This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/1E76B980C4BA11E78E05EE70C4F9AE02.roa
File:                     1E76B980C4BA11E78E05EE70C4F9AE02.roa (raw, json)
Hash identifier:          d7zKEGh0lk8izfNZY0knPSNCV7Y5mFUGLfE2IWUfUWg=
Subject key identifier:   53:FC:60:04:7E:46:74:84:DB:5C:A2:22:25:6A:47:3E:E2:2A:71:E8
Certificate issuer:       /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Certificate serial:       1868
Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/1E76B980C4BA11E78E05EE70C4F9AE02.roa
Signing time:             Wed 26 Nov 2025 16:34:48 +0000
ROA not before:           Wed 26 Nov 2025 16:34:48 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     135636
IP address blocks:        103.77.76.0/22 maxlen: 22
                          103.77.76.0/23 maxlen: 23
                          103.77.76.0/24 maxlen: 24
                          103.77.77.0/24 maxlen: 24
                          103.77.78.0/24 maxlen: 24
                          2407:8f80::/32 maxlen: 32
                          2407:8f80:88::/48 maxlen: 48
                          2407:8f80:99::/48 maxlen: 48
                          2407:8f80:12ac::/48 maxlen: 48
                          2407:8f80:8000::/36 maxlen: 36
                          2407:8f80:8003::/48 maxlen: 48
                          2407:8f80:8080::/48 maxlen: 48
                          2407:8f80:a51a::/48 maxlen: 48
                          2407:8f80:b003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl
                          rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6248 (0x1868)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FB, serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
        Validity
            Not Before: Nov 26 16:34:48 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69272c28-d47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6d:a9:45:a5:57:1e:5d:85:26:d6:f8:af:5b:
                    43:fe:76:c6:06:65:af:12:81:69:92:15:dc:17:9f:
                    25:5b:7f:1a:7e:17:0f:5d:21:68:6a:12:6f:40:ec:
                    27:45:46:38:aa:61:cd:6c:d8:4b:4a:f0:0d:a8:aa:
                    28:51:09:75:f6:de:6c:86:29:70:ca:c8:90:eb:16:
                    ad:60:8a:e2:29:be:9e:f3:1e:6e:31:92:e0:86:e9:
                    9a:88:48:3f:bd:ca:31:f7:6b:96:89:c0:dd:4a:b5:
                    14:a9:7a:22:91:f6:99:f6:21:df:03:bb:0e:c1:1d:
                    68:e5:fa:a3:f1:dc:23:8b:0e:a7:61:24:27:45:5a:
                    ed:83:00:83:d2:dc:f1:5d:46:6f:f5:39:66:40:d8:
                    72:92:70:87:77:6a:b0:b9:18:c1:f4:f2:51:9c:9d:
                    84:b5:5b:1e:98:3f:11:78:1d:37:ec:e7:c3:70:3d:
                    0e:23:fe:39:d3:65:57:2a:b9:2b:ce:46:7c:65:2c:
                    b8:d2:e0:cb:22:b7:b4:4e:4b:ed:bd:6a:df:36:5f:
                    1f:42:25:1e:e6:64:89:2b:c8:79:a9:58:f4:7e:bf:
                    f6:0d:db:1d:72:30:72:ca:2c:27:27:2d:6f:8f:15:
                    dc:62:f8:e8:3c:ec:c8:ea:44:7a:97:5b:ce:01:32:
                    dd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FC:60:04:7E:46:74:84:DB:5C:A2:22:25:6A:47:3E:E2:2A:71:E8
            X509v3 Authority Key Identifier:
                keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/1E76B980C4BA11E78E05EE70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.76.0/22
                IPv6:
                  2407:8f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:81:db:b5:23:fd:e5:50:ab:05:ef:af:32:44:a6:e7:5b:3d:
         02:be:cc:20:f4:8e:0c:66:ea:85:d5:d9:f7:8c:1b:8f:4d:fc:
         1c:25:34:11:5d:74:37:d4:19:aa:1c:0e:24:45:68:d6:fe:e6:
         0d:dd:f4:8c:e4:98:19:fc:c1:76:fd:ad:62:fc:da:2d:e1:2d:
         6f:d2:de:56:42:ad:1f:f9:9b:ca:9f:e0:31:ba:54:56:17:5d:
         9a:43:0f:73:44:f2:0e:b2:4c:f9:f0:56:ae:eb:9b:6b:93:b8:
         62:ed:7a:57:b0:bd:7c:a9:5a:58:4b:67:a2:6a:62:5a:2a:99:
         a0:16:15:59:9d:5f:8c:15:21:9d:48:6c:03:1b:8a:42:da:e1:
         89:85:bf:07:80:d5:da:f6:eb:6d:25:77:e4:16:89:70:8b:88:
         5f:a5:ee:57:f3:30:a4:26:e4:cf:f2:77:93:15:e7:c2:cf:77:
         b0:55:b6:d8:17:10:56:ba:5c:f0:2d:b1:b2:81:12:0d:f6:4f:
         b0:1d:b8:4d:e8:92:2b:84:97:83:48:a7:f6:0d:49:25:5d:43:
         09:26:25:c5:39:79:27:86:f3:53:5c:7a:a3:10:41:88:d3:c6:
         80:14:43:7f:00:2b:5e:d8:aa:01:a7:a8:f1:8d:f6:80:6d:48:
         98:bd:15:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:44:55 2025 by rpki-client