This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/977BACDA818811F0AE59F81AC4F9AE02.roa
File:                     977BACDA818811F0AE59F81AC4F9AE02.roa (raw, json)
Hash identifier:          uKH93ZRreEKwtoUhXqaPKV81tL9TswdJHpgjfNg1v4Y=
Subject key identifier:   63:54:BA:C2:E9:4D:90:43:51:DD:8A:BF:BC:C1:33:6C:10:0A:7C:C1
Certificate issuer:       /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial:       0440
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/977BACDA818811F0AE59F81AC4F9AE02.roa
Signing time:             Wed 07 Jan 2026 00:19:58 +0000
ROA not before:           Wed 07 Jan 2026 00:19:58 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     208525
IP address blocks:        103.151.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088 (0x440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
        Validity
            Not Before: Jan  7 00:19:58 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=695da6ae-a1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bb:bd:34:31:9f:6a:3d:42:e7:3c:ba:86:3f:
                    fa:24:50:86:93:c5:db:06:f4:03:ba:34:48:6e:56:
                    46:9f:33:5d:36:f3:9b:39:4d:ff:a5:a3:e8:09:15:
                    ae:70:d1:68:c2:29:7d:ca:da:1e:af:19:d1:22:d5:
                    fb:a1:32:f6:52:11:4c:68:ff:33:ac:46:6f:fe:32:
                    4c:08:54:9a:bd:d1:cd:5a:60:da:0f:d5:f0:74:d1:
                    2d:cb:5f:e6:c7:69:be:ce:0c:a6:99:6b:46:70:27:
                    27:1c:e5:38:44:92:11:1d:0d:99:57:97:43:f8:c9:
                    c7:1a:94:54:f3:b2:a6:88:24:a2:55:bc:d0:01:47:
                    5d:59:02:de:d8:a4:01:9a:e3:29:f0:97:5a:50:07:
                    8b:33:bb:7d:2e:17:03:91:98:7e:c9:69:87:c0:b3:
                    0b:94:91:9a:b1:71:b0:e5:37:34:c5:53:65:3a:07:
                    eb:43:24:82:d1:3d:62:50:b8:31:ba:c7:58:72:91:
                    b7:89:d2:ff:8b:dd:17:b2:0b:16:cd:7e:3f:db:93:
                    eb:1b:b3:67:95:d3:6b:de:27:0e:71:03:e8:f2:bc:
                    2c:2b:70:7b:5d:05:50:01:c2:0f:e4:66:43:95:12:
                    a2:36:10:1e:db:64:99:3f:5c:d1:ce:d8:4c:d5:be:
                    67:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:54:BA:C2:E9:4D:90:43:51:DD:8A:BF:BC:C1:33:6C:10:0A:7C:C1
            X509v3 Authority Key Identifier:
                keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/977BACDA818811F0AE59F81AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:97:37:61:73:02:43:e8:dc:9e:d0:6a:8a:1a:1c:e4:54:46:
         90:75:38:3a:58:01:5c:08:7f:47:64:6e:7b:80:57:91:6d:a0:
         0f:70:51:14:c8:35:eb:2a:3c:d4:ee:53:ff:d4:32:73:c1:77:
         2f:ec:da:12:7a:57:53:a9:e0:93:e7:1b:03:83:cb:2b:7b:f7:
         eb:16:19:e2:f1:38:8c:70:77:eb:06:d5:35:58:da:11:d1:13:
         2b:2d:e9:d1:85:f9:e9:71:1f:e9:91:3b:9a:0e:6f:af:6d:6c:
         21:08:a6:6b:f2:d1:26:7c:40:98:09:ea:6f:99:08:e8:92:79:
         ae:6d:d6:9e:96:1f:ec:9b:f4:e6:77:78:5b:58:0b:93:1d:2d:
         a6:96:23:f0:76:d4:3f:01:99:70:2f:64:65:66:62:c3:37:81:
         5f:be:e0:54:71:12:b3:ab:ea:aa:81:a3:cf:85:8b:66:ce:18:
         02:35:92:64:5f:72:a4:9c:f3:da:06:2e:31:51:54:73:88:b7:
         88:3e:1e:63:4c:3b:ca:77:a1:87:71:86:53:80:60:35:6a:c9:
         19:96:aa:70:96:36:bd:ba:1e:85:0f:5f:e7:2c:e5:21:a8:ea:
         29:e4:6e:28:26:3f:5a:1f:1a:4b:74:70:f3:57:84:9f:76:7a:
         86:b5:45:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:07:58 2026 by rpki-client