This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/56FB3BA630DB11EBB36CAB54C4F9AE02.roa
File:                     56FB3BA630DB11EBB36CAB54C4F9AE02.roa (raw, json)
Hash identifier:          7nknJ+mDdSX3y6k1SKMVvTjdqE4xf4c/ZgV1KwRBeJg=
Subject key identifier:   86:A0:29:38:EB:93:93:F8:54:2F:A6:49:E9:B5:DF:C1:E2:A9:73:6D
Certificate issuer:       /CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
Certificate serial:       0798
Authority key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/56FB3BA630DB11EBB36CAB54C4F9AE02.roa
Signing time:             Thu 04 Dec 2025 20:34:42 +0000
ROA not before:           Thu 04 Dec 2025 20:34:42 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138333
IP address blocks:        103.159.26.0/23 maxlen: 23
                          103.159.26.0/24 maxlen: 24
                          103.159.27.0/24 maxlen: 24
                          2406:c8c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl
                          rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1944 (0x798)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688C4, serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
        Validity
            Not Before: Dec  4 20:34:42 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6931f061-1f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:40:18:3b:f6:6b:3c:d8:79:c7:b8:d1:59:8c:
                    18:18:f0:c5:8a:d2:e7:0b:0d:0a:15:74:b4:2a:ac:
                    4a:ee:61:d9:c7:15:1d:c9:b9:a8:52:b6:de:cc:19:
                    a1:8c:8c:c8:7f:4e:b2:20:df:65:2e:78:bf:0a:7d:
                    f9:92:e1:24:1f:bd:ea:69:54:46:cb:7d:71:b7:04:
                    d2:de:17:3a:42:fd:68:69:89:a2:4a:68:a5:d6:29:
                    71:36:b1:37:ff:d4:af:df:73:7b:5a:77:8a:77:2d:
                    97:dc:0b:70:9d:e8:f5:f3:7a:9e:be:9d:a4:a3:e1:
                    1b:4e:4e:b3:f5:c6:7e:c2:5c:b8:6c:e7:68:73:99:
                    cc:53:6e:78:1e:bd:f7:8a:05:96:3f:e6:c0:19:ea:
                    cc:2d:b6:74:ac:e2:49:4a:5a:93:e9:5b:46:09:3f:
                    df:7b:1d:ea:9f:8f:f1:70:53:79:90:16:ae:00:2e:
                    73:f9:1f:cc:88:3f:59:85:a6:54:e2:fd:92:75:00:
                    ce:14:0c:24:5f:da:80:1d:08:f5:1f:07:e8:d0:33:
                    91:ad:5b:b1:2f:95:24:2a:a9:3f:2d:34:b6:48:fe:
                    ee:a2:92:84:2e:ef:72:db:91:c5:69:63:1c:26:34:
                    ee:c0:ba:e6:82:3e:e9:dd:ac:8a:34:9e:6d:f5:fa:
                    04:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A0:29:38:EB:93:93:F8:54:2F:A6:49:E9:B5:DF:C1:E2:A9:73:6D
            X509v3 Authority Key Identifier:
                keyid:68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/56FB3BA630DB11EBB36CAB54C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.26.0/23
                IPv6:
                  2406:c8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:35:5c:6e:ab:25:0a:ad:9e:21:5b:33:12:fa:b5:06:16:4d:
         8a:4e:49:66:c7:e5:fe:9f:d2:f3:47:e7:8b:1a:70:b6:d1:be:
         06:98:ab:58:41:37:07:db:fc:c0:30:44:cf:03:e0:65:b6:5b:
         0e:50:7e:58:e5:ee:84:f1:56:bf:3e:4d:2e:9f:bd:5f:30:41:
         e8:cb:a3:d1:b0:8a:52:14:9d:8f:f6:28:a5:ac:c0:ee:4b:30:
         12:75:14:e4:2d:ce:a4:20:d6:d6:02:68:b2:86:7f:91:ba:a7:
         56:e5:df:a0:c3:82:aa:ea:69:a8:0a:b8:7c:35:55:a1:9a:a8:
         c5:db:34:7b:bc:df:4b:60:5a:3d:4e:d3:53:91:cc:d9:2b:45:
         71:6a:17:05:57:f2:39:08:7c:a5:35:c4:ac:c7:59:fb:02:dc:
         e3:9b:dd:b5:38:0f:75:d8:8e:f8:9d:fd:b4:90:67:13:19:ba:
         74:82:09:28:b1:78:91:2d:1e:4c:48:b9:e6:8f:7a:d6:24:36:
         a8:6d:58:d8:ba:c0:4f:30:77:15:aa:d1:17:a4:d6:e2:7c:18:
         71:80:cc:7f:ff:ac:cd:48:99:42:f0:22:c4:a2:26:8d:68:d6:
         0f:d5:8e:96:8f:87:8f:0a:ed:c5:47:7a:92:aa:55:2d:02:e7:
         8d:02:de:07
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg4QzQxMTAvBgNVBAUTKDY4OUI0M0I0OEUxMTFFNjlGMURGNzlDQ0EyMTFDQ0I0
MjY1QTI2N0IwHhcNMjUxMjA0MjAzNDQyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMxZjA2MS0xZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA30AYO/ZrPNh5x7jRWYwYGPDFitLnCw0KFXS0KqxK7mHZxxUdybmoUrbezBmh
jIzIf06yIN9lLni/Cn35kuEkH73qaVRGy31xtwTS3hc6Qv1oaYmiSmil1ilxNrE3
/9Sv33N7WneKdy2X3Atwnej183qevp2ko+EbTk6z9cZ+wly4bOdoc5nMU254Hr33
igWWP+bAGerMLbZ0rOJJSlqT6VtGCT/fex3qn4/xcFN5kBauAC5z+R/MiD9ZhaZU
4v2SdQDOFAwkX9qAHQj1Hwfo0DORrVuxL5UkKqk/LTS2SP7uopKELu9y25HFaWMc
JjTuwLrmgj7p3ayKNJ5t9foENQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIagKTjr
k5P4VC+mSem138HiqXNtMB8GA1UdIwQYMBaAFGibQ7SOER5p8d95zKIRzLQmWiZ7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhDNC9EODk0N0VCODMw
RDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0UkhtbngzM25Nb2hITXRDWmFK
bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FKdER0STRSSG1ueDMzbk1vaEhNdENaYUpucy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njg4QzQvRDg5NDdFQjgzMEQ5MTFFQjg3RTA5MzUzQzRGOUFFMDIvNTZGQjNCQTYz
MERCMTFFQkIzNkNBQjU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnnxowDQQCAAIwBwMFACQGyMAwDQYJKoZIhvcNAQELBQAD
ggEBAEs1XG6rJQqtniFbMxL6tQYWTYpOSWbH5f6f0vNH54sacLbRvgaYq1hBNwfb
/MAwRM8D4GW2Ww5Qfljl7oTxVr8+TS6fvV8wQejLo9GwilIUnY/2KKWswO5LMBJ1
FOQtzqQg1tYCaLKGf5G6p1bl36DDgqrqaagKuHw1VaGaqMXbNHu830tgWj1O01OR
zNkrRXFqFwVX8jkIfKU1xKzHWfsC3OOb3bU4D3XYjvid/bSQZxMZunSCCSixeJEt
HkxIueaPetYkNqhtWNi6wE8wdxWq0Rek1uJ8GHGAzH//rM1ImULwIsSiJo1o1g/V
jpaPh48K7cVHepKqVS0C540C3gc=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:36:41 2025 by rpki-client