This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/06048736B08B11F087892851C4F9AE02.roa
File:                     06048736B08B11F087892851C4F9AE02.roa (raw, json)
Hash identifier:          jS5QM4hRJOIYwJpJlvBhAodT8MrOcODdJ9KiBgqN9zQ=
Subject key identifier:   91:27:90:7F:78:06:FC:82:C0:05:69:EF:CE:7F:8C:C7:FB:9C:97:EE
Certificate issuer:       /CN=A91AE81E/serialNumber=217605A5DEDE2D622F98AEA6C2F6F95D8FAE1B66
Certificate serial:       2E
Authority key identifier: 21:76:05:A5:DE:DE:2D:62:2F:98:AE:A6:C2:F6:F9:5D:8F:AE:1B:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/06048736B08B11F087892851C4F9AE02.roa
Signing time:             Sun 11 Jan 2026 07:24:39 +0000
ROA not before:           Sun 11 Jan 2026 07:24:39 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        103.127.245.0/24 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE81E, serialNumber=217605A5DEDE2D622F98AEA6C2F6F95D8FAE1B66
        Validity
            Not Before: Jan 11 07:24:39 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69635037-ff87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c9:4c:ac:b1:bb:98:35:6f:b7:22:f6:2b:33:
                    f0:69:6b:6a:c8:f3:b3:ea:b8:d8:83:69:80:e7:9b:
                    ee:31:4d:ed:6d:60:ef:c8:08:62:73:b3:27:8f:9b:
                    c4:d3:26:a4:e9:4d:4e:7c:10:29:bc:c1:dc:b5:b2:
                    9e:ed:dd:ae:ed:99:76:4d:38:32:b8:a8:d0:ea:80:
                    3a:69:c4:ec:e8:a5:54:b2:df:12:25:97:bf:e5:39:
                    99:72:d7:b3:7c:5b:7b:af:0e:ea:39:1c:4e:54:af:
                    38:8e:c8:ec:4f:1d:67:26:5d:56:82:34:13:f0:9c:
                    42:52:d5:be:f3:e3:c5:c1:a2:98:93:df:dd:54:41:
                    22:dc:18:38:d6:4f:7d:c4:b0:ec:b8:ea:40:16:26:
                    44:0f:d0:73:ea:20:2a:bf:0b:4a:21:09:61:0a:0a:
                    b4:b8:3f:50:ed:39:7c:ed:2e:68:cb:be:e5:96:2d:
                    bd:b0:8c:93:77:70:96:9d:dc:5e:e2:0e:a2:39:bb:
                    00:ee:19:89:0c:82:43:3e:ab:41:9d:d0:83:59:21:
                    a9:2c:90:39:63:67:04:44:fd:53:05:bb:db:df:eb:
                    bb:bb:33:99:4e:f1:9e:03:e8:18:4c:8b:af:e6:57:
                    95:29:c2:89:fc:27:19:6b:e3:a7:bc:61:4d:1d:a5:
                    bb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:27:90:7F:78:06:FC:82:C0:05:69:EF:CE:7F:8C:C7:FB:9C:97:EE
            X509v3 Authority Key Identifier:
                keyid:21:76:05:A5:DE:DE:2D:62:2F:98:AE:A6:C2:F6:F9:5D:8F:AE:1B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/06048736B08B11F087892851C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:5e:ce:2f:54:e7:17:b3:63:a4:55:a8:30:5f:88:0d:12:cd:
         b9:2a:1e:74:60:72:d4:c2:93:30:91:a4:d9:e7:8a:59:53:41:
         f5:52:ea:55:82:b2:0c:d1:c8:ca:a8:d4:93:38:4f:56:8c:34:
         44:86:a8:98:79:e5:eb:83:94:e6:cf:b6:68:48:9a:7b:55:b1:
         af:e7:df:6b:b0:d1:36:89:34:28:83:64:ba:a4:5b:ac:f5:2b:
         b2:2b:a0:04:a2:3d:2e:9c:65:0e:13:56:94:4e:38:85:72:5f:
         92:08:31:fc:19:4a:c0:31:60:18:1b:35:ec:c6:24:a3:51:02:
         71:3d:33:4c:8b:a6:3f:a2:bf:d2:2a:40:38:98:d5:48:93:c8:
         54:a6:b4:49:c9:51:23:32:f4:e4:15:15:94:f8:08:16:f3:35:
         b8:ee:f8:9c:77:1b:4d:91:4c:e8:dc:61:34:b5:62:87:66:eb:
         49:e0:90:73:8f:84:90:1c:30:6f:c4:3b:b0:92:22:57:94:7e:
         42:b0:4c:b9:13:af:e2:48:4a:da:0b:14:07:8d:ab:b6:95:dc:
         c3:08:8b:c2:ae:a3:f0:20:91:0e:78:07:1d:ac:73:05:ac:94:
         90:38:4a:1d:ca:2d:7c:96:13:a3:53:59:14:8f:0d:69:df:dd:
         a0:ea:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:14:00 2026 by rpki-client