This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/02181C4CE13511E7B0D71C83C4F9AE02.roa
File:                     02181C4CE13511E7B0D71C83C4F9AE02.roa (raw, json)
Hash identifier:          e9KV7OJMc915emu3uBJucpbXbnc66ccgIrkOj1gjkrY=
Subject key identifier:   E2:4E:34:38:64:1B:E9:5A:4F:11:AF:92:89:F8:18:4B:63:5C:B5:C7
Certificate issuer:       /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782
Certificate serial:       17AB
Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/02181C4CE13511E7B0D71C83C4F9AE02.roa
Signing time:             Wed 14 Jan 2026 17:14:00 +0000
ROA not before:           Wed 14 Jan 2026 17:14:00 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137243
IP address blocks:        103.105.191.0/24 maxlen: 24
                          2001:df3:8900::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl
                          rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6059 (0x17ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB09C, serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782
        Validity
            Not Before: Jan 14 17:14:00 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6967ced8-513a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f0:d6:eb:7c:16:17:c1:07:c2:da:9d:5b:4a:
                    a4:14:a7:26:cd:2e:8c:ef:09:ee:ca:85:73:7e:c0:
                    f4:59:c6:9f:45:b7:6a:1d:91:eb:ea:1d:17:35:11:
                    bb:2c:25:7d:2e:67:15:40:e2:44:8c:2c:fd:74:32:
                    7d:f1:dd:25:e9:bd:6f:1c:d9:11:f8:6f:eb:e2:c6:
                    24:5d:8d:cf:09:57:c1:68:5e:0a:57:f3:d2:25:bc:
                    ff:74:32:43:4f:56:4a:f0:74:10:92:05:6d:ee:e5:
                    91:19:9a:fc:a0:53:ee:42:61:27:61:ce:4c:0b:28:
                    01:ae:ea:a6:20:f1:ad:f2:e8:27:c6:bb:03:9e:68:
                    30:70:c6:a5:da:86:2f:8a:73:98:b1:f1:5f:ea:68:
                    cd:22:cc:9e:0f:e4:82:8d:88:86:68:ac:0e:f9:a8:
                    9f:77:8f:61:c0:17:80:77:12:33:4e:d9:8d:11:b6:
                    12:e7:f3:66:36:60:d3:47:56:37:ec:54:6e:3f:7e:
                    42:40:cb:89:2c:4b:30:70:5e:d1:60:40:d1:46:42:
                    fc:c0:af:e2:93:ba:b8:2d:81:36:d0:9d:a6:9c:0a:
                    40:69:b4:c5:42:59:63:a8:0f:c7:b1:b8:93:b9:9f:
                    03:52:f2:7f:07:c4:37:53:aa:fb:a9:06:30:a4:51:
                    4e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4E:34:38:64:1B:E9:5A:4F:11:AF:92:89:F8:18:4B:63:5C:B5:C7
            X509v3 Authority Key Identifier:
                keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/02181C4CE13511E7B0D71C83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.191.0/24
                IPv6:
                  2001:df3:8900::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:6d:3e:ac:1b:16:63:5a:61:d6:8d:d8:b5:d9:ba:8e:0e:07:
         5c:e2:ca:11:64:ea:e6:d9:10:13:d0:5a:44:20:6c:b9:b4:3f:
         de:ec:5a:ac:7c:06:06:0b:af:cb:39:87:7b:c7:4b:ef:fb:16:
         65:22:8f:30:c7:b6:fd:57:86:e9:94:be:d7:62:b1:2f:dd:08:
         2c:67:2e:1b:0a:b3:1e:83:33:b8:52:6e:de:61:b8:a7:ec:f0:
         71:6d:b3:ce:a7:8d:f6:aa:5b:1b:82:49:e2:d3:65:3e:0c:f7:
         34:83:de:5d:a4:7e:16:c9:d9:d4:73:bb:ce:bf:b8:15:37:d9:
         42:1f:90:2d:57:7a:19:fd:8e:9b:31:89:53:cb:ed:81:02:a3:
         90:f7:f1:1c:d0:70:4c:0a:f6:9c:8e:65:6d:61:84:f8:6d:df:
         47:33:f7:6a:a1:ac:e9:73:11:99:52:ec:62:90:f9:85:07:7d:
         1d:7d:86:b3:73:a1:b4:4d:4a:1a:6e:75:a5:69:36:fb:5d:d7:
         1d:09:39:57:be:1a:51:da:6f:31:d2:7b:03:9b:11:67:c3:07:
         78:24:20:d7:d2:c4:5b:96:66:c8:08:9d:c0:de:bc:c0:4f:82:
         69:de:84:e5:f8:8a:4a:78:70:3e:26:86:e5:2d:7e:05:7d:88:
         8c:49:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:14:54 2026 by rpki-client