This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/622E19EEDA1811F0A393A6F584D3641D.roa
File:                     622E19EEDA1811F0A393A6F584D3641D.roa (raw, json)
Hash identifier:          4HGBiiRUS1Jl2V3SjyQy8wZ0UMuM3SxhjI47CzUdaDA=
Subject key identifier:   9F:1D:D2:18:28:F6:C5:FF:EF:EE:73:AD:BA:FD:4A:A4:CD:19:01:2D
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0CB7
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/622E19EEDA1811F0A393A6F584D3641D.roa
Signing time:             Tue 16 Dec 2025 00:44:31 +0000
ROA not before:           Tue 16 Dec 2025 00:44:31 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     197537
IP address blocks:        103.26.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 01:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3255 (0xcb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Dec 16 00:44:31 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6940ab6f-b4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:47:6a:dc:8b:70:46:5b:3f:f9:6d:84:f2:00:
                    b5:cb:27:4b:aa:59:04:99:64:40:5f:4a:ec:c3:c6:
                    d3:c1:91:3a:d1:22:71:1b:4c:f9:9b:a8:24:75:03:
                    ac:da:55:64:a0:78:67:40:3c:b6:da:6b:d2:6a:b0:
                    fb:e3:6c:44:15:e0:1c:c6:37:45:09:9a:39:17:40:
                    02:a3:a5:9d:04:fa:80:1a:80:eb:53:6c:d0:50:b8:
                    0a:92:f1:31:69:b1:c1:81:82:37:70:6b:17:89:d3:
                    74:13:3a:b7:18:11:15:03:e5:c9:8e:0a:ce:b3:bb:
                    ef:6f:9c:72:7a:5b:37:92:12:2f:0d:ce:f0:da:60:
                    ce:51:39:99:60:6d:46:16:73:1d:24:7b:6e:d4:45:
                    7b:4d:b1:d9:ea:74:46:fc:e9:42:89:da:62:f2:7c:
                    37:84:6d:71:a1:d2:fd:89:2a:c8:26:e7:a3:ee:ee:
                    04:c9:71:a5:33:16:08:54:7d:5f:a2:53:46:1d:47:
                    c4:27:77:ac:35:74:cc:8c:dc:bb:80:e2:f9:81:90:
                    97:6c:d4:de:02:72:87:ce:e6:0c:e6:64:21:bc:e0:
                    8c:e6:46:e1:d2:79:9a:36:f8:41:09:69:5b:6b:59:
                    b8:a1:0a:ae:d5:72:e5:94:96:12:a1:58:67:2f:fc:
                    54:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1D:D2:18:28:F6:C5:FF:EF:EE:73:AD:BA:FD:4A:A4:CD:19:01:2D
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/622E19EEDA1811F0A393A6F584D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:8b:30:bb:06:ee:89:4f:e3:01:cd:da:60:6c:9f:07:1c:58:
         44:77:62:b8:bb:cf:e0:40:48:7b:5a:1b:e2:0d:de:87:b0:a7:
         b1:de:9f:6c:64:9a:63:f1:d2:a0:f8:dd:17:c9:31:a2:76:aa:
         a0:f9:9b:62:f1:ca:62:b3:9d:e9:4e:4f:c9:d4:b0:6e:17:a8:
         58:89:a5:12:02:fd:17:a1:2b:5f:27:59:9b:f6:26:3d:ce:13:
         25:ff:21:4e:55:cf:7f:28:78:56:57:c9:40:9e:3f:1f:e4:55:
         d7:b0:55:ce:35:8c:73:79:8d:44:bc:f1:92:1e:d3:d6:ef:68:
         cb:0e:62:a6:c2:3b:e0:33:3b:a5:38:18:aa:19:44:c8:a2:d5:
         0c:c0:a4:a8:ec:5e:20:7b:28:21:ab:1d:92:08:ac:ae:ee:67:
         f4:23:79:5e:79:44:14:ad:62:d7:b1:50:22:ee:63:2a:bf:e4:
         1a:35:4d:d7:0a:c9:91:51:ea:49:2f:d8:7f:a9:bf:39:45:69:
         55:27:a1:bf:46:8d:ea:b1:a5:9b:b3:a8:ed:b9:ae:85:46:79:
         5c:98:e6:fa:ef:03:10:95:39:d2:7b:90:15:69:d8:da:75:bb:
         c4:6d:3e:ae:ac:4f:a4:ae:df:b9:88:11:4d:95:49:d0:13:91:
         e7:8b:51:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:09:21 2025 by rpki-client