This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/27616F5ECEAC11F0B2B83021C4F9AE02.roa
File:                     27616F5ECEAC11F0B2B83021C4F9AE02.roa (raw, json)
Hash identifier:          O+bmz4H8fmOEEYbSsaNE97io00ZH/4UXwZSZDJ91wig=
Subject key identifier:   90:2D:78:72:31:5F:CD:82:F0:39:46:45:4C:D4:AD:A2:44:CB:A3:E7
Certificate issuer:       /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial:       36AF
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/27616F5ECEAC11F0B2B83021C4F9AE02.roa
Signing time:             Thu 08 Jan 2026 12:06:20 +0000
ROA not before:           Thu 08 Jan 2026 12:06:20 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152605
IP address blocks:        103.207.84.0/24 maxlen: 24
                          116.90.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13999 (0x36af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
        Validity
            Not Before: Jan  8 12:06:20 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=695f9dbc-0a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:aa:e5:53:f3:10:fc:28:3f:37:f4:00:3e:
                    08:3d:10:48:b7:61:12:17:18:28:72:ff:a0:5c:99:
                    7d:9f:68:31:18:fc:d4:25:a6:9c:1d:f9:3e:f0:9d:
                    cd:6b:9c:a2:a8:37:c8:eb:04:47:75:ec:8b:73:7e:
                    60:3a:06:db:66:72:4c:fc:04:c7:e4:b1:02:2f:9a:
                    df:f6:c6:8f:f0:21:51:5f:6a:46:d6:62:5d:a9:bc:
                    e7:8e:fb:f4:74:a3:32:a6:9c:43:ae:44:64:d4:3a:
                    58:70:75:ff:c7:60:fc:76:50:3f:6a:10:3b:bb:12:
                    96:1b:2e:30:86:69:16:12:19:3b:59:c0:65:7a:e6:
                    80:f7:9d:e4:a8:86:cc:43:16:cf:25:c2:e4:71:6e:
                    5f:41:db:be:63:a7:77:20:3c:e3:a9:a9:d8:1d:0d:
                    bb:90:23:d5:19:88:26:63:83:a1:28:e3:7a:61:06:
                    ea:d2:7d:13:2b:07:e2:4f:c0:c7:36:7c:7e:b2:91:
                    3f:61:60:39:7a:92:50:fd:1c:34:9a:c0:c3:ea:0a:
                    e6:71:e9:ff:22:e8:b4:a6:22:72:3a:8c:3e:57:56:
                    23:a4:2d:71:d7:2f:40:e9:cd:6d:64:6f:71:fe:e8:
                    ee:0e:c5:0c:42:c3:3d:ce:de:a2:9a:96:b2:6e:20:
                    7a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2D:78:72:31:5F:CD:82:F0:39:46:45:4C:D4:AD:A2:44:CB:A3:E7
            X509v3 Authority Key Identifier:
                keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/27616F5ECEAC11F0B2B83021C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.84.0/24
                  116.90.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:2e:c3:e6:9d:38:17:13:66:05:a4:6e:bf:17:fe:be:bf:33:
         5c:5b:90:13:0a:c6:43:f5:23:90:e3:75:53:59:50:0c:f4:6f:
         e3:81:51:ee:c1:ff:11:8a:53:a0:a1:06:2a:94:3c:6c:ee:44:
         42:c6:34:b6:84:ec:5d:fb:35:a2:13:25:8f:a1:88:5e:f1:0d:
         60:42:19:cd:5a:84:cd:77:a0:59:d5:56:eb:a4:16:1e:c9:ee:
         52:34:85:4c:fa:8d:66:dc:de:ba:38:17:21:38:80:e5:7d:70:
         f0:a8:c6:13:fd:7d:24:34:34:5b:10:69:a4:29:07:bf:75:89:
         b2:ef:04:0f:11:10:63:fa:78:57:de:23:5c:c6:22:1f:63:d1:
         52:ef:95:0c:40:ca:b7:fa:5d:d3:c1:6d:fd:92:c2:5a:48:89:
         b5:21:0e:3b:18:7a:32:3f:56:f9:b7:b1:af:c0:b3:f0:4d:3f:
         1f:68:18:99:da:ea:3a:6b:b9:4b:e8:db:59:35:4a:67:80:dc:
         9a:4d:43:30:82:2e:c2:19:7a:85:c4:99:33:7f:04:32:d4:3e:
         e4:55:fa:53:2f:b3:9b:89:99:d4:8a:76:78:93:c8:ef:3e:a6:
         96:e6:62:05:7f:60:e5:ba:fe:84:ec:90:07:6e:ad:ca:0f:b9:
         b3:da:6f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:03:00 2026 by rpki-client