This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/25985D28EE1411EFB4908431C4F9AE02.roa
File:                     25985D28EE1411EFB4908431C4F9AE02.roa (raw, json)
Hash identifier:          BRWciTjjQt32cnZj7/+sUh4AwLIx4UTsIsBMzlf1y2U=
Subject key identifier:   AB:A9:0E:F1:2D:43:35:4E:CE:A8:6C:B5:04:BD:22:CD:BE:6A:70:9D
Certificate issuer:       /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial:       0443
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/25985D28EE1411EFB4908431C4F9AE02.roa
Signing time:             Wed 07 Jan 2026 00:20:00 +0000
ROA not before:           Wed 07 Jan 2026 00:20:00 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     9318
IP address blocks:        103.178.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1091 (0x443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
        Validity
            Not Before: Jan  7 00:20:00 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=695da6b0-9c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:50:7e:ce:c0:7e:a7:00:30:75:d9:a2:19:c3:
                    e3:8f:59:66:8b:49:6c:e8:3a:50:0a:70:25:7d:18:
                    c2:ed:d1:ae:d2:63:6d:e9:c5:d7:b7:91:b8:70:5d:
                    58:54:cf:db:39:39:89:c4:df:d2:71:43:86:57:96:
                    1d:63:63:57:49:76:76:21:14:a2:71:1c:35:be:92:
                    14:8b:26:a1:30:9d:53:b4:00:2b:cb:15:4e:35:96:
                    46:a8:d9:b3:34:2d:be:db:17:fa:a7:29:35:f1:14:
                    5a:49:9a:93:70:36:4b:49:ac:75:d2:24:cc:03:ac:
                    a6:ef:35:6f:7b:94:3a:ad:fd:f1:68:78:28:ff:ba:
                    1e:ca:10:ba:e6:c8:2a:aa:27:c8:9f:6f:31:93:af:
                    11:2c:29:2f:2e:9f:c1:4d:2a:d8:c3:8a:fe:2f:ef:
                    61:4a:ae:70:5e:66:bd:64:c0:95:c3:1f:ef:19:ef:
                    5c:b9:31:ac:16:e5:fb:66:f5:4a:48:2f:02:a0:99:
                    32:2c:a7:e3:a3:3e:c1:87:65:c8:e0:64:a3:40:e2:
                    96:00:db:b9:49:13:92:f9:4d:b5:ad:ed:40:3f:63:
                    51:27:f9:ca:cd:c2:66:e4:f1:53:e0:5f:7a:7b:5d:
                    38:e8:34:35:6d:d0:a2:38:ec:c2:9b:b0:98:5a:e7:
                    73:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A9:0E:F1:2D:43:35:4E:CE:A8:6C:B5:04:BD:22:CD:BE:6A:70:9D
            X509v3 Authority Key Identifier:
                keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/25985D28EE1411EFB4908431C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d7:38:23:42:c5:b0:f9:89:c8:22:54:8d:ee:38:67:ae:7a:
         9c:f3:77:f4:2f:62:67:e2:8e:c4:db:ff:51:52:70:0a:e1:6d:
         63:41:b0:63:7c:fd:e7:b9:a6:a5:d5:3a:a4:82:1b:21:89:9a:
         2d:2b:71:31:3b:60:28:8c:b0:da:77:fa:0f:c9:a7:5e:95:30:
         8e:cd:8d:9d:49:fc:6e:38:43:88:83:50:0a:06:2f:ea:49:ee:
         9a:d8:b5:76:3f:76:19:8a:f5:dd:e4:38:73:97:f8:8b:bd:25:
         4d:f6:66:2e:b3:ff:ab:8d:44:8b:09:4e:1c:00:08:4e:82:32:
         43:52:dc:d6:e8:5a:f0:d8:84:6e:83:2c:1e:26:06:f0:94:93:
         6f:81:e4:33:c5:8e:cd:e4:ab:3e:9b:2f:62:41:36:af:fa:6d:
         44:2e:ea:ce:fa:58:03:50:52:d1:bf:9c:56:30:65:74:b8:a1:
         e2:f5:06:08:14:49:51:f4:b9:eb:ee:b8:89:b3:3a:ed:a6:73:
         e1:ad:7e:bc:66:79:e1:29:78:ee:33:9d:6a:aa:c0:b8:a3:65:
         35:71:5b:76:ff:f7:98:d7:fb:a7:8e:e4:60:79:1e:a3:11:72:
         eb:9c:4b:4f:8e:7d:b7:24:52:64:d6:d2:08:2e:3b:df:19:8f:
         7e:1c:4c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:52:33 2026 by rpki-client