This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/B412DC700EC011EE8C18290AC4F9AE02.roa
File:                     B412DC700EC011EE8C18290AC4F9AE02.roa (raw, json)
Hash identifier:          dYEX61lj/1fg5l50vjnUJzunyahyWomELmP57pKDLEM=
Subject key identifier:   2A:15:BF:61:22:B8:83:C6:09:99:C8:EC:57:56:01:D6:9B:52:9E:3A
Certificate issuer:       /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
Certificate serial:       0235
Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/B412DC700EC011EE8C18290AC4F9AE02.roa
Signing time:             Fri 09 Jan 2026 02:21:46 +0000
ROA not before:           Fri 09 Jan 2026 02:21:46 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     54600
IP address blocks:        103.104.172.0/22 maxlen: 22
                          103.116.20.0/22 maxlen: 22
                          103.124.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl
                          rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
        Validity
            Not Before: Jan  9 02:21:46 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6960663a-a090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:61:3c:91:6b:1c:ac:e8:9d:72:46:ff:12:
                    89:d6:88:3e:2c:a0:43:d7:6c:62:d9:3b:0f:07:2c:
                    60:fd:ee:a2:40:7e:86:7c:74:a4:89:89:25:ee:2e:
                    fd:01:c0:cf:b9:66:23:49:45:49:e7:56:75:f2:1b:
                    b6:a8:9d:c1:46:8c:6e:ae:90:3a:43:60:96:03:df:
                    13:cd:05:5a:49:f2:06:c9:28:56:37:cb:2b:0e:0f:
                    84:d0:91:66:bf:d7:07:20:fd:16:05:6a:f6:7d:23:
                    82:b7:e2:fb:ce:d4:11:07:57:89:ab:65:22:75:b2:
                    c4:87:ca:a3:bd:03:ba:84:12:fc:fa:e3:46:51:0f:
                    8f:61:35:5d:b2:a5:17:23:50:02:5e:78:cb:6a:9f:
                    a8:97:5c:00:75:4b:a4:70:cc:7f:c7:f6:58:3c:8b:
                    85:43:d9:35:2a:e6:d3:cf:51:ad:93:a0:be:26:42:
                    61:e7:ef:a5:ca:0f:d4:e7:7f:a3:92:06:9c:28:fe:
                    47:bf:23:04:c5:86:58:20:e7:80:18:9f:3f:92:ad:
                    29:a4:d7:93:8e:a0:b3:fc:90:7f:7c:2a:30:ed:55:
                    c5:a3:e6:fa:bd:ec:4c:67:af:6e:37:ae:1d:30:7b:
                    d2:73:82:8d:24:72:8f:ab:ad:25:2c:d1:1f:01:36:
                    dd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:15:BF:61:22:B8:83:C6:09:99:C8:EC:57:56:01:D6:9B:52:9E:3A
            X509v3 Authority Key Identifier:
                keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/B412DC700EC011EE8C18290AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.172.0/22
                  103.116.20.0/22
                  103.124.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:b6:36:e5:15:e1:c8:bc:f5:72:71:6e:da:13:65:76:b6:01:
         22:d8:85:cd:86:d2:72:07:70:3f:f7:81:f0:87:b6:ce:6e:51:
         db:d5:17:9d:a5:58:3f:8a:3d:1f:fc:ee:a3:9c:b3:c9:40:b1:
         22:80:65:e8:fa:71:13:1c:a3:96:1a:97:a6:87:be:87:d5:0f:
         56:58:af:95:74:f0:db:b4:46:5b:07:61:2d:76:f0:3c:5c:66:
         11:5f:f2:3d:d0:9f:8c:6c:22:3a:84:13:df:8b:9a:09:8b:3d:
         af:e2:63:46:6c:f4:b7:6f:c8:8f:cc:2b:9a:d7:ea:20:91:8b:
         36:a2:fa:d6:8b:72:31:a2:c0:ff:20:33:bc:24:0d:bf:35:3c:
         52:a6:de:8b:b7:7b:26:8b:47:89:08:ce:0c:bf:ab:18:f6:a1:
         ee:71:74:9b:7f:52:73:cb:45:97:5e:7c:67:d3:15:1d:9a:8d:
         7e:79:e8:cd:3d:8e:18:40:9d:18:89:15:96:d9:ac:65:11:7d:
         b5:ee:27:e5:04:32:13:4a:21:37:c0:92:5d:d1:51:b5:f2:18:
         0d:68:a8:7a:fc:11:40:f7:bb:b5:7e:00:ed:b4:11:fa:49:cf:
         fe:2a:1f:11:b7:a8:5d:c4:6d:a8:3d:b7:23:c2:c2:58:0e:d9:
         d0:8b:ea:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:50:26 2026 by rpki-client