This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/EEA8968C461A11ED898DD14FC4F9AE02.roa
File:                     EEA8968C461A11ED898DD14FC4F9AE02.roa (raw, json)
Hash identifier:          le+ae7l0/0qWR56hANLv1fsJQBcPcWZOxp+miW+bDYE=
Subject key identifier:   6F:3A:6C:0B:34:90:6C:96:F9:DA:5F:36:D2:00:23:30:B8:56:66:85
Certificate issuer:       /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Certificate serial:       0276
Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/EEA8968C461A11ED898DD14FC4F9AE02.roa
Signing time:             Fri 16 Jan 2026 12:03:01 +0000
ROA not before:           Fri 16 Jan 2026 12:03:01 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     150345
IP address blocks:        103.17.6.0/24 maxlen: 24
                          103.17.7.0/24 maxlen: 24
                          2400:b3a0:e5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
                          rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
        Validity
            Not Before: Jan 16 12:03:01 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=696a28f5-00e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:20:de:66:37:a2:c0:45:9e:b7:40:94:80:1b:
                    d2:4c:fd:41:ea:17:f3:0e:86:89:47:e9:5b:8e:1d:
                    b4:57:a9:33:a9:38:a6:d9:fb:67:fa:c1:d0:30:f6:
                    8d:09:2e:10:81:6f:7e:6d:65:10:c8:e0:76:b3:eb:
                    fc:0f:fe:59:37:8b:39:92:57:a0:da:03:cf:82:8f:
                    0d:eb:e9:53:ad:f2:99:b2:62:32:b4:b2:1a:f5:e4:
                    de:7b:f3:15:83:46:35:df:00:38:30:fb:29:0b:ad:
                    1b:58:66:0b:2f:58:79:8d:4c:8f:f5:7a:cf:40:4f:
                    32:82:d5:07:08:3d:b1:7b:51:5c:d2:b4:44:5a:92:
                    e7:e6:20:05:6e:ed:5b:f5:6d:e3:50:8b:d6:aa:b6:
                    40:67:6f:af:59:b4:a1:bc:da:78:f6:67:83:e1:aa:
                    0d:ab:f0:12:89:09:b1:13:12:f7:11:f6:35:48:3a:
                    1c:11:dc:84:b6:f8:67:c0:c0:b1:4b:86:a1:89:01:
                    0d:9f:66:22:4a:b6:6e:0a:72:18:6e:66:ea:ab:03:
                    a5:57:d1:0a:52:a1:81:9e:13:95:ba:a4:69:c0:1d:
                    38:bf:99:ad:57:3a:0f:63:f0:26:01:fd:5d:c1:c6:
                    7a:dd:c2:e4:93:25:97:8b:22:dc:2e:0b:75:f5:a6:
                    27:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3A:6C:0B:34:90:6C:96:F9:DA:5F:36:D2:00:23:30:B8:56:66:85
            X509v3 Authority Key Identifier:
                keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/EEA8968C461A11ED898DD14FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.6.0/23
                IPv6:
                  2400:b3a0:e5::/48

    Signature Algorithm: sha256WithRSAEncryption
         f6:32:6f:cd:de:eb:42:4b:80:c5:c3:95:09:68:02:54:61:0a:
         2d:37:a0:42:20:51:0c:02:99:f2:f9:5a:8e:9d:77:00:d8:15:
         39:4c:d3:40:87:19:26:ab:b4:ea:86:78:7d:52:ba:29:02:16:
         5e:08:19:b5:1d:37:8c:ba:7c:73:78:2a:b7:a3:e0:7f:d4:48:
         a6:ca:71:3b:24:74:82:29:9a:aa:1e:5f:fb:8c:81:96:dc:56:
         c8:44:0e:23:0a:cd:0f:9b:8d:34:f9:05:dd:e1:a1:09:bd:cd:
         47:e1:98:e4:bf:85:bc:ea:d3:50:f8:0a:4f:1e:45:29:a4:1e:
         f7:85:a4:d2:28:c3:af:40:0f:f5:a7:c8:c4:f3:ac:9c:a1:0a:
         f0:0e:f0:23:2d:f2:e7:27:de:ad:35:82:a5:df:ab:02:48:67:
         76:e0:9c:76:bb:12:ae:dc:8e:95:67:e2:4d:1b:18:a6:58:05:
         5b:9a:c6:df:89:4e:d6:d1:6f:0f:1e:00:c1:6c:89:c3:60:b5:
         96:26:00:a4:fc:1e:56:5e:9b:91:82:a0:f0:f4:5a:3a:44:da:
         23:71:01:e8:04:ea:8b:e9:72:55:25:53:4d:b7:c4:d6:71:22:
         a8:43:9f:c9:88:da:88:93:c0:dd:5a:60:4c:af:88:b7:d6:76:
         2e:a1:06:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:10:03 2026 by rpki-client