This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/190BF77EF45111F0A4BBE8C5636F56BC.roa
File:                     190BF77EF45111F0A4BBE8C5636F56BC.roa (raw, json)
Hash identifier:          T9zTFD8t5iAT4BJ5kz1JfALQdOT9Z+zWZOt5wI0jE6I=
Subject key identifier:   D8:B7:3E:03:54:1D:29:CE:5F:CC:63:E2:D5:D3:0F:BC:4D:BC:D4:87
Certificate issuer:       /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45
Certificate serial:       081E
Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/190BF77EF45111F0A4BBE8C5636F56BC.roa
Signing time:             Sun 18 Jan 2026 09:36:00 +0000
ROA not before:           Sun 18 Jan 2026 09:36:00 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     154433
IP address blocks:        103.59.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl
                          rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2078 (0x81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45
        Validity
            Not Before: Jan 18 09:36:00 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=696ca980-b66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:83:07:22:1c:15:71:72:45:a0:f4:b7:11:81:
                    83:e0:92:af:2b:d2:08:8a:08:55:fe:b5:a6:1a:c1:
                    29:76:82:11:f9:12:af:00:31:34:98:ca:57:b8:6d:
                    b5:d6:78:f9:9b:a2:c3:69:67:8c:0d:88:39:d2:9c:
                    01:15:5f:66:7e:ae:cf:fa:87:b9:92:82:d9:87:70:
                    7b:fd:b0:e1:71:7b:cd:d1:d7:88:13:98:79:18:89:
                    9e:6f:d5:db:69:34:6a:2d:fe:da:a1:94:a6:e3:5a:
                    65:a3:65:ae:38:6a:ee:21:8e:47:86:71:23:ce:12:
                    86:1c:1c:ff:2f:c0:fc:f4:f0:4a:cb:93:e8:6d:81:
                    8d:a5:c5:04:99:c3:11:2e:5d:97:a1:1c:d1:69:02:
                    54:8a:14:a8:71:1a:f5:a9:51:16:3b:87:29:bf:09:
                    a0:ab:ea:c3:57:ed:99:bd:35:f8:c0:ec:df:b4:c2:
                    57:0f:aa:be:22:d3:4f:72:0d:b0:5a:64:16:c6:8c:
                    77:12:08:99:49:27:ca:e0:ae:aa:8e:9f:1d:c7:1d:
                    35:5a:b8:55:f9:37:6b:d8:32:f0:0f:84:f0:80:57:
                    45:b0:2e:29:60:c2:22:7f:c1:c3:2b:c8:c9:7a:eb:
                    69:1f:b2:20:92:3c:32:3f:85:4c:01:93:64:e0:92:
                    c0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B7:3E:03:54:1D:29:CE:5F:CC:63:E2:D5:D3:0F:BC:4D:BC:D4:87
            X509v3 Authority Key Identifier:
                keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/190BF77EF45111F0A4BBE8C5636F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:16:56:47:ae:e1:33:ce:8b:1c:a5:f7:40:3f:07:fa:65:51:
         25:e9:93:44:ca:55:98:fa:32:6e:aa:41:e6:b7:f8:76:c7:b9:
         ed:d9:16:a4:f7:c8:04:01:9e:1e:f8:87:d5:af:a8:ee:7f:db:
         d1:4f:a1:18:2f:14:4b:21:c6:f4:1f:7d:86:1d:d3:39:75:31:
         84:a7:9b:0a:4e:78:ad:76:7a:b7:90:7d:b1:c4:a1:28:ef:47:
         b3:e3:c1:5e:be:c1:2e:d5:4e:64:97:c7:59:84:de:97:07:d0:
         6f:9f:8c:09:16:b1:df:24:cd:11:f7:11:25:cc:e5:98:cd:0e:
         4f:5b:c2:0e:b4:cd:b9:f3:74:31:cd:15:9a:b6:33:6a:48:fa:
         f8:0c:10:5c:e3:6f:94:9b:19:3d:0a:a4:bf:33:49:88:7c:c1:
         49:4f:2d:6c:1e:65:86:59:e0:47:0e:6c:61:4e:08:71:19:31:
         08:5e:60:fc:52:d5:b6:90:63:fa:04:cb:17:ba:a1:45:77:a1:
         0e:7b:f3:ac:b1:04:06:47:35:a8:a9:7c:84:ae:49:1b:78:fb:
         a8:7a:f3:7f:6a:8b:58:5b:93:62:d2:d6:43:dd:91:df:c2:b8:
         6f:88:6b:dd:2d:e6:79:7d:f1:8c:2b:a7:2c:6f:d6:d9:b3:02:
         ef:09:d7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:33:13 2026 by rpki-client