This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/F46C6AE2001311F1811932CE406F56BC.roa
File:                     F46C6AE2001311F1811932CE406F56BC.roa (raw, json)
Hash identifier:          4tBqI0sI1Vb796qGZREhoGyPQB8oiT5J29MM301FiDE=
Subject key identifier:   C2:B9:25:29:C8:43:DF:27:52:A9:6F:FF:15:5B:D9:4E:46:54:00:E4
Certificate issuer:       /CN=A91EC978/serialNumber=EF8B12E299F3C84D14BF35725F02DDC503B12E01
Certificate serial:       02
Authority key identifier: EF:8B:12:E2:99:F3:C8:4D:14:BF:35:72:5F:02:DD:C5:03:B1:2E:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/F46C6AE2001311F1811932CE406F56BC.roa
Signing time:             Mon 02 Feb 2026 08:48:33 +0000
ROA not before:           Mon 02 Feb 2026 08:48:33 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     4686
IP address blocks:        103.95.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.crl
                          rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 08:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC978, serialNumber=EF8B12E299F3C84D14BF35725F02DDC503B12E01
        Validity
            Not Before: Feb  2 08:48:33 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=698064e1-8a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:12:bb:1c:15:54:b7:8d:a6:51:d7:5f:81:b7:
                    c2:55:40:f4:94:a7:45:ef:43:e7:89:35:08:8f:db:
                    0f:91:89:13:cb:0e:b7:3d:05:83:fa:fe:0b:42:cc:
                    74:1e:79:55:ef:25:3e:57:14:11:8a:63:2f:33:cf:
                    84:de:7f:db:5d:5d:77:92:89:01:8c:19:a5:80:ca:
                    50:ef:88:87:d3:1e:f1:7a:b2:09:e1:90:ed:94:05:
                    2f:57:07:58:07:eb:51:04:4a:b0:cf:d8:8b:37:16:
                    a3:cd:11:71:b0:4b:49:bc:45:7d:58:60:c8:d7:5a:
                    3a:6a:27:01:24:3d:78:be:34:9e:f1:a1:e9:2e:1a:
                    90:33:b8:5e:5f:2b:f6:7a:bd:6d:d3:41:72:77:ce:
                    26:c3:21:dd:f7:71:26:55:ed:bd:63:08:a2:d2:92:
                    68:8e:9d:17:c6:34:9b:77:66:2d:80:bf:b5:db:07:
                    68:32:a5:63:1e:5e:1a:25:ee:ca:26:09:3d:26:45:
                    56:a5:6d:bf:81:40:c0:50:23:7e:1a:be:bd:08:7c:
                    1e:d7:95:e4:0f:ca:1d:ab:00:09:cb:d4:7b:5d:f0:
                    19:cd:11:21:04:5a:51:07:1a:a4:5d:5b:05:61:73:
                    81:c7:69:4f:ce:fd:7a:01:2a:5e:20:36:08:33:0a:
                    6c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B9:25:29:C8:43:DF:27:52:A9:6F:FF:15:5B:D9:4E:46:54:00:E4
            X509v3 Authority Key Identifier:
                keyid:EF:8B:12:E2:99:F3:C8:4D:14:BF:35:72:5F:02:DD:C5:03:B1:2E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/F46C6AE2001311F1811932CE406F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:4b:8a:7e:49:be:11:68:b9:52:c4:a7:ca:90:17:83:c1:90:
         02:1c:b1:14:14:37:af:2c:bb:4a:5c:89:55:0e:69:f5:df:11:
         34:42:73:33:aa:af:ac:35:2f:ae:b6:5a:1c:71:44:8c:66:e8:
         0a:8f:f4:f8:95:ae:a9:2e:7e:57:f0:c9:be:cf:83:c8:c6:59:
         4c:a7:52:50:64:b7:5f:05:77:cf:3c:f9:2f:6c:7a:84:b9:e4:
         d0:de:76:f8:98:2e:7d:ea:7c:89:63:26:55:71:0e:d2:3b:2e:
         91:f8:5d:91:b9:19:36:e1:cc:0d:e0:28:30:72:2c:25:d7:3c:
         47:ad:b9:b7:ec:02:29:d1:96:42:04:0e:24:9b:b0:06:0f:75:
         eb:0d:a8:7f:f5:5f:6e:fb:6b:40:4f:9a:b3:1c:22:5a:08:47:
         7c:b6:dd:6c:e7:e8:72:9d:9d:7e:70:10:bf:51:1d:0a:80:8e:
         b7:6b:54:a2:3e:e9:a3:0f:a8:4e:ad:c7:7e:64:03:c8:c6:73:
         2b:8e:4e:4d:bd:71:81:0a:c1:c6:64:0f:84:c7:0d:cd:f7:d4:
         9d:ca:db:a3:ea:ea:9d:6c:09:13:5b:89:0a:84:a7:92:34:3f:
         c8:3f:60:28:01:a0:bf:5b:97:95:55:15:ba:af:19:36:fd:b1:
         8f:cb:31:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 21:17:37 2026 by rpki-client