This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/366FD216EC5611F0B67F861C4A6F56BC.roa
File:                     366FD216EC5611F0B67F861C4A6F56BC.roa (raw, json)
Hash identifier:          HmUOxsr+DXTp7/0WPq6upTZpD6L3HkM+fxihxuJeSWQ=
Subject key identifier:   6D:6A:B9:D1:A0:0E:A4:F3:D0:6E:18:8E:9B:55:71:15:84:9A:11:53
Certificate issuer:       /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial:       044E
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/366FD216EC5611F0B67F861C4A6F56BC.roa
Signing time:             Thu 08 Jan 2026 05:54:44 +0000
ROA not before:           Thu 08 Jan 2026 05:54:44 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     13378
IP address blocks:        103.151.4.0/24 maxlen: 24
                          103.151.5.0/24 maxlen: 24
                          103.178.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1102 (0x44e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
        Validity
            Not Before: Jan  8 05:54:44 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=695f46a4-efb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:5a:7f:6d:85:50:ed:43:cd:71:94:dd:d2:
                    dc:df:00:81:9c:96:7f:8f:6d:fa:b1:34:5c:67:86:
                    08:1b:05:5b:b7:21:59:d5:e1:0f:37:b8:2c:ef:1d:
                    ef:74:a8:ec:d5:b3:6b:b9:05:7a:e5:b0:63:c3:88:
                    f1:99:be:d2:3f:c9:46:d3:c5:86:fb:f0:61:f6:2c:
                    0c:b7:3b:c2:35:45:29:df:dc:4e:0f:f7:99:f4:34:
                    7e:16:65:8a:1a:35:46:ec:4b:56:00:9a:4e:e0:36:
                    85:f8:f0:2b:ff:14:7f:93:c1:f2:07:66:73:4a:b6:
                    18:20:aa:cd:39:bd:db:8f:d1:5c:2d:3f:57:09:79:
                    67:e8:f3:15:01:09:2d:79:dc:10:3b:b0:90:58:8c:
                    0b:f2:43:83:1a:1f:79:0f:38:87:3a:ce:b1:1f:f8:
                    4a:83:9b:e0:1c:53:72:5d:07:40:13:1e:27:72:aa:
                    6f:d8:9d:ce:aa:53:12:37:7a:e7:3e:04:0d:04:34:
                    9f:40:1d:e7:14:af:0f:e1:3c:4e:f1:ea:05:16:f1:
                    20:53:ca:2d:df:86:c9:79:22:6f:c0:30:a6:3e:fb:
                    7a:d1:22:34:6f:eb:a2:76:04:3d:47:e7:01:3c:60:
                    36:8b:8e:eb:8c:55:3b:69:c5:84:58:1a:31:a8:17:
                    24:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6A:B9:D1:A0:0E:A4:F3:D0:6E:18:8E:9B:55:71:15:84:9A:11:53
            X509v3 Authority Key Identifier:
                keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/366FD216EC5611F0B67F861C4A6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.4.0/23
                  103.178.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:fb:d2:f3:0e:2e:44:d8:79:d9:37:a3:c8:48:34:39:e7:1c:
         c1:66:69:a4:04:bc:66:06:06:46:31:72:43:f2:37:d1:3b:5e:
         0e:56:0f:3c:94:14:84:ba:b3:60:74:7b:93:b9:8a:5b:9c:94:
         3b:9a:64:63:30:af:38:e3:d2:22:e2:8f:cc:0f:b7:9b:b9:1e:
         4f:8b:0c:1a:a1:52:67:f9:fa:3e:79:59:0a:08:98:9c:d2:e4:
         84:1e:c8:25:c1:af:c0:e5:94:53:c6:c1:18:8b:46:19:13:fa:
         e5:ca:7d:48:41:df:da:07:00:79:f2:8d:58:04:7b:26:05:a7:
         4b:9f:db:a6:bf:53:39:7d:d8:80:5a:61:b0:13:6d:4a:34:b9:
         73:d2:eb:d6:7d:28:e3:62:a3:8c:33:ca:42:e4:0a:ad:3a:59:
         93:00:53:7c:60:6a:bb:3f:f1:c5:3c:a5:cb:93:79:d7:a4:29:
         ba:94:58:4b:4f:b4:b5:2b:46:c5:25:16:b3:f1:53:3f:a3:a9:
         8c:93:bc:f4:0a:1f:f5:f4:20:08:32:41:60:70:b1:07:37:7c:
         b2:9d:41:e2:f9:0a:fe:20:e9:25:b1:0a:25:08:eb:38:2a:87:
         ea:b6:a4:92:b7:54:3d:86:fd:54:eb:83:36:a8:ea:12:b5:de:
         63:6c:11:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:15 2026 by rpki-client