This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/655B85F0225B11EFADDE6F63C4F9AE02.roa
File:                     655B85F0225B11EFADDE6F63C4F9AE02.roa (raw, json)
Hash identifier:          hnWOAVNNVjpwPt+sg7y8J3JT5iAGiugDu6nm76aqOVc=
Subject key identifier:   EB:3F:D8:AC:31:C5:47:DD:B5:CE:F5:C1:3D:DB:C8:9D:36:75:98:52
Certificate issuer:       /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
Certificate serial:       0261
Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/655B85F0225B11EFADDE6F63C4F9AE02.roa
Signing time:             Wed 21 Jan 2026 01:21:39 +0000
ROA not before:           Wed 21 Jan 2026 01:21:39 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150451
IP address blocks:        103.42.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl
                          rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
        Validity
            Not Before: Jan 21 01:21:39 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69702a23-0445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f0:42:e3:cc:75:f9:9c:c6:da:e5:14:fe:c3:
                    f4:e2:b8:3e:86:d8:f3:9e:03:f3:61:71:9f:62:a9:
                    40:56:e2:fa:72:b3:3e:ce:5a:43:9d:cd:42:d3:b2:
                    d6:10:1d:ca:eb:52:d9:c1:8d:ac:88:f7:f0:ef:14:
                    c3:37:c7:7d:5f:ab:22:04:95:5a:06:be:f3:0a:5b:
                    da:45:2e:e5:9e:fc:d5:48:f0:f5:15:71:13:60:91:
                    41:9b:37:04:b1:fc:7b:aa:51:66:3c:6c:d4:4a:97:
                    7f:14:63:1d:c1:ed:84:57:bc:19:6d:08:47:34:35:
                    31:86:09:28:17:82:1b:d3:88:c8:fc:b8:e6:b4:52:
                    2a:44:90:01:47:55:3c:57:d5:c7:01:23:1d:ca:79:
                    c2:6d:5e:90:e4:5e:a8:ef:3e:3b:6d:82:c7:01:93:
                    77:d6:25:cf:36:9c:b7:74:d2:01:4e:2a:6e:94:3a:
                    85:0c:6c:e2:de:ef:09:ae:4f:a5:f4:9f:ac:95:60:
                    b3:ac:9d:fa:02:c6:6a:1d:2c:50:c4:a3:f5:00:8a:
                    e0:b0:09:a0:7a:e2:2c:19:9d:f0:bc:e5:94:88:ca:
                    14:59:ef:a0:3a:11:6b:c9:5e:4e:60:1b:c0:25:f4:
                    98:f3:4e:22:08:6f:5e:78:84:2d:7c:97:ce:6b:69:
                    81:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3F:D8:AC:31:C5:47:DD:B5:CE:F5:C1:3D:DB:C8:9D:36:75:98:52
            X509v3 Authority Key Identifier:
                keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/655B85F0225B11EFADDE6F63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:50:a6:34:1a:ad:67:55:84:83:41:f7:90:e9:9f:34:e8:b6:
         62:b4:7b:d9:de:a7:57:de:3b:8f:a7:87:ef:12:f9:c2:3d:fb:
         e6:bc:6f:3a:7b:80:da:35:26:2f:f7:bf:73:c4:dc:e9:35:15:
         f5:7b:74:2e:d4:2e:9b:17:df:fa:bc:d3:e9:a0:37:8c:8d:6b:
         96:9a:e7:d4:37:c2:f8:db:af:f1:1d:81:54:4c:22:3f:94:28:
         6a:cc:db:61:ed:a5:6b:29:2e:61:17:67:b8:53:3a:70:db:40:
         01:77:b0:6e:55:3f:df:c9:3c:3b:10:91:9a:20:8a:cf:88:f3:
         e7:8d:b2:28:70:f9:26:bf:0c:78:cc:95:3d:2d:23:ac:d9:fa:
         76:eb:cb:69:a2:cb:ec:fc:e3:27:c7:32:5a:32:13:45:ff:8b:
         5f:ac:2a:1e:83:be:5e:0e:91:cc:86:5d:cd:6a:9c:c4:72:9a:
         63:28:2a:9d:51:86:f5:29:2b:e1:e1:49:1d:5f:5f:d5:6a:fb:
         3e:3a:ff:18:48:56:89:9a:9d:84:e4:87:8f:0a:dc:e2:b5:94:
         4a:16:87:e4:4c:80:e4:25:16:2f:70:4e:f1:c7:72:52:b9:e5:
         fd:88:ba:62:f0:b4:ae:41:ba:68:42:fe:d2:24:15:95:57:21:
         4e:a9:aa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:33:35 2026 by rpki-client