This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/A37D1F4AF51A11F08A3A39E6586F56BC.roa
File:                     A37D1F4AF51A11F08A3A39E6586F56BC.roa (raw, json)
Hash identifier:          BpD7j/pEGfgFOc6Lc19taqq1xRPs0bqhCyqmM0cWqzI=
Subject key identifier:   7E:BB:79:7A:8E:5F:B2:F6:42:57:35:97:D3:26:E0:54:D2:D7:14:35
Certificate issuer:       /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56
Certificate serial:       09B8
Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/A37D1F4AF51A11F08A3A39E6586F56BC.roa
Signing time:             Mon 19 Jan 2026 09:38:41 +0000
ROA not before:           Mon 19 Jan 2026 09:38:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     61327
IP address blocks:        103.89.144.0/22 maxlen: 22
                          103.89.144.0/24 maxlen: 24
                          103.89.145.0/24 maxlen: 24
                          103.89.146.0/24 maxlen: 24
                          103.89.147.0/24 maxlen: 32
                          202.155.188.0/22 maxlen: 22
                          2400:7ca0::/36 maxlen: 36
                          2400:7ca0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl
                          rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 19:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2488 (0x9b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56
        Validity
            Not Before: Jan 19 09:38:41 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=696dfba1-0d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d0:c1:63:41:c7:8b:5f:92:94:47:cf:01:f8:
                    82:40:7b:bd:55:9a:27:d0:9a:a3:2c:53:77:00:5e:
                    88:a2:b1:d5:3d:e7:a9:74:a0:4a:2d:4e:b7:6d:24:
                    87:a6:fe:50:6b:ca:ba:ed:7f:15:75:96:04:df:de:
                    1e:10:4a:33:a0:19:9d:ca:6f:9c:91:5c:0e:0d:a3:
                    9a:71:db:7d:6a:00:4f:1a:9a:14:8c:89:bc:98:4b:
                    a9:59:e0:2e:6d:18:21:df:59:98:67:49:8a:5f:33:
                    f2:c0:f0:8c:cb:c3:d2:5b:b7:5f:ba:7b:b5:69:bd:
                    22:e6:70:59:68:f0:28:3f:a1:61:f4:40:b5:72:77:
                    6e:0d:42:3f:5f:44:85:eb:f3:a3:25:73:5b:11:81:
                    03:48:41:ec:7c:a0:be:47:72:e5:b6:d2:5f:62:8b:
                    85:47:1c:d6:d3:f6:3e:4f:76:66:7d:8c:bc:cf:be:
                    04:89:1d:fd:ee:8f:2c:d6:54:39:1f:31:ab:17:f5:
                    59:75:8b:16:56:66:81:e0:f0:28:49:c5:78:3c:f8:
                    62:a4:71:24:d6:57:26:66:3d:66:0b:4a:96:9f:ba:
                    13:a7:b0:01:4c:7f:bd:36:0a:e3:61:06:5a:9d:ae:
                    c6:a3:66:aa:8c:05:f3:9b:b0:b8:1f:13:2d:eb:ba:
                    71:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BB:79:7A:8E:5F:B2:F6:42:57:35:97:D3:26:E0:54:D2:D7:14:35
            X509v3 Authority Key Identifier:
                keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/A37D1F4AF51A11F08A3A39E6586F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.144.0/22
                  202.155.188.0/22
                IPv6:
                  2400:7ca0::/35

    Signature Algorithm: sha256WithRSAEncryption
         87:44:c1:ff:c2:55:bd:0e:f2:b2:d0:64:30:03:f0:0c:42:a8:
         7d:b2:0d:be:9d:de:30:8b:64:eb:4b:fa:00:d5:2a:39:22:26:
         4e:4d:10:c8:2c:9f:a6:cd:8f:e8:65:bb:7d:ee:70:f0:44:4f:
         22:72:4d:65:43:06:c5:8d:d2:f1:e5:27:72:01:4b:13:8c:dd:
         e2:98:12:6a:7b:f6:0a:59:e0:c8:d4:2a:bb:b3:20:92:ac:04:
         8c:2f:79:f3:8b:bb:28:8e:0a:c7:da:96:8f:7f:7d:8b:05:80:
         41:c3:56:a6:ba:dc:2a:c3:ef:0e:c6:e1:4d:d2:1b:15:82:c9:
         a1:2b:e5:87:e4:c7:cc:70:0f:e7:1b:95:19:4b:fb:a7:b5:10:
         b9:1b:91:b7:7b:9a:21:36:78:ca:ed:b9:47:7e:33:be:bd:32:
         01:6f:5d:54:14:8c:df:c2:84:cf:04:1a:d2:38:ce:64:e6:c5:
         5e:c8:16:0a:7d:30:b0:a9:e3:a7:d0:5b:95:6c:15:b6:d1:6b:
         90:13:0c:93:5e:92:fc:e1:a6:fb:bd:2a:54:b8:19:ab:70:97:
         7c:fa:60:28:65:94:ee:54:dd:b1:fc:a1:7f:97:15:ed:9b:12:
         6c:f4:21:2d:e0:8a:62:77:73:63:e3:26:eb:69:44:2f:3e:bf:
         04:9b:9c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 08:18:58 2026 by rpki-client