This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/4BEF9ED0F78411F08F54609B4C6F56BC.roa
File:                     4BEF9ED0F78411F08F54609B4C6F56BC.roa (raw, json)
Hash identifier:          RCOZO/R0vt1DZeOKkzSP+ObtytYoLYrcRoyxwvbTRVE=
Subject key identifier:   7A:A3:4C:C9:C8:A4:A0:6D:07:55:8B:F0:20:86:CD:37:64:CE:1D:2E
Certificate issuer:       /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
Certificate serial:       31ED
Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/4BEF9ED0F78411F08F54609B4C6F56BC.roa
Signing time:             Thu 22 Jan 2026 11:20:03 +0000
ROA not before:           Thu 22 Jan 2026 11:20:03 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     23532
IP address blocks:        103.10.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl
                          rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12781 (0x31ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9
        Validity
            Not Before: Jan 22 11:20:03 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=697207e3-e7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:85:bd:e8:d3:0d:56:1e:ce:7e:74:93:b8:d3:
                    00:3a:81:e1:36:11:90:d4:24:ad:f5:59:43:bf:df:
                    1c:39:6e:4b:ee:62:4d:6e:2c:ac:78:1f:81:53:c8:
                    ad:48:77:3c:86:1c:ad:2b:fd:3c:7e:32:f8:2d:e8:
                    c7:91:cf:f3:55:9a:5c:c4:a8:56:21:90:fe:57:84:
                    12:a9:b6:35:40:f0:ac:b8:9b:41:1a:e9:46:fd:03:
                    8d:0d:3c:90:69:5f:4f:e3:5f:7c:25:e8:6f:66:50:
                    00:26:46:ed:18:33:a8:cc:25:37:97:6f:96:6d:b0:
                    28:62:b5:a2:64:43:ab:31:d1:70:0a:97:58:e9:f0:
                    5f:57:4e:ad:2d:03:c8:e5:79:6c:ca:97:55:f3:9c:
                    a6:b4:e5:75:ef:c8:60:32:13:a0:9e:d2:3f:59:36:
                    38:31:57:3e:33:71:88:a5:d7:19:56:f5:fd:2f:44:
                    93:c4:81:8f:fa:7e:10:e4:bc:3c:62:b3:66:e4:45:
                    f3:47:e7:e3:98:da:ed:66:22:69:e9:00:31:31:d9:
                    31:84:d6:2e:72:c0:3c:56:a9:e5:70:01:9b:b7:20:
                    e6:a9:1a:44:08:df:77:cf:de:89:0a:27:3a:95:b8:
                    6b:4d:05:c2:e5:d2:5d:63:35:7a:c2:f4:15:7e:8b:
                    dd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A3:4C:C9:C8:A4:A0:6D:07:55:8B:F0:20:86:CD:37:64:CE:1D:2E
            X509v3 Authority Key Identifier:
                keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/4BEF9ED0F78411F08F54609B4C6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:80:de:b9:d6:16:d2:52:cf:27:f7:28:75:b2:7a:ad:78:36:
         58:95:c4:ca:cc:04:f5:62:bd:0e:ed:e1:51:10:3b:17:5e:a0:
         da:bf:de:32:04:f8:6d:4a:e5:c8:4f:eb:a5:3d:08:36:1b:aa:
         c2:78:22:fd:32:5f:b0:fd:bf:a9:a5:82:4f:e3:63:30:4f:64:
         19:85:d6:b3:25:fe:5d:5d:2a:cf:da:42:0b:d8:48:0d:26:af:
         ce:8f:88:bc:6a:e5:1b:24:70:d1:63:6d:4a:33:ae:e8:d2:01:
         f2:76:b5:57:3e:03:94:83:bb:08:bb:e6:8d:10:a8:4e:f8:91:
         1b:ed:4e:62:66:7c:4c:5f:70:ac:df:ec:0d:11:dc:9e:62:8d:
         97:72:23:cf:2a:80:e5:3e:33:54:99:d4:ab:3a:5a:50:99:31:
         14:32:89:85:f2:ac:6b:c0:b4:01:80:2b:7d:97:97:8f:46:d5:
         4b:63:55:de:52:f6:d0:00:1f:71:9e:97:f8:61:97:e9:4c:b3:
         b4:bb:0b:0b:53:81:4b:1b:a8:eb:4e:c4:a8:eb:25:9c:96:ee:
         0b:a5:25:a7:c3:b7:6b:cf:95:54:f8:47:90:0c:ce:db:6f:17:
         4b:0b:59:06:88:42:c2:fc:cf:df:1c:a1:a9:39:18:be:1f:92:
         96:ca:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:35:04 2026 by rpki-client