This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/98FA03FEF12211F0824B03824F6F56BC.roa
File:                     98FA03FEF12211F0824B03824F6F56BC.roa (raw, json)
Hash identifier:          syNViiddPgrptztOQW5Hcm1aP4N7pLsbiDy/2S6U/sk=
Subject key identifier:   4F:1F:B7:3C:4A:4C:81:76:60:09:42:1E:0C:B6:E8:E5:FE:AF:80:69
Certificate issuer:       /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial:       0D44
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/98FA03FEF12211F0824B03824F6F56BC.roa
Signing time:             Wed 14 Jan 2026 08:27:18 +0000
ROA not before:           Wed 14 Jan 2026 08:27:18 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     138638
IP address blocks:        103.135.88.0/24 maxlen: 24
                          103.135.89.0/24 maxlen: 24
                          103.135.90.0/24 maxlen: 24
                          2404:7840::/32 maxlen: 32
                          2404:7840::/48 maxlen: 48
                          2404:7840:1::/48 maxlen: 48
                          2404:7840:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
                          rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3396 (0xd44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
        Validity
            Not Before: Jan 14 08:27:18 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69675366-8721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:59:44:ae:3e:ce:fe:ae:62:39:f4:a0:68:
                    75:ba:3a:60:ee:80:73:be:45:40:0a:ff:c4:f0:3c:
                    7c:1c:d8:fc:0a:d9:15:0f:65:43:7f:1e:c6:9c:dc:
                    8b:c3:d0:ed:d9:3d:b1:b6:99:ce:d5:aa:39:09:38:
                    c6:20:61:8a:ee:09:67:d7:da:11:da:8c:84:1a:2e:
                    35:20:79:af:99:47:df:c9:ec:cb:90:09:b8:e4:a0:
                    84:af:3b:ff:34:4d:ef:75:de:78:94:47:f2:d4:fe:
                    a4:0b:74:6c:8d:10:27:58:bc:ce:96:33:e4:5b:fa:
                    43:90:5d:17:db:f2:b5:6d:45:00:71:36:48:7a:4e:
                    ae:c5:1b:20:c9:f2:f8:d1:7b:a8:5e:39:4d:32:11:
                    6b:b8:fe:65:46:a9:35:25:b8:1f:33:45:5e:f4:6e:
                    f1:6f:61:7d:d5:9a:e6:54:73:ea:8c:14:4e:65:bb:
                    9a:60:b1:f4:2c:2a:01:6e:1a:99:ef:18:f2:60:e0:
                    ec:4b:12:ab:9e:20:86:fd:ad:7a:a0:c0:28:89:40:
                    8f:8d:c2:d2:c3:7a:df:9f:e2:5c:98:68:84:3c:28:
                    b5:eb:3e:ad:30:a3:79:a4:b9:9e:e6:f4:d4:4f:08:
                    7f:ff:99:b7:8d:d2:c4:19:e4:42:7c:5c:e5:b4:c2:
                    7f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1F:B7:3C:4A:4C:81:76:60:09:42:1E:0C:B6:E8:E5:FE:AF:80:69
            X509v3 Authority Key Identifier:
                keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/98FA03FEF12211F0824B03824F6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.88.0-103.135.90.255
                IPv6:
                  2404:7840::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:e9:c9:8e:22:37:55:98:b4:3f:3b:c1:92:fc:a6:45:a5:69:
         a5:af:08:2c:69:25:22:b5:73:04:4f:3c:b3:ae:ee:2a:ad:69:
         cb:57:00:47:96:5d:7e:0a:7d:4b:3d:ed:39:00:d2:a0:10:a1:
         7a:42:39:31:2b:6c:1a:82:eb:87:61:18:aa:8c:2e:3e:bf:99:
         e3:56:cf:3c:8c:fd:51:f5:dd:e6:fe:14:d3:d3:04:b8:b9:6e:
         b8:c2:3e:0c:11:5f:33:b6:60:8b:85:f1:cd:ce:5f:5f:20:41:
         d5:02:fd:8d:04:2d:d3:3b:2a:30:b7:9d:31:7e:3f:76:81:51:
         d3:96:df:48:12:b4:1c:39:9d:2b:d2:93:67:32:45:d3:8b:be:
         01:6b:53:93:ea:22:8f:14:be:86:00:ff:33:b5:04:62:6b:db:
         b4:57:4a:78:7f:2c:8b:84:a0:30:5a:0a:39:b3:5b:9e:a5:46:
         e6:a3:81:1d:b4:86:4f:c6:e1:36:8f:e4:16:23:b4:f8:90:f6:
         02:8e:29:d2:03:2b:95:69:e3:27:f8:c9:16:2f:ef:c9:ca:20:
         54:38:3a:14:18:14:33:bc:7f:83:57:28:18:d5:f7:82:2f:3e:
         d3:60:05:32:05:a5:8f:f2:c2:3b:44:67:21:bb:1b:39:0a:56:
         59:ad:e4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:01:30 2026 by rpki-client