This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/E1C6B9720DCC11EBAB25BC31C4F9AE02.roa
File:                     E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (raw, json)
Hash identifier:          8jSRLsCTFalWuMWmzctOoaeQi0LA+9F2nrcfuS55eGE=
Subject key identifier:   E1:34:67:A5:A8:DA:3C:8E:3C:C8:A3:9E:0E:D0:53:EF:25:31:E9:47
Certificate issuer:       /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Certificate serial:       0817
Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/E1C6B9720DCC11EBAB25BC31C4F9AE02.roa
Signing time:             Mon 12 Jan 2026 04:12:33 +0000
ROA not before:           Mon 12 Jan 2026 04:12:33 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     7595
IP address blocks:        103.3.164.0/24 maxlen: 24
                          103.3.165.0/24 maxlen: 24
                          103.3.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
                          rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 20:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071 (0x817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E
        Validity
            Not Before: Jan 12 04:12:33 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=696474b1-4795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:4a:00:21:c1:72:30:3a:3d:56:7f:d5:b6:
                    fe:0e:20:ba:cd:eb:f1:6b:c9:f2:f6:73:2d:00:67:
                    33:9b:19:18:c2:0a:d5:25:9e:1b:ad:da:08:eb:c8:
                    04:10:64:ef:89:8a:bb:04:68:48:8a:c6:2d:0b:50:
                    8c:25:5b:65:20:33:52:b3:d0:b3:bb:ef:20:e5:d3:
                    b2:64:08:1c:e1:26:2d:bd:fb:31:f0:67:5a:bb:43:
                    3e:e9:dc:a2:67:98:e4:50:5b:76:25:c0:e5:e6:78:
                    ec:15:43:e1:89:60:51:2b:7b:85:ae:cf:76:04:d9:
                    45:79:4d:e7:57:dc:69:78:3b:e2:45:b3:24:93:f3:
                    c9:b3:5c:e3:ce:5d:da:47:cf:09:16:8e:12:50:e7:
                    95:8a:48:35:12:16:aa:41:90:47:ef:7a:77:44:2d:
                    31:a8:ea:a4:69:46:a3:17:36:e4:2d:72:9d:87:7a:
                    05:72:44:4d:80:43:a4:2d:84:8a:b7:63:56:ce:8a:
                    0b:16:1e:42:97:9e:24:7b:1a:d0:08:ba:b8:08:1e:
                    cf:8c:d2:64:27:1a:b3:30:1e:57:5a:3b:90:8b:cd:
                    e8:34:c1:18:41:f3:10:d5:30:de:df:14:92:c6:b0:
                    a1:1d:a6:36:f0:4c:6a:2d:61:ef:c1:ae:7b:b1:e2:
                    4b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:34:67:A5:A8:DA:3C:8E:3C:C8:A3:9E:0E:D0:53:EF:25:31:E9:47
            X509v3 Authority Key Identifier:
                keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/E1C6B9720DCC11EBAB25BC31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.164.0-103.3.166.255

    Signature Algorithm: sha256WithRSAEncryption
         56:65:e0:54:6c:1f:63:38:95:a5:0b:92:6d:03:88:19:d3:3d:
         25:3a:7a:ea:9d:07:dd:ff:b3:bc:da:1c:10:77:da:c0:d5:53:
         77:14:ab:25:e4:3f:77:fc:d1:ef:eb:e8:07:7c:70:86:87:42:
         d3:3b:dd:aa:02:a0:3a:08:02:4d:be:0a:14:09:9e:1f:20:04:
         61:26:33:03:ed:4e:30:90:77:37:75:ba:76:d1:29:03:f1:7e:
         f6:da:18:ad:2d:e3:c6:d3:63:57:ac:f3:a4:fe:ee:14:03:9e:
         38:95:6e:25:69:cf:4b:36:1b:e7:0e:7d:7c:f0:7d:3d:ae:0c:
         88:9e:e9:ed:70:ee:fc:9c:76:dd:8f:69:1a:b0:1a:36:b7:6f:
         fd:1f:31:72:f5:9a:0b:a2:e8:07:96:9a:ce:c2:97:d6:6d:32:
         b7:54:a9:55:03:07:0a:65:49:58:b0:c6:45:e2:82:5f:2f:ef:
         70:5b:33:fd:f5:a1:50:45:dd:cd:9c:f5:8b:b4:e4:bb:f3:89:
         16:47:bd:29:96:7b:7d:88:6c:19:aa:12:1c:24:ab:69:6f:d1:
         69:2e:c2:7c:60:b5:ab:69:2f:a3:4d:6d:80:0c:7a:b5:b0:61:
         68:61:c9:c8:31:34:50:f7:e8:22:9d:96:66:35:89:a1:04:d1:
         ea:a7:f4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:52 2026 by rpki-client