This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/36477FF69D2E11E99A95DC2AC4F9AE02.roa
File:                     36477FF69D2E11E99A95DC2AC4F9AE02.roa (raw, json)
Hash identifier:          alUOeCKJ2MY0GW2hS2QrAY4PPh9KutpvKrc9XRXM1WU=
Subject key identifier:   9E:3E:BE:16:7F:C9:DE:65:13:6C:42:09:7A:D6:29:17:9A:14:14:4B
Certificate issuer:       /CN=A91478C3/serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114
Certificate serial:       0EC3
Authority key identifier: 91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/36477FF69D2E11E99A95DC2AC4F9AE02.roa
Signing time:             Sat 20 Dec 2025 18:14:59 +0000
ROA not before:           Sat 20 Dec 2025 18:14:58 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138468
IP address blocks:        103.126.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl
                          rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 18:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3779 (0xec3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91478C3, serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114
        Validity
            Not Before: Dec 20 18:14:58 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6946e7a2-e204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:79:95:a9:55:56:95:c0:43:c7:36:70:1a:
                    12:9b:6b:ff:36:b5:be:8e:1b:0a:e5:84:63:90:92:
                    28:1a:e2:ca:31:93:5e:da:42:23:27:0d:31:04:90:
                    7e:7b:3d:ea:cc:e7:36:75:ed:b2:c0:6e:e3:50:15:
                    1c:00:23:86:ff:75:6e:d6:80:df:a1:11:33:30:11:
                    05:e9:68:09:6f:b7:aa:32:1b:f8:6d:97:52:a7:64:
                    04:8f:85:ac:bf:81:11:b1:22:11:84:bc:ec:56:71:
                    bc:45:47:bb:49:b0:29:4f:92:d0:df:f8:f5:3e:d2:
                    75:0a:c0:46:e4:1a:d4:5b:38:be:9f:82:a0:c3:8d:
                    d8:86:7f:d9:ad:c6:23:1b:80:bc:da:ef:b0:c9:08:
                    ae:90:58:4c:01:93:8c:07:31:69:b6:a4:6e:89:fa:
                    f9:d5:19:10:21:a1:99:98:30:5c:1e:87:83:10:03:
                    76:6b:d1:5c:8f:aa:63:c7:9a:fa:b5:be:06:ff:4b:
                    94:de:5e:ca:7a:2a:67:6e:14:57:a6:a2:21:cf:89:
                    8b:36:1d:84:3b:a0:26:b0:18:e9:c8:45:4a:d3:a1:
                    c3:0e:b2:07:43:75:ea:73:1f:6b:e1:7a:6c:84:55:
                    a7:f9:42:e0:35:9c:04:0a:20:8e:c5:61:01:15:1f:
                    1d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3E:BE:16:7F:C9:DE:65:13:6C:42:09:7A:D6:29:17:9A:14:14:4B
            X509v3 Authority Key Identifier:
                keyid:91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/36477FF69D2E11E99A95DC2AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:6e:f4:3e:04:f8:2f:ac:d4:f9:09:8e:7c:f8:74:44:bf:32:
         32:ff:4e:2c:31:82:44:19:c1:0d:e1:a1:16:48:60:a3:94:e7:
         e1:13:4c:ec:c4:33:d8:0f:f6:12:ef:72:c3:53:1c:ee:86:e7:
         9c:1b:e4:a6:fd:0e:d7:42:f0:13:cd:2b:91:50:e1:fd:06:f8:
         9c:bb:31:98:21:7a:f7:20:20:a3:c0:db:ab:77:66:c2:b6:af:
         d1:74:a1:0d:69:f2:38:e7:d7:ff:56:16:ec:cb:cd:40:67:14:
         c7:29:57:d6:67:2c:fa:29:ca:8d:ae:15:e7:1d:63:37:f7:a5:
         cc:01:c1:5e:4c:46:4b:47:e9:97:96:c5:40:bd:e5:fa:da:24:
         05:b0:2a:21:01:3c:93:5a:ed:9b:41:ce:69:73:46:dc:d0:92:
         78:17:8c:ca:3d:05:af:c5:49:41:a1:b6:24:93:11:f8:b6:ca:
         21:65:00:39:f7:87:59:b7:29:5d:e7:30:16:1b:95:19:55:5b:
         1f:5a:d1:dc:a0:04:58:fb:63:73:82:87:16:8d:05:d7:98:70:
         01:c9:62:07:8e:6e:1a:02:3b:39:fd:7d:3b:58:9a:0d:57:b5:
         d7:6f:b9:6f:16:ba:c5:5d:90:a2:29:6b:ee:7f:58:07:24:1b:
         6e:d9:44:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:30:06 2025 by rpki-client