This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/61FA8E20DCD011F0B585C4234F6F56BC.roa
File:                     61FA8E20DCD011F0B585C4234F6F56BC.roa (raw, json)
Hash identifier:          mNYe4FUja3MrCQuFkjZ9mW3HWoF6dWXAjyDLZL2gjns=
Subject key identifier:   DB:67:62:08:70:54:1B:DA:E0:6C:61:19:BE:72:2D:10:4B:16:E7:A0
Certificate issuer:       /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
Certificate serial:       0A4D
Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/61FA8E20DCD011F0B585C4234F6F56BC.roa
Signing time:             Fri 19 Dec 2025 11:46:40 +0000
ROA not before:           Fri 19 Dec 2025 11:46:40 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136030
IP address blocks:        103.235.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl
                          rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2637 (0xa4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
        Validity
            Not Before: Dec 19 11:46:40 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69453b20-1cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8e:6b:04:09:d2:50:88:3b:58:cd:11:8e:ba:
                    d1:bf:ea:cb:5b:a0:64:79:4e:11:77:7d:89:94:68:
                    d1:63:ef:9c:bc:39:17:99:0e:75:4e:89:3c:b9:4c:
                    42:88:89:b7:81:2e:56:80:e1:89:e4:7d:11:89:d5:
                    20:e9:73:ce:09:a7:fe:8c:97:89:14:4b:6c:df:6d:
                    43:65:c0:9b:5e:2a:79:83:6f:d6:31:6d:ec:c3:c7:
                    86:41:20:40:6f:89:16:46:34:28:66:78:48:fb:9f:
                    5b:61:13:02:87:ac:7d:40:6c:23:3a:cc:45:53:2e:
                    2d:ec:f3:8a:ec:45:01:1c:ee:9d:0a:4a:bf:63:0f:
                    1e:65:d0:f7:c9:9d:42:55:68:3d:56:a0:ff:7a:0f:
                    3f:2f:fa:fe:ad:64:c8:d2:73:54:2b:4b:21:ac:c8:
                    35:b4:bd:bd:e6:33:bc:46:d6:c0:94:a7:07:38:38:
                    a4:73:f6:d2:40:bd:06:4a:81:36:db:1c:8c:df:a5:
                    c3:f9:61:9f:63:4f:bc:8d:25:da:7d:13:ef:ce:7f:
                    45:fd:3a:35:9f:37:4b:97:47:42:31:c9:a4:82:fc:
                    60:a8:b5:d9:c3:16:0f:4b:68:08:ef:00:43:9e:69:
                    c1:89:71:c6:03:0d:b6:f4:f4:66:5e:fe:88:40:47:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:67:62:08:70:54:1B:DA:E0:6C:61:19:BE:72:2D:10:4B:16:E7:A0
            X509v3 Authority Key Identifier:
                keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/61FA8E20DCD011F0B585C4234F6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:9d:e3:fc:55:ce:ed:5e:8a:91:ac:dd:76:47:5d:5f:a2:80:
         5b:19:c2:71:6f:33:bc:f1:5a:ee:41:f4:13:4c:4a:b0:c4:f2:
         24:7f:ea:f5:51:10:fd:42:2a:62:d4:9a:4c:90:cf:15:77:f5:
         74:0e:38:e4:77:9a:c6:33:7d:03:45:e9:c6:9e:2e:38:f2:55:
         b9:2b:42:85:1f:da:98:f5:e3:ce:73:8e:ec:09:ce:bc:cf:af:
         c5:72:9c:47:8b:bc:a5:9e:66:0b:7c:c3:8f:08:2c:28:6b:c7:
         45:8e:7f:2b:d7:39:82:f5:8e:28:2b:d4:5e:0a:c9:d5:eb:5e:
         59:af:d1:7e:8a:09:1c:5c:a5:b1:ee:ab:16:35:09:89:ce:a7:
         cd:00:d5:09:0c:f0:6f:5d:e0:35:5b:3d:43:97:82:b9:9d:2f:
         ab:db:ce:71:c9:1e:4a:35:cf:c3:c0:4b:90:ac:31:74:ee:50:
         36:fd:f3:53:68:e6:e2:86:2f:8f:27:0d:3e:fe:a5:3d:d0:8e:
         fe:78:bf:21:fb:fc:89:45:79:4a:e7:1e:94:a9:37:37:43:9d:
         32:79:c8:f3:01:30:e4:25:95:f8:5f:ee:5d:c1:8a:3f:49:18:
         e9:90:b5:e3:f9:b7:07:14:64:50:64:bc:4e:a2:f0:f6:cc:a8:
         15:a2:5c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:37:35 2026 by rpki-client