This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/D516EA2AA1E611EDABFD7D7FC4F9AE02.roa
File:                     D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (raw, json)
Hash identifier:          wbYCGm+1axvE0aS+cKEcLvjURoI0PJE5ThxHAgZI7bw=
Subject key identifier:   A2:2E:52:9B:9C:5E:7E:92:13:B8:A8:19:8B:E2:B2:77:F2:9B:3A:72
Certificate issuer:       /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Certificate serial:       04C1
Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/D516EA2AA1E611EDABFD7D7FC4F9AE02.roa
Signing time:             Sat 31 Jan 2026 00:20:07 +0000
ROA not before:           Sat 31 Jan 2026 00:20:07 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     64037
IP address blocks:        103.177.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 23:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1217 (0x4c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
        Validity
            Not Before: Jan 31 00:20:07 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=697d4ab7-340f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:17:18:d7:ba:25:42:53:ab:9d:80:55:9c:
                    56:cc:f9:da:5d:50:65:02:eb:da:26:7d:74:cc:58:
                    62:6e:95:4a:5b:12:50:e7:61:ee:5c:19:58:f4:f4:
                    c2:e3:88:76:0f:c5:ab:9d:f1:a8:45:03:de:0c:d1:
                    be:9a:12:f2:a4:04:bd:ed:27:f9:5e:9f:84:d0:9b:
                    a7:3b:33:53:50:92:c9:0c:54:99:c6:14:7e:32:73:
                    50:66:3f:29:96:ff:2f:35:72:81:ea:0c:12:fb:b9:
                    04:2f:fa:ab:f4:2c:44:bf:13:0b:ca:b3:47:45:78:
                    61:80:26:c8:37:b3:40:3f:9e:bf:89:cf:fe:61:d5:
                    7d:af:cf:9c:a6:b9:5f:ad:7c:45:6d:6d:85:3c:d4:
                    3e:16:36:44:7d:7d:f7:71:be:80:6a:44:77:10:ce:
                    72:f4:6f:29:74:b6:d8:93:c2:a3:40:23:b5:23:a9:
                    5e:dd:6f:e0:09:c7:a4:b3:30:64:3c:38:d0:2b:18:
                    fd:7b:af:ae:3c:c1:22:dc:71:fa:f7:74:ec:7e:3c:
                    95:85:47:76:1a:c6:ad:cd:a0:e7:d5:bc:00:9e:0b:
                    20:a1:71:2b:88:47:0a:c1:3c:7e:88:dd:5d:52:23:
                    f6:de:56:93:94:22:ce:c8:ee:fe:7e:84:4d:93:80:
                    10:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2E:52:9B:9C:5E:7E:92:13:B8:A8:19:8B:E2:B2:77:F2:9B:3A:72
            X509v3 Authority Key Identifier:
                keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/D516EA2AA1E611EDABFD7D7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:fd:20:7d:fc:59:b2:32:5b:88:c2:e8:f8:0e:8d:0b:d1:e1:
         9f:d7:22:48:c7:4c:9c:9e:b1:32:1e:b1:e6:33:8d:db:97:30:
         a6:52:aa:49:39:2b:c4:a3:bb:f9:61:1d:3c:35:f2:cb:78:72:
         68:0a:65:2c:6d:73:c0:78:f9:88:3c:de:0d:ae:f6:a9:8b:1b:
         c7:91:36:f7:4b:d1:78:23:57:7b:29:ee:ac:3e:30:e0:a9:7f:
         28:69:a3:4e:06:32:2d:36:b1:a3:40:98:aa:dc:dd:62:e2:4e:
         e9:f1:48:da:a7:fb:75:93:41:a5:d6:e5:d0:53:b1:6e:fa:c0:
         ea:40:17:01:e7:8c:6a:63:69:fe:0f:bf:ba:aa:6a:e9:c9:5a:
         7b:07:2a:57:6f:7a:e2:c5:cd:bc:05:6a:89:9a:3b:43:65:6e:
         ee:1a:2f:d8:88:f2:1f:03:5d:e1:33:7a:9c:2a:d3:66:62:c4:
         e9:dc:a1:cb:33:5a:6d:a0:7e:24:2b:ca:ce:c7:2b:61:67:3f:
         e0:9e:26:cd:2f:46:5e:94:a0:f8:1f:64:78:f8:31:31:f9:2d:
         8c:97:74:07:8c:56:73:c6:c1:82:4d:ed:75:f7:b8:16:2e:07:
         1e:27:b6:4a:8a:6f:f1:38:c4:6e:ea:42:99:4e:d6:35:8e:ec:
         22:72:5f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 00:13:53 2026 by rpki-client