This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/6A7B1D3AA66111F0BF55D666C4F9AE02.roa
File:                     6A7B1D3AA66111F0BF55D666C4F9AE02.roa (raw, json)
Hash identifier:          E0eYpG32X36a/ONs+clfHrLakC3KEtt7T7RxP7O61L0=
Subject key identifier:   C6:93:A4:38:4F:5C:E5:F8:EB:F7:73:ED:5A:01:68:C6:72:7C:26:3B
Certificate issuer:       /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial:       02D1
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/6A7B1D3AA66111F0BF55D666C4F9AE02.roa
Signing time:             Fri 09 Jan 2026 01:20:43 +0000
ROA not before:           Fri 09 Jan 2026 01:20:43 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     21859
IP address blocks:        103.82.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
                          rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721 (0x2d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
        Validity
            Not Before: Jan  9 01:20:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696057eb-6c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:52:9b:9f:54:90:38:1a:c5:4e:f2:39:dc:
                    ee:02:44:c2:27:56:63:d3:bc:63:56:50:3e:f1:dd:
                    a5:96:cf:37:66:12:07:2d:49:3b:f1:e3:f5:e6:24:
                    a2:46:67:24:a9:5f:6c:56:0a:47:22:e7:04:1d:43:
                    fb:2a:13:8b:38:5b:f8:b0:49:6f:b1:47:32:1f:2c:
                    65:af:9d:62:3e:19:45:98:9d:1e:77:6a:61:07:b1:
                    1b:f5:99:ce:88:f1:a9:3b:d6:82:ed:9c:ec:3f:10:
                    72:84:16:a8:3b:e3:8e:9a:b1:29:f3:a1:ab:df:47:
                    09:de:5f:c6:c1:69:ac:de:53:58:01:51:e4:18:1e:
                    ea:74:63:24:9c:55:92:9d:83:50:7f:c5:d6:95:da:
                    4e:ab:72:b4:6a:38:90:8d:2a:0b:61:3d:1c:70:09:
                    93:da:f2:a9:40:33:fc:a2:65:38:5c:78:d4:6c:8d:
                    b8:b4:02:49:78:6b:73:0f:a8:d6:c1:10:95:00:f3:
                    16:78:d5:3c:b2:82:5b:9b:04:df:78:df:7f:6f:4d:
                    17:b7:70:1f:86:ec:69:bc:ac:81:3b:5c:5f:10:e9:
                    83:6f:aa:9f:f7:58:bc:92:d3:a2:f6:4e:19:cc:da:
                    14:d2:d8:03:5e:b3:a6:09:e4:86:8b:73:ac:9c:30:
                    1c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:93:A4:38:4F:5C:E5:F8:EB:F7:73:ED:5A:01:68:C6:72:7C:26:3B
            X509v3 Authority Key Identifier:
                keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/6A7B1D3AA66111F0BF55D666C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:6b:3c:f6:8b:e0:0a:b6:86:68:0a:84:5b:bb:76:9f:df:44:
         a3:15:de:ba:d1:53:06:58:18:29:a7:d8:e3:33:b8:a3:47:fa:
         ad:2c:a2:31:7e:47:36:9a:8b:2f:dd:c2:15:9a:98:ac:77:3b:
         66:df:63:43:a1:f1:be:fd:62:24:b2:92:7e:03:58:73:71:03:
         b7:47:e9:ed:9f:96:bf:ab:ea:4c:3d:e7:66:1a:08:3e:85:b5:
         f3:13:b0:86:54:01:a8:85:10:9d:ef:cf:2a:a1:c7:e0:0b:78:
         01:55:ad:c2:9b:7c:2d:0e:3f:e3:29:0e:70:0f:70:bc:2a:c8:
         48:b3:92:87:b1:4e:ef:fb:ad:0e:8a:c0:2d:39:f4:d9:30:1e:
         23:4e:b5:a0:51:d6:61:78:79:a7:0b:b8:3b:9f:25:a3:c1:ed:
         68:ec:57:3e:42:08:7c:59:69:7a:e9:2b:0a:47:b2:10:49:47:
         68:e7:6a:f0:01:46:8e:a4:89:aa:e2:57:d8:1a:a0:9a:92:21:
         9c:20:a0:24:48:08:44:de:65:13:50:e7:a7:73:9d:8e:9d:14:
         cb:93:99:dc:63:12:9a:0f:e2:50:7a:bb:7f:8d:2b:d5:33:7f:
         de:2a:23:a4:cc:1b:91:fa:76:c6:3a:b1:a3:1f:26:3b:08:49:
         52:1e:07:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:35 2026 by rpki-client