This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/85A82A144C1311ECB5708257C4F9AE02.roa
File:                     85A82A144C1311ECB5708257C4F9AE02.roa (raw, json)
Hash identifier:          5T7gEIhWhwouCBx6xyWpjH6ilTbTHBGf2T6GBkg2f4E=
Subject key identifier:   3E:D3:1E:CC:52:DD:5A:E2:08:D4:E5:DF:FF:23:2D:DC:62:44:33:2A
Certificate issuer:       /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Certificate serial:       04E1
Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/85A82A144C1311ECB5708257C4F9AE02.roa
Signing time:             Fri 16 Jan 2026 23:19:22 +0000
ROA not before:           Fri 16 Jan 2026 23:19:22 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149026
IP address blocks:        103.176.218.0/23 maxlen: 24
                          2400:35e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
                          rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1249 (0x4e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
        Validity
            Not Before: Jan 16 23:19:22 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=696ac77a-c432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:7a:c2:6b:7f:75:31:5c:c8:ca:b5:d6:fe:
                    5d:08:ea:d1:dc:0a:39:57:ea:9b:7b:d6:3c:eb:83:
                    b3:69:93:51:8f:98:0e:4b:fb:03:56:cf:ff:da:f3:
                    9f:5b:3b:51:b2:cc:22:a8:fa:33:bb:22:d2:12:4b:
                    3c:74:8f:69:06:fa:5c:29:90:ff:a8:c5:d4:c7:16:
                    77:37:dc:87:33:74:35:4e:81:39:66:15:08:f2:b9:
                    37:08:33:9a:f9:c3:80:79:a3:60:3c:32:56:3b:e4:
                    8e:7b:b3:e2:d8:75:06:40:90:97:2a:63:ef:35:25:
                    86:4a:79:c5:64:cb:17:ba:3d:e5:61:9d:9d:cd:97:
                    ce:41:e5:d8:bf:73:b3:7e:8a:8d:27:74:b5:c2:e1:
                    76:a9:c9:26:dd:7b:c1:cb:86:d5:d3:71:e7:bf:01:
                    f0:6c:2f:6d:e3:9d:fd:27:2a:7f:2b:2e:b3:b8:63:
                    43:7a:e1:6a:bd:75:76:b3:d1:3d:f8:37:b5:f2:5b:
                    c2:58:d7:b2:02:69:25:22:62:ad:57:cd:e9:59:21:
                    52:f3:f3:15:53:fa:b2:c7:24:ca:5f:77:db:c6:2c:
                    eb:d5:87:2a:e5:9f:63:99:5f:cb:be:c4:91:67:27:
                    9d:54:e4:c2:20:8d:aa:77:d0:8c:10:8c:01:13:9c:
                    c0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D3:1E:CC:52:DD:5A:E2:08:D4:E5:DF:FF:23:2D:DC:62:44:33:2A
            X509v3 Authority Key Identifier:
                keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/85A82A144C1311ECB5708257C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.218.0/23
                IPv6:
                  2400:35e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:6e:ac:3a:e4:fb:29:35:4a:d3:85:2d:51:ab:ac:2e:80:69:
         4a:ca:e1:2d:9a:6f:dc:cb:68:ad:ad:43:aa:47:f0:b5:25:42:
         f4:a7:09:8b:72:5a:86:c8:6a:c0:56:69:07:8f:c6:d2:36:b6:
         31:f8:23:3b:db:6d:b0:6f:36:a5:2a:c6:f9:98:e4:28:1d:57:
         3a:e5:b4:18:15:0f:34:cc:08:19:6b:21:f3:e6:c0:8b:3a:f7:
         a7:1a:7e:45:2c:45:59:c1:e3:af:b0:e2:25:53:6a:0d:9c:d8:
         ae:66:40:ef:f3:ef:29:c9:7e:39:50:cb:cd:1f:b7:d4:5d:17:
         e3:84:6e:e2:90:46:6a:99:6b:4d:4a:3d:ab:a0:c0:b9:5a:e1:
         0c:ec:83:9e:0f:32:4c:cc:3c:14:61:b5:2c:12:2a:63:01:c1:
         3d:8b:1a:cd:51:9c:49:63:7e:8e:3a:82:17:bb:46:d8:3c:02:
         35:3b:f7:3a:80:f7:08:b6:02:2c:52:d0:d5:dd:0e:92:a0:41:
         93:61:04:6f:3b:10:12:fd:3d:93:b1:f6:19:48:37:66:09:fb:
         c4:fa:00:17:e0:f4:cf:11:c3:20:48:ee:24:50:d6:69:4b:7f:
         54:1f:27:a2:af:fd:e6:06:8b:12:31:46:17:55:5f:60:66:62:
         82:98:89:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:53:38 2026 by rpki-client