This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/83B1E1429AAB11F0AFE54B2AC4F9AE02.roa
File:                     83B1E1429AAB11F0AFE54B2AC4F9AE02.roa (raw, json)
Hash identifier:          wh36Ta7YTtT28VTO5sjvk5qtFgY2ivfteBl9PypKiYs=
Subject key identifier:   B4:50:8F:E9:7A:81:ED:31:3D:C1:F4:81:3C:82:D7:68:CA:E9:A2:C0
Certificate issuer:       /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial:       0BC2
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/83B1E1429AAB11F0AFE54B2AC4F9AE02.roa
Signing time:             Thu 22 Jan 2026 11:14:01 +0000
ROA not before:           Thu 22 Jan 2026 11:14:01 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     202736
IP address blocks:        103.245.233.0/24 maxlen: 24
                          103.245.234.0/24 maxlen: 24
                          103.245.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
                          rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3010 (0xbc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
        Validity
            Not Before: Jan 22 11:14:01 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69720679-af46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:39:90:c2:d9:3e:04:6e:f3:21:e6:1a:33:74:
                    45:32:43:ae:37:d5:96:ca:43:b6:81:64:be:69:bf:
                    ec:af:a9:50:46:4f:5a:7b:27:97:69:ab:b2:28:d2:
                    df:18:09:cd:96:dc:bc:91:19:59:ce:f5:86:dd:42:
                    6b:89:18:c2:11:47:bc:0d:8d:ac:c5:a5:6b:55:66:
                    64:da:c2:27:5a:17:eb:5c:3c:41:9e:c6:7f:60:27:
                    16:4d:c5:22:d9:51:4b:1c:b1:ea:e0:6f:50:29:92:
                    87:0b:46:f0:9c:c0:99:25:ec:89:c9:a1:95:a6:4a:
                    0e:af:bd:0a:b5:c0:3d:95:eb:1a:2c:fd:82:05:9c:
                    23:8a:95:ad:12:2f:f6:45:31:de:3e:88:da:60:37:
                    5e:d6:5e:d9:99:8d:06:52:bc:1d:6f:12:43:ed:45:
                    a2:20:42:11:b7:49:fa:70:4b:e9:6c:3b:9f:81:09:
                    5c:fa:19:10:3d:88:10:45:cc:74:fe:a4:c8:c6:78:
                    27:79:31:55:67:43:2b:c0:d4:eb:b2:a2:9b:89:87:
                    35:63:66:b7:b8:15:61:bf:f1:d1:52:1a:1d:e1:32:
                    36:f2:76:61:df:72:25:17:a1:7a:f1:d2:80:11:37:
                    f2:61:8f:76:1b:9e:64:32:dc:18:a2:e3:8b:0e:c1:
                    32:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:50:8F:E9:7A:81:ED:31:3D:C1:F4:81:3C:82:D7:68:CA:E9:A2:C0
            X509v3 Authority Key Identifier:
                keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/83B1E1429AAB11F0AFE54B2AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.233.0-103.245.235.255

    Signature Algorithm: sha256WithRSAEncryption
         aa:0f:57:83:47:4b:62:50:b6:5a:45:a8:b0:75:e1:90:96:9d:
         dc:80:2f:32:19:1e:78:33:68:37:e0:dd:e4:fc:16:ec:c8:ea:
         90:15:08:eb:08:99:53:a5:f6:38:da:52:3e:ca:d8:e9:cb:bd:
         19:90:95:f2:70:90:8a:db:b6:66:a9:0d:34:86:e4:13:00:2d:
         d7:0b:77:7b:52:5f:10:3f:36:d8:41:70:0a:c1:69:de:89:23:
         b9:c3:2d:5b:03:d8:2e:2e:1e:c6:1c:bb:0e:af:bc:7e:c7:fc:
         e2:8b:21:47:1b:6b:10:32:ca:8d:40:f9:aa:f8:0c:3d:3e:9e:
         d0:5b:21:66:74:3f:1d:ee:96:1d:07:20:50:33:be:be:c8:bc:
         7e:32:22:88:fb:d3:6f:4e:4a:f9:ec:69:1f:70:30:f2:2b:4d:
         9e:d1:67:18:c2:dd:08:9a:6e:e5:27:80:4d:4e:20:8e:fc:e6:
         d4:38:54:b1:f0:63:5b:f6:94:52:71:63:a8:35:93:8f:87:76:
         65:54:ca:ff:df:44:40:d3:52:f5:96:00:41:13:e7:06:07:71:
         1c:0b:87:6e:92:51:37:23:ba:b7:fb:b1:6f:35:e5:13:ac:bc:
         90:51:88:fa:ca:23:c2:f3:20:8a:29:8e:06:ce:ad:c5:e2:1d:
         74:49:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:22 2026 by rpki-client