This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/F8400A20C80811ED9ADBA05EC4F9AE02.roa
File:                     F8400A20C80811ED9ADBA05EC4F9AE02.roa (raw, json)
Hash identifier:          cUPv6LkBvL7r5vf+A3Q/OC1NNEinJyCO2iobmaIMIjo=
Subject key identifier:   F2:3E:7D:CF:A6:8F:F7:3C:A3:D4:8C:CF:30:0A:34:3E:E8:D7:87:34
Certificate issuer:       /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial:       03DE
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/F8400A20C80811ED9ADBA05EC4F9AE02.roa
Signing time:             Sat 31 Jan 2026 00:21:46 +0000
ROA not before:           Sat 31 Jan 2026 00:21:46 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     134599
IP address blocks:        103.177.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
                          rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Feb 2026 00:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 990 (0x3de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
        Validity
            Not Before: Jan 31 00:21:46 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=697d4b19-b1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0c:15:0f:80:39:ef:6d:ba:c3:a5:42:64:86:
                    24:d0:a7:de:c5:1d:11:59:19:6f:3b:ff:66:0d:d4:
                    9c:be:81:db:bc:18:76:a2:8b:56:d3:3e:c6:6a:95:
                    f4:96:e7:1a:3c:ad:1e:aa:a8:72:09:f8:a1:e4:38:
                    7e:b7:ac:81:4e:fc:c6:1f:9a:9b:fb:6b:06:c6:ee:
                    42:e4:48:87:0b:be:88:7d:12:88:3b:b4:10:75:fe:
                    4d:86:72:c1:97:89:7b:49:d6:1f:47:d6:ae:d9:83:
                    17:22:8b:54:ac:fd:61:79:b6:47:ab:b0:3d:9d:48:
                    48:4c:96:40:ad:72:71:16:5c:50:96:3a:44:15:2d:
                    64:70:24:e3:0b:3d:2c:69:47:08:d3:cf:b3:4d:bd:
                    76:1c:73:d2:8a:a2:86:a2:f6:08:15:df:df:54:4a:
                    05:c7:a5:99:6f:03:ef:8a:da:07:4d:c3:ca:11:ff:
                    95:46:df:82:6e:2b:79:2b:b6:24:a5:be:43:af:67:
                    1f:ca:63:73:fe:81:4c:bd:10:73:d8:a8:b1:51:4c:
                    fd:41:b0:b8:e7:82:a2:98:8d:ec:d4:15:44:40:76:
                    43:64:c3:df:53:1f:17:e1:b2:5d:cc:4d:58:80:45:
                    56:b6:7a:88:c0:26:a3:a7:89:da:87:72:38:ce:b4:
                    7e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3E:7D:CF:A6:8F:F7:3C:A3:D4:8C:CF:30:0A:34:3E:E8:D7:87:34
            X509v3 Authority Key Identifier:
                keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/F8400A20C80811ED9ADBA05EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:a0:65:bf:f0:87:97:0a:3c:e3:ec:c4:0b:89:32:37:4a:6e:
         d7:ea:64:c0:f3:e1:25:37:dd:d9:be:b2:e2:76:42:2e:e7:eb:
         78:ee:c7:47:e1:e1:ed:d2:3b:c9:74:b4:c7:96:8b:de:8d:20:
         91:c6:b9:66:3d:b0:46:d9:e2:0e:e4:06:4b:ff:20:51:28:da:
         98:81:db:81:0b:96:ba:23:0e:64:03:0a:3b:e2:dc:2c:fc:43:
         34:df:bd:f5:79:fa:67:e3:ff:f3:5b:e3:60:bb:75:3f:be:de:
         dd:d2:86:a0:72:b3:43:28:6d:f5:21:79:00:47:de:47:13:19:
         23:9b:73:89:17:bd:d5:6a:20:79:b0:67:8d:06:56:c6:05:0c:
         17:ce:49:02:ae:32:d8:62:13:3a:10:37:51:51:01:31:31:71:
         e4:ca:12:08:49:6e:44:a3:8e:02:c9:18:c7:97:43:5d:1c:cb:
         dc:e0:7d:5b:5c:07:21:fd:98:8d:8d:8a:ac:22:dc:85:4c:f5:
         9a:0b:b9:c7:79:f8:b0:95:cf:5c:1e:a6:58:35:5f:a0:a4:88:
         13:f4:e2:28:59:c3:10:71:dc:91:77:42:44:78:7c:a2:2d:30:
         35:51:03:16:c2:d8:c7:b3:0e:71:42:fe:aa:7d:1c:72:1a:65:
         78:44:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 02:45:00 2026 by rpki-client