This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/0735D9BEEC5611F09B1B681B4A6F56BC.roa
File:                     0735D9BEEC5611F09B1B681B4A6F56BC.roa (raw, json)
Hash identifier:          F+zbsaeqSNKR3R4phxdSEksOeJTEmYc/IGzbhxYMyUA=
Subject key identifier:   40:06:AE:CA:53:A8:FD:0F:9F:8B:5A:B9:1F:27:A5:AE:20:33:66:96
Certificate issuer:       /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial:       0457
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/0735D9BEEC5611F09B1B681B4A6F56BC.roa
Signing time:             Thu 08 Jan 2026 06:07:52 +0000
ROA not before:           Thu 08 Jan 2026 06:07:52 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     151640
IP address blocks:        103.151.4.0/23 maxlen: 23
                          103.151.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
        Validity
            Not Before: Jan  8 06:07:52 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=695f49b7-ee59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e7:d3:78:93:6d:8f:f5:79:70:12:36:80:7a:
                    78:fb:86:19:12:53:81:12:9e:39:c0:d3:64:a5:a9:
                    71:7d:47:ef:97:42:dc:d7:4f:0a:b6:a3:fa:44:23:
                    21:c0:a8:0b:d6:54:d6:42:a0:83:8e:71:54:51:42:
                    27:f3:fd:34:78:d4:1b:a8:1a:d3:2e:0d:67:72:51:
                    3a:09:2d:05:ca:46:b5:3a:bf:8d:dd:03:d4:da:cc:
                    52:a8:7f:5a:23:c5:db:b0:2f:a8:52:d1:78:9a:b9:
                    77:5f:a3:75:14:db:b6:5c:91:a6:81:9e:58:88:ab:
                    99:41:5d:eb:8e:c1:4f:02:ba:61:a3:52:ce:03:93:
                    75:bb:35:34:e9:d3:5d:62:a5:97:1b:15:97:19:b8:
                    cd:f8:f6:07:b0:9c:f8:9f:0f:31:4f:e3:5e:9f:6d:
                    d7:c8:a3:c6:f3:1c:5c:4c:ed:cc:ec:ce:77:a6:b9:
                    78:34:23:96:0f:00:41:87:39:e8:b9:57:e6:e8:21:
                    05:4c:85:65:2e:2e:3b:79:4d:03:11:a1:7f:90:36:
                    8c:71:7b:2b:51:aa:40:a8:fc:23:b4:fd:a6:6c:6b:
                    ed:84:15:1a:56:41:be:5b:48:c0:c0:de:e4:1a:72:
                    16:ab:c8:ed:5a:91:51:b6:df:7c:ae:da:d1:13:9b:
                    ac:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:06:AE:CA:53:A8:FD:0F:9F:8B:5A:B9:1F:27:A5:AE:20:33:66:96
            X509v3 Authority Key Identifier:
                keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/0735D9BEEC5611F09B1B681B4A6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:de:c1:0f:6b:60:98:3e:d1:c6:7c:57:6b:ac:8d:6f:72:8b:
         a9:d7:35:8f:63:5d:9a:2f:26:5e:9d:f7:bb:5b:1c:e0:77:83:
         59:df:78:25:75:b7:7d:27:18:74:d8:83:b3:82:e9:44:62:9b:
         f7:30:59:1b:67:e3:a7:0f:ac:f8:cd:de:8a:af:2f:5f:75:0a:
         ef:76:38:90:a4:26:f5:5d:9b:85:e3:d5:c6:ff:2b:4d:5b:a0:
         11:2d:4d:2e:d8:bf:6e:45:0f:76:c3:8f:81:31:23:c4:7d:28:
         96:ff:3c:b0:7b:3a:f6:ea:24:bc:df:b8:16:7c:9a:51:d3:23:
         49:8c:1d:65:15:6f:99:6f:43:a1:76:fd:b2:3f:84:bc:67:4c:
         31:48:3a:7d:bd:29:d5:6f:17:2e:99:ac:d7:ea:34:c3:9d:4b:
         8b:ec:24:ff:80:0e:bc:79:82:42:d9:ea:08:69:d9:29:c7:d6:
         8a:25:13:43:be:3a:2c:b3:db:b8:81:0c:b0:67:c9:96:68:14:
         e5:92:c0:77:ba:03:cb:55:6d:9d:c1:89:c0:ea:29:20:36:59:
         e5:b0:8f:0f:35:f7:a1:44:25:23:cf:11:d1:77:79:ca:88:b0:
         82:f1:09:bc:a5:9a:66:52:20:68:00:c3:23:9d:f1:a1:48:4e:
         1f:a0:77:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:02 2026 by rpki-client