This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/E5D4B662020C11EF924D0064C4F9AE02.roa
File:                     E5D4B662020C11EF924D0064C4F9AE02.roa (raw, json)
Hash identifier:          BXcqasQCDpSPCMLjPpItU74zJy4ZQFyEgdMbABvSE9g=
Subject key identifier:   72:73:74:63:C4:2A:3D:4A:A0:69:EF:60:EC:70:8C:6C:D9:E9:CF:46
Certificate issuer:       /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Certificate serial:       0A16
Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/E5D4B662020C11EF924D0064C4F9AE02.roa
Signing time:             Sun 04 Jan 2026 20:16:15 +0000
ROA not before:           Sun 04 Jan 2026 20:16:15 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     198381
IP address blocks:        43.225.96.0/23 maxlen: 23
                          103.244.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl
                          rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2582 (0xa16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
        Validity
            Not Before: Jan  4 20:16:15 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=695aca8f-6d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:95:d5:bb:33:2d:56:60:e5:7d:6a:c6:a2:24:
                    10:44:24:38:51:ff:00:c5:b2:02:33:c3:8a:3b:89:
                    32:c0:02:c5:91:d2:34:8c:c2:37:cc:a4:4b:be:1c:
                    b9:a1:a1:09:6f:77:30:1e:fd:68:f5:b6:a8:a5:d1:
                    eb:bf:c0:dd:36:e8:9a:a1:a6:74:16:cc:7f:55:26:
                    64:67:2f:66:17:59:03:1b:fe:8f:82:3d:21:7d:46:
                    bb:4d:a2:5b:53:f3:1a:6d:9f:01:86:7a:40:32:6c:
                    b4:68:01:7f:3f:8e:bc:1a:69:ee:fd:92:28:f4:ca:
                    0e:56:11:9b:3e:00:07:91:20:88:3c:a2:1d:d0:95:
                    5f:c7:0e:1e:d8:6a:a2:87:3e:c4:59:e6:e1:c2:a3:
                    bb:ad:b0:9c:eb:81:3b:25:49:9b:38:3c:5b:db:44:
                    f7:d1:14:bd:42:b1:90:6b:ed:8b:1e:dc:1b:4b:85:
                    92:6a:7f:ed:f2:ca:3c:49:62:3e:69:c9:dc:e9:3b:
                    ba:e5:74:53:3b:35:db:0b:e5:e4:55:2c:95:21:ae:
                    43:16:06:28:85:44:c7:0a:e3:d3:1d:c9:ea:b0:56:
                    ed:85:2c:ce:c0:c8:4b:b8:a7:2e:18:59:37:f1:10:
                    e6:59:0a:45:45:63:32:57:0a:d8:35:24:f3:d3:4e:
                    cf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:73:74:63:C4:2A:3D:4A:A0:69:EF:60:EC:70:8C:6C:D9:E9:CF:46
            X509v3 Authority Key Identifier:
                keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/E5D4B662020C11EF924D0064C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.96.0/23
                  103.244.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:fe:ff:21:4d:33:f3:f4:78:8c:c6:4a:41:f9:a4:e5:f6:2a:
         1b:d7:c3:ac:fb:bd:d9:43:0b:92:e1:08:7c:e9:78:31:1b:00:
         c5:35:a4:e3:b2:fb:62:a2:e3:54:0d:6b:9f:ef:55:6e:05:ae:
         51:dd:42:1c:b3:a5:8a:d5:86:1d:5c:15:61:70:49:c2:d9:91:
         be:72:86:13:43:3b:20:89:82:63:a3:f9:19:70:61:56:53:ab:
         fb:57:c0:8e:bf:31:e6:79:fb:e2:7b:a8:4e:d3:f7:0d:cd:5e:
         fd:3f:c3:8b:0a:88:16:b7:3c:12:e5:31:a5:8e:09:7d:99:6c:
         b8:86:d2:4b:e4:90:34:68:69:00:90:cd:8b:7d:65:d8:9a:2d:
         06:37:0e:00:32:80:36:3a:95:04:02:1c:59:c9:da:b0:e5:39:
         82:ad:fa:21:87:03:7d:7b:9e:32:1e:e9:2c:a2:52:d9:88:38:
         36:c9:9c:46:76:9e:3a:15:eb:8b:76:68:81:39:7b:8c:80:56:
         3f:a6:c4:ef:9c:36:33:91:19:49:ae:38:62:54:7b:3d:65:1e:
         74:91:09:2a:c7:46:f6:4f:58:48:da:ce:ed:b7:40:13:0c:f3:
         78:7e:a9:07:35:9e:57:8d:3e:21:f2:96:06:7a:fe:9c:6b:26:
         ca:eb:c1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:36:04 2026 by rpki-client