21:53:7d:60:e5:d7:2a:75:bc:a5:69:
                    16:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:89:67:EF:8F:47:B9:D4:4A:BA:07:AF:8D:37:43:73:2F:2E:49:F7
            X509v3 Authority Key Identifier:
                keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/A6168350176711EFA13E2C6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:c6:fc:32:99:be:c9:de:13:a0:7e:60:37:fa:03:65:b7:8b:
         2e:c0:37:63:2d:ed:93:0d:f0:0b:49:b4:34:03:24:18:bd:25:
         65:d8:d7:38:2f:c9:3f:46:f0:78:0f:97:3e:6e:6a:d0:a9:11:
         f8:b3:63:87:df:cb:5a:f9:8a:a8:be:4f:73:28:ef:41:cd:fe:
         87:13:63:53:30:90:6d:99:0d:53:0d:f8:cf:45:cc:d4:18:dc:
         ab:34:7e:c6:4d:c4:1f:06:a6:18:06:ea:05:39:79:ac:fa:d2:
         ba:fd:44:be:d5:df:4e:df:43:68:ad:b7:4e:59:7b:74:f3:21:
         59:fa:bb:9a:54:20:76:d7:36:1d:cb:d6:c6:80:75:f4:26:a4:
         3d:00:c7:9a:38:51:e3:87:5f:fe:2d:7e:74:a1:63:70:49:c7:
         4c:0b:d3:68:9c:e3:ae:ce:43:88:7e:da:b4:75:31:fc:21:ba:
         01:30:93:2d:a3:55:e6:39:1d:d3:4b:d8:b8:b7:25:e1:a4:7b:
         a0:d1:be:fd:e2:a8:a1:11:09:ba:bb:e3:26:c4:06:16:c8:3b:
         ca:cc:4f:fa:3a:6b:0f:ec:69:f9:16:d4:84:b2:4c:f4:65:38:
         ff:1e:ec:2b:ae:6b:1b:e0:2c:94:5c:ce:e9:f0:50:65:2b:05:
         e1:39:f4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 02:44:54 2026 by rpki-client