This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/4B019258F78411F08F54609B4C6F56BC.roa
File:                     4B019258F78411F08F54609B4C6F56BC.roa (raw, json)
Hash identifier:          rHSFrQgJ+OhFOvwIS86c51WqtoELZFmgA6GQCBeb2l4=
Subject key identifier:   22:3E:74:18:7D:5D:60:9B:62:2F:2E:68:C0:A2:FD:B2:00:90:98:79
Certificate issuer:       /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Certificate serial:       31EB
Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/4B019258F78411F08F54609B4C6F56BC.roa
Signing time:             Thu 22 Jan 2026 11:20:01 +0000
ROA not before:           Thu 22 Jan 2026 11:20:01 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     197537
IP address blocks:        103.10.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl
                          rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12779 (0x31eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
        Validity
            Not Before: Jan 22 11:20:01 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=697207e1-a7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:f8:0a:c7:39:72:e6:94:80:0d:a0:6b:09:
                    76:de:d5:b4:49:7f:3a:26:d5:a6:d6:57:3f:29:d6:
                    c3:84:00:ba:f1:33:54:94:b6:bd:d8:c0:b3:ff:27:
                    b7:d4:c7:b2:59:93:86:58:a7:4c:d5:20:b1:89:43:
                    88:90:99:bb:5c:35:d5:47:75:9a:85:68:f2:e8:03:
                    27:e3:4b:1f:57:38:ab:af:d9:15:00:7c:9c:26:b3:
                    6f:69:4e:f7:13:b5:b1:97:f0:0b:34:dd:0d:bc:ba:
                    f4:7f:fb:84:09:84:a9:40:0a:b1:d0:fd:09:2a:cb:
                    95:64:06:a7:60:c7:f7:ff:f8:73:0a:3b:1e:f6:17:
                    66:18:b9:c6:bc:b9:08:df:c3:39:0f:98:8d:88:8c:
                    fc:38:77:b6:17:07:54:74:2d:57:75:98:08:2f:33:
                    d2:68:fc:88:f7:88:0f:25:fc:2d:4d:19:6c:97:63:
                    21:fc:10:ac:5d:c4:14:40:35:d4:c4:6b:a2:04:94:
                    e1:80:48:6d:60:5e:68:dc:c4:c0:fb:1f:f1:38:49:
                    37:38:42:c4:58:49:de:26:52:e5:29:a7:63:51:51:
                    28:71:71:dd:04:8f:4d:99:38:41:a6:14:80:e9:8c:
                    d1:d4:bf:e1:7f:e0:59:99:0b:63:23:bb:ac:75:75:
                    a5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3E:74:18:7D:5D:60:9B:62:2F:2E:68:C0:A2:FD:B2:00:90:98:79
            X509v3 Authority Key Identifier:
                keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/4B019258F78411F08F54609B4C6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:97:ee:ed:2b:ec:3e:f9:1d:bc:a0:ba:47:ce:fd:e4:4d:33:
         23:bc:0b:d1:63:e7:70:f0:6b:12:b8:62:6a:2c:75:77:b4:53:
         f8:06:9c:60:d5:a0:cb:b0:11:3b:e4:8c:ac:d5:03:1d:05:06:
         95:89:12:44:fd:02:a1:3e:ab:a5:12:57:aa:91:99:fc:77:66:
         c0:d1:b9:59:64:9f:a1:02:cb:5a:de:22:5b:7b:24:b9:2a:69:
         c3:05:9e:f0:b4:dd:aa:71:b1:9f:ac:51:e4:5c:fc:ce:53:66:
         0c:0d:5b:59:89:51:13:23:21:9b:89:ca:b3:c1:28:83:be:65:
         89:96:bd:28:19:c8:1b:b6:e3:6d:8f:44:79:4f:31:56:2b:8d:
         dc:82:28:b1:10:03:3f:d6:60:bc:4f:d5:e0:51:bb:b6:d3:7a:
         74:6f:86:ea:45:f3:1d:9d:35:c9:cf:54:8c:3c:0c:9d:a7:ff:
         f7:71:46:86:64:e1:63:ff:77:2d:f5:d5:c8:06:10:ee:dc:55:
         0a:84:b6:8f:6c:bb:00:92:b2:56:d2:33:7a:a8:83:01:91:b5:
         09:be:d3:62:5f:d6:3e:75:07:dd:e4:ab:22:74:94:30:2b:5e:
         d7:0d:c1:6f:d3:1c:95:ac:93:e3:f8:c6:41:81:30:f4:ce:de:
         84:44:81:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:03:45 2026 by rpki-client