This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/E9AA7826EB7B11F08DB6A8BC506F56BC.roa
File:                     E9AA7826EB7B11F08DB6A8BC506F56BC.roa (raw, json)
Hash identifier:          jYp2y6PsX6cPOBggbiQ7edIB41CW/juFRxU/Po0P6ME=
Subject key identifier:   6D:7E:74:2E:D9:EB:94:9F:1C:AC:14:AB:F3:0F:00:25:48:68:85:F7
Certificate issuer:       /CN=A91CF188/serialNumber=EA5A603FFB2A040E3B384B2061B722272F0A9630
Certificate serial:       02
Authority key identifier: EA:5A:60:3F:FB:2A:04:0E:3B:38:4B:20:61:B7:22:27:2F:0A:96:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/E9AA7826EB7B11F08DB6A8BC506F56BC.roa
Signing time:             Wed 07 Jan 2026 03:49:48 +0000
ROA not before:           Wed 07 Jan 2026 03:49:48 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132827
IP address blocks:        103.37.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.crl
                          rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF188, serialNumber=EA5A603FFB2A040E3B384B2061B722272F0A9630
        Validity
            Not Before: Jan  7 03:49:48 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=695dd7dc-8bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:4b:70:f0:0b:d4:c6:7a:5e:ab:46:19:b1:
                    77:05:07:fb:0d:52:a1:f3:72:2f:a9:0d:39:51:97:
                    1c:ba:cc:cb:47:17:21:4e:41:87:67:f3:ca:71:1c:
                    cb:e8:3e:e2:23:df:30:42:b8:4e:d0:95:71:e3:16:
                    06:2a:79:55:23:ef:28:50:8f:17:a0:7b:b0:3f:7c:
                    ac:44:33:1d:12:1d:5d:aa:c0:76:8f:3e:8e:08:64:
                    cc:30:ff:07:6e:28:bd:3f:17:97:e1:f0:92:8a:06:
                    f2:54:41:d9:25:81:46:4e:5d:34:65:93:50:6a:76:
                    72:49:62:91:0c:60:45:25:e9:02:e8:86:56:53:42:
                    3a:23:f2:b7:69:18:9b:ac:7a:0a:b3:b6:0e:c1:17:
                    69:b8:35:72:a2:6b:16:9b:4c:49:b9:e4:3b:bf:3a:
                    fd:db:d6:3d:b1:34:d2:2a:7c:6f:23:30:80:ae:b6:
                    85:bb:dc:98:d2:19:a3:97:b9:24:ac:7b:ec:bc:50:
                    b7:d8:33:81:ff:45:cd:ac:d4:c4:d8:4b:f8:1f:6c:
                    ac:57:c8:73:af:dc:aa:03:6e:ea:21:e8:fa:c9:f1:
                    aa:cb:f5:02:97:8d:3d:26:e8:9f:32:d5:a5:4d:ce:
                    b4:fd:38:64:11:8f:2f:eb:30:da:b3:86:f8:47:07:
                    2f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7E:74:2E:D9:EB:94:9F:1C:AC:14:AB:F3:0F:00:25:48:68:85:F7
            X509v3 Authority Key Identifier:
                keyid:EA:5A:60:3F:FB:2A:04:0E:3B:38:4B:20:61:B7:22:27:2F:0A:96:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/E9AA7826EB7B11F08DB6A8BC506F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:7d:ea:4b:4c:76:bd:d7:46:2e:4e:e7:b1:34:3a:56:c3:79:
         b2:02:a5:b8:35:f9:c2:1d:53:d6:7f:4e:5e:d6:64:d8:cb:a6:
         12:9e:0b:fa:e2:8a:dc:e8:09:31:34:fd:65:db:72:a3:15:39:
         12:2a:41:61:ff:7f:77:a0:a2:ab:7f:47:c6:ab:c6:78:df:90:
         5b:69:17:20:8e:a1:e3:73:33:07:99:a4:3d:64:39:a2:81:c4:
         29:31:e9:65:69:21:a5:19:67:27:5e:92:36:96:93:bc:0a:eb:
         7d:b0:cf:18:0f:fa:fb:e2:bc:39:4e:79:2e:21:32:a9:7b:c4:
         e1:52:7d:d3:88:4b:91:13:ed:c8:5b:27:42:8d:c9:c9:24:e4:
         fb:7b:78:1f:37:b2:fb:4e:de:6f:cc:02:3e:20:18:ca:1d:2b:
         61:ea:a5:5a:ab:ec:99:35:ca:98:54:23:9f:2a:a5:5b:11:3f:
         3a:f6:54:e1:b5:74:b3:eb:32:01:13:db:c2:90:e8:cc:89:41:
         93:a7:42:ea:4b:14:92:71:b2:60:dd:8b:ee:aa:8f:0c:3e:bd:
         f9:bb:f4:12:e0:fd:9d:d2:4e:50:47:0f:3b:fe:93:27:ed:2b:
         42:f8:70:db:53:fc:de:95:cf:a1:f7:d8:dc:6a:b9:89:8f:cb:
         cd:56:7f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:41:00 2026 by rpki-client