This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/0B7C7B7C751311ECA43F7D3BC4F9AE02.roa
File:                     0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (raw, json)
Hash identifier:          E18BFzDbOPh33Jkte0bOiA+66OIkyj9rY3/kwS86eb8=
Subject key identifier:   6C:E4:19:62:C2:FA:F1:8C:89:C0:F9:F2:79:CE:2D:08:94:1E:66:AD
Certificate issuer:       /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
Certificate serial:       048E
Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/0B7C7B7C751311ECA43F7D3BC4F9AE02.roa
Signing time:             Sat 31 Jan 2026 00:20:43 +0000
ROA not before:           Sat 31 Jan 2026 00:20:43 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136140
IP address blocks:        103.81.102.0/24 maxlen: 24
                          203.19.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl
                          rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Feb 2026 00:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166 (0x48e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
        Validity
            Not Before: Jan 31 00:20:43 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=697d4adb-2ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8e:06:68:b9:64:ae:a6:f0:83:96:e2:5c:8c:
                    92:6f:30:82:95:b5:e7:46:7d:45:3c:15:c8:6e:cf:
                    19:bb:9d:d7:92:82:36:01:4c:e6:5a:70:79:df:72:
                    23:b8:24:04:a2:99:a5:99:3d:97:55:19:d8:5e:f4:
                    ae:8f:4f:68:9c:19:64:0d:36:3b:f8:ef:3a:6a:74:
                    53:0c:6e:75:ac:81:e7:39:9d:84:85:45:1e:0e:09:
                    71:be:d0:11:13:52:b3:33:46:d4:76:cb:85:4f:c7:
                    14:5f:aa:8c:30:b4:c1:0c:c6:47:f2:12:3f:b7:60:
                    57:9d:6e:87:e8:01:5b:48:b5:c6:2f:fb:e5:21:2e:
                    1f:79:70:bc:c5:70:1d:dd:d1:fb:32:13:80:8a:66:
                    ef:4b:4b:62:b0:1d:a4:d8:ec:7e:ec:eb:ce:8a:a6:
                    43:98:92:be:9c:78:6e:15:af:0b:4b:9e:ff:6f:e9:
                    87:82:09:cd:7f:11:c8:d8:14:bf:be:83:c2:8f:75:
                    56:d8:71:d8:f7:fa:b8:42:f3:9c:29:96:0e:ab:de:
                    bc:4b:19:11:72:79:45:d8:57:92:e1:20:61:5c:b1:
                    ef:05:05:90:7b:e4:0e:dd:2d:65:9b:e5:ee:72:4b:
                    0b:51:57:31:0d:fb:86:e6:aa:58:7a:f8:05:93:11:
                    58:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E4:19:62:C2:FA:F1:8C:89:C0:F9:F2:79:CE:2D:08:94:1E:66:AD
            X509v3 Authority Key Identifier:
                keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/0B7C7B7C751311ECA43F7D3BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.102.0/24
                  203.19.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:0d:22:84:ef:d8:c6:da:fa:c3:a1:77:3d:a8:69:4a:d1:84:
         81:20:ab:f1:6d:d6:4a:25:2e:c6:17:7e:06:20:56:73:c8:03:
         7d:b9:5f:e1:f1:df:57:e8:8c:1e:fe:a8:57:e1:07:a9:08:27:
         03:a7:71:66:a4:2e:bc:60:ba:9d:6c:1b:a3:c9:52:9a:8c:7c:
         26:fa:a7:19:3f:3f:5d:27:a7:51:65:19:ec:cb:25:d1:8c:9b:
         0a:aa:0d:96:a2:c5:a4:de:5c:4f:82:5d:d1:b5:47:12:1a:ad:
         d6:dd:b5:0b:f7:71:03:8b:73:51:bc:7a:29:c0:3e:88:0c:0c:
         f3:16:16:f1:b4:02:a2:89:0f:aa:fa:1e:6e:e3:47:b2:eb:62:
         8e:e4:b2:0c:5d:2f:f4:f3:22:49:e9:41:82:be:45:e3:09:7d:
         d5:65:2e:49:43:b8:f3:61:af:d7:8f:07:ca:d9:52:c7:63:a6:
         b1:3d:be:ad:c2:2a:66:35:d1:a5:90:e3:87:87:19:fe:80:19:
         33:c5:32:b0:26:bc:c4:b4:73:47:5c:48:8e:c0:d3:86:ba:3a:
         b8:08:1e:c1:e7:08:1a:6b:0a:57:b4:f5:e5:ec:bb:db:f2:a8:
         84:9b:42:ff:f0:8d:d9:98:89:4d:d4:ef:a1:08:54:b2:9a:55:
         f2:3e:60:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 13:37:14 2026 by rpki-client