This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/201C5008FD1211F08F3BD92E3C6F56BC.roa
File:                     201C5008FD1211F08F3BD92E3C6F56BC.roa (raw, json)
Hash identifier:          odb4UcI+QLOzCfCUlviI8m1misGgUY61MlFxcBjwpCo=
Subject key identifier:   2F:12:3B:7D:E9:52:DE:75:6B:58:19:76:C6:2C:2B:35:37:32:60:35
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       0422
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/201C5008FD1211F08F3BD92E3C6F56BC.roa
Signing time:             Thu 29 Jan 2026 12:57:54 +0000
ROA not before:           Thu 29 Jan 2026 12:57:54 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     150108
IP address blocks:        103.172.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Feb 2026 00:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1058 (0x422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: Jan 29 12:57:54 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=697b5952-51ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:98:75:fb:93:b2:f1:d9:ba:ec:81:d7:89:
                    81:4a:8c:be:04:8b:81:15:d0:3e:bd:31:c9:c9:18:
                    94:05:bd:d8:79:4e:39:b2:df:9a:4b:f3:ac:2e:64:
                    77:95:69:7e:e0:09:09:fd:c1:07:e3:f8:5e:58:f2:
                    ef:e4:45:c6:ae:2d:c0:3a:90:f5:4d:b5:66:3f:a2:
                    c7:eb:64:cd:a8:02:e2:cf:14:79:f0:a0:81:cb:c6:
                    fa:41:f8:93:5c:d0:42:4c:0f:9e:e2:d9:8d:fe:51:
                    29:ee:e4:46:64:91:21:af:1f:5f:18:04:f4:d0:8b:
                    9d:5d:7f:1d:f2:57:e8:eb:33:26:53:51:a5:6b:a1:
                    a8:68:76:aa:b5:84:d0:c2:cf:61:d8:0f:18:6d:6e:
                    4d:97:46:d1:98:96:54:37:88:a0:9f:1b:4f:68:7f:
                    8b:ef:9a:4e:d9:9c:f6:28:59:f6:ef:02:26:cc:c8:
                    b7:e9:61:1c:3d:4d:37:7d:f8:8a:ff:f2:8b:08:30:
                    f8:57:ed:09:60:af:2c:ce:8a:07:42:6d:2c:d4:cb:
                    8d:16:58:71:38:ca:b9:89:69:f0:7f:f4:60:a5:df:
                    e5:1d:dc:7e:0e:bd:f8:c5:ae:99:aa:1f:45:6a:09:
                    8c:17:f1:48:b7:f6:a5:be:dd:ba:d6:16:37:65:0e:
                    5d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:12:3B:7D:E9:52:DE:75:6B:58:19:76:C6:2C:2B:35:37:32:60:35
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/201C5008FD1211F08F3BD92E3C6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:96:6c:2e:62:83:1f:26:31:27:41:83:4e:e6:1d:3c:51:a2:
         66:a8:6c:b7:08:84:f0:47:f1:6c:66:34:83:4a:da:29:de:56:
         95:a1:98:bd:cf:34:c7:5c:17:45:1d:12:0d:59:4e:f1:79:b4:
         ba:d6:99:cb:b2:43:73:78:73:e2:10:56:59:2c:5a:5b:a1:5c:
         58:06:5c:22:68:c9:1c:71:d1:9d:b7:84:7d:3a:1b:d4:43:ba:
         ee:fd:e7:bf:ba:fa:f4:e7:3f:d8:45:df:f3:6a:ff:c2:49:04:
         b5:0d:80:2a:1e:07:17:bb:7f:95:eb:5a:35:dc:0c:dc:54:8e:
         6f:53:38:f9:76:c8:ff:70:65:9c:a7:35:85:fe:85:4c:e5:e2:
         12:11:37:df:b7:cc:ed:64:fe:fb:56:46:1f:6c:35:78:4f:32:
         97:24:93:21:db:0f:04:91:54:c3:c2:90:43:de:80:a9:0a:17:
         87:58:a8:a8:f9:58:26:b2:0b:1f:0d:b5:27:23:a8:06:e2:fb:
         ab:d8:4e:df:2d:51:ea:c9:54:93:59:ea:e8:fe:b7:96:c0:fc:
         36:a8:b2:1c:d9:d8:15:6a:9e:82:f3:8a:cc:4f:fd:b7:60:09:
         06:ea:55:ea:9b:96:cb:6f:6d:fd:7b:f4:bc:31:5f:02:e5:1d:
         4d:b7:49:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 12:55:46 2026 by rpki-client