This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/18BDABD2537F11F0A9531C09C4F9AE02.roa
File:                     18BDABD2537F11F0A9531C09C4F9AE02.roa (raw, json)
Hash identifier:          JyKnKAClCekGtVz3OhYaji0DJROsJUlxnd63uwVdmLo=
Subject key identifier:   F8:01:DD:6F:B9:5F:23:02:14:4A:96:86:11:84:7B:40:25:7F:08:EB
Certificate issuer:       /CN=A91C7672/serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83
Certificate serial:       7F
Authority key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/18BDABD2537F11F0A9531C09C4F9AE02.roa
Signing time:             Wed 31 Dec 2025 16:13:40 +0000
ROA not before:           Wed 31 Dec 2025 16:13:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139029
IP address blocks:        103.78.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl
                          rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83
        Validity
            Not Before: Dec 31 16:13:40 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69554bb4-8f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:79:59:1b:19:24:eb:86:aa:62:0c:3d:80:e0:
                    3e:09:51:09:75:4e:78:fd:7a:2c:13:b7:e5:80:65:
                    01:40:6c:f8:45:85:ef:dc:8a:c1:92:d6:79:97:71:
                    41:59:fd:09:7d:61:52:e4:01:da:bd:d7:19:e0:b4:
                    06:3f:03:f5:cd:6d:7c:a7:ed:51:24:4c:da:99:d4:
                    98:f9:cf:1e:80:4d:83:c5:0a:68:29:24:46:22:e1:
                    b5:66:e8:59:f2:e9:9f:bf:04:22:f3:75:8d:63:0c:
                    fe:95:08:e5:02:d3:43:f9:f6:e1:5e:1a:40:0c:7e:
                    dd:6a:9f:fb:3f:d6:df:40:b7:6c:a8:49:ac:9b:cd:
                    d9:50:67:04:3b:41:b1:8f:7c:58:fc:31:8e:bf:57:
                    b3:e1:59:39:38:22:d4:4a:f5:4f:e8:5a:35:5a:89:
                    68:d1:c4:8a:18:ac:84:b2:f4:7e:eb:52:ec:51:6e:
                    1f:31:46:31:64:f8:54:80:ac:17:86:2f:02:7e:70:
                    0a:5f:ae:f1:e6:97:ab:0a:b7:b7:8e:17:cc:a9:fa:
                    05:55:46:45:ca:26:77:36:e3:4d:b6:5e:d8:47:cd:
                    6b:e7:01:de:6a:82:13:c1:7a:78:fb:1e:5b:74:53:
                    fb:07:2b:0a:4b:03:8d:3b:f7:aa:13:05:c3:79:f3:
                    b3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:01:DD:6F:B9:5F:23:02:14:4A:96:86:11:84:7B:40:25:7F:08:EB
            X509v3 Authority Key Identifier:
                keyid:6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/18BDABD2537F11F0A9531C09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:bc:aa:d0:d9:27:9c:fb:90:bf:87:a1:86:b5:2e:2b:ae:00:
         cc:08:bc:89:d7:3f:1a:42:6b:60:85:d2:7c:ad:25:44:84:61:
         a8:ea:c0:a8:c8:72:5c:72:8a:f6:72:34:89:f7:2a:f8:52:b4:
         62:08:75:09:68:c6:23:59:58:95:03:11:fc:f9:a1:6c:42:ad:
         98:2d:12:d7:9f:de:66:4c:6e:ed:22:47:6a:af:bb:be:15:cf:
         4a:03:f9:94:df:ab:c2:f9:10:9e:11:1e:eb:c6:25:94:80:83:
         ec:b8:69:7e:e6:37:83:39:0e:f5:78:6c:c5:86:e1:82:e5:57:
         d6:ea:cc:6b:ac:4b:22:5a:3d:60:3b:ca:a2:54:c3:37:30:1a:
         cd:c8:a1:45:85:b2:bf:58:d3:a9:e2:57:5f:49:33:2a:b1:92:
         3a:b8:0b:46:e0:83:e3:e9:66:83:37:99:a7:80:9d:69:fe:ec:
         1e:31:67:16:61:2d:f0:18:3b:c0:25:76:9e:72:83:64:52:21:
         7d:37:8c:42:96:45:87:20:de:2c:87:6f:2c:a5:98:50:7a:2e:
         d6:f9:70:2b:d6:9f:fb:57:64:f6:57:a5:51:ec:3d:43:29:ba:
         43:38:34:eb:51:4c:5a:ea:f4:47:67:af:75:06:28:b9:b0:3d:
         a7:36:1a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:00 2026 by rpki-client