This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/51FD604CE08711EFA06D6434C4F9AE02.roa
File:                     51FD604CE08711EFA06D6434C4F9AE02.roa (raw, json)
Hash identifier:          XYR8Is/A7nA59u6SWhBep8nj3sseotNlZGSV7GeokgI=
Subject key identifier:   EA:D9:1D:E1:EC:70:B5:4C:EE:00:AB:E7:9C:2A:2E:CC:92:76:5D:38
Certificate issuer:       /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Certificate serial:       0529
Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/51FD604CE08711EFA06D6434C4F9AE02.roa
Signing time:             Sat 24 Jan 2026 23:19:32 +0000
ROA not before:           Sat 24 Jan 2026 23:19:32 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     135341
IP address blocks:        103.176.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
                          rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1321 (0x529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
        Validity
            Not Before: Jan 24 23:19:32 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69755384-069a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:95:71:78:05:9e:cf:f5:11:d0:78:b5:fb:
                    70:09:97:74:28:7e:01:94:f7:05:bc:8c:1d:de:d6:
                    ad:23:eb:ab:09:85:d1:27:97:20:1e:5d:87:a3:b3:
                    bc:2a:74:8d:fb:59:05:12:97:7d:7f:6a:59:33:29:
                    b4:af:86:a1:23:95:61:7a:af:78:59:42:5a:6a:83:
                    15:2c:1b:b9:d7:64:25:f1:46:c3:0e:9f:40:cb:b2:
                    9d:f0:e0:5c:01:9c:8c:da:53:88:02:0d:9f:77:5e:
                    7e:75:7d:c3:0e:a2:38:19:16:26:5a:78:9a:fa:cf:
                    a7:ad:01:bc:da:eb:f0:14:4e:9f:8c:82:c8:97:3e:
                    c7:dd:c0:46:c5:b8:a4:cc:f1:1d:07:1f:4c:61:82:
                    36:7f:50:4e:47:e1:f3:09:a9:4f:2d:61:09:de:c7:
                    57:29:a1:14:07:10:65:d9:df:b3:75:55:17:28:3d:
                    a5:97:6c:67:7c:c8:e9:4f:dd:5d:d2:e9:a3:20:a6:
                    3b:63:b0:66:b9:6d:99:14:a3:9a:a3:39:86:e6:2e:
                    b9:23:0e:64:92:45:a4:a0:27:6b:7b:24:38:9c:ce:
                    53:5e:00:c9:34:72:18:ae:d5:3e:c0:eb:b3:64:25:
                    af:32:2a:4e:dd:c2:36:c3:38:13:0d:d3:06:9a:2f:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D9:1D:E1:EC:70:B5:4C:EE:00:AB:E7:9C:2A:2E:CC:92:76:5D:38
            X509v3 Authority Key Identifier:
                keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/51FD604CE08711EFA06D6434C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:c4:82:d4:1a:32:12:c0:68:81:79:b3:d5:86:22:09:e2:2e:
         f1:bb:cc:51:00:4e:9f:6b:97:ed:b0:56:17:05:b6:3a:87:8b:
         3c:a9:da:e0:23:30:60:f8:d5:88:8f:99:f4:55:8e:46:9a:2e:
         a8:0b:42:85:43:a4:b6:5d:c4:e4:e0:d8:4f:33:40:9d:55:20:
         28:51:3a:73:47:7f:c9:c0:20:2f:b9:23:00:02:bc:73:5d:91:
         4c:68:f0:c3:d2:48:a4:1a:b7:f4:b0:fc:94:98:29:cd:ef:e9:
         ee:75:75:bc:15:e8:92:2f:f6:18:04:ce:2f:ca:97:34:44:c2:
         29:3b:4a:63:92:43:8a:7a:fb:9b:e9:63:81:85:fb:ad:10:f2:
         f5:fa:f6:93:95:72:d2:ba:cc:6c:15:d3:80:75:68:74:e4:ea:
         68:6c:1d:41:11:93:45:86:aa:16:2d:28:3e:df:20:a6:4e:ac:
         ed:7c:4d:95:8b:57:a4:01:63:98:f5:25:02:73:3d:23:63:7d:
         94:42:3d:33:c0:ef:6f:0d:34:5c:65:05:a7:b6:d1:20:f4:56:
         3e:f9:fe:fe:e0:26:49:42:50:7b:57:d8:d8:12:f3:6d:3d:ab:
         14:e2:c1:22:38:9f:b6:ce:56:b8:8e:ad:51:39:94:fd:7b:6a:
         a2:1d:4d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:32 2026 by rpki-client