This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6811EDA5FB811F094135B2FC4F9AE02.roa
File:                     C6811EDA5FB811F094135B2FC4F9AE02.roa (raw, json)
Hash identifier:          8/V2sHjr42e5N/lR0CoOJsr9Br+b2FymeTwakMM19HI=
Subject key identifier:   C6:E6:97:68:98:F5:48:D3:ED:A3:57:43:97:77:C8:37:7D:60:47:91
Certificate issuer:       /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Certificate serial:       95
Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6811EDA5FB811F094135B2FC4F9AE02.roa
Signing time:             Sun 18 Jan 2026 17:55:00 +0000
ROA not before:           Sun 18 Jan 2026 17:55:00 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     136209
IP address blocks:        103.43.70.0/24 maxlen: 24
                          103.43.71.0/24 maxlen: 24
                          103.50.91.0/24 maxlen: 24
                          103.82.141.0/24 maxlen: 24
                          103.82.142.0/24 maxlen: 24
                          103.82.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
                          rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
        Validity
            Not Before: Jan 18 17:55:00 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696d1e74-97d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c7:89:af:d0:63:b4:b7:2a:46:0b:39:1c:e5:
                    67:12:77:12:4a:ee:fd:66:b2:f3:53:ad:2b:f7:03:
                    a7:42:9c:86:24:60:ce:b5:19:7c:2c:7e:97:56:3c:
                    8d:75:50:27:5f:40:c0:34:61:0a:5a:44:83:af:f2:
                    04:1b:1c:0d:15:14:55:71:ff:b9:fb:d6:1a:55:3d:
                    e0:8e:00:b2:0f:28:7c:7c:45:39:93:0d:4c:69:ce:
                    c0:b6:29:22:be:fc:af:8f:f6:d2:e7:6d:95:3b:07:
                    9d:75:12:09:43:aa:e8:ce:d6:ea:01:4f:13:10:1a:
                    51:a7:a8:0a:ab:95:32:bc:b1:f7:c2:26:32:1c:33:
                    66:2d:41:cc:31:39:e3:00:85:95:86:f4:2a:6b:91:
                    48:6f:a1:b1:57:cc:a7:6a:5c:28:19:a5:51:51:43:
                    6c:71:40:06:12:69:bb:02:ae:ac:e1:6d:21:11:21:
                    75:f5:15:6f:8b:02:01:51:d9:97:47:0d:b1:f4:c5:
                    85:1c:dc:da:48:29:32:ff:36:ed:73:90:35:83:05:
                    78:2b:32:95:e4:33:6e:0d:ed:22:1b:35:75:85:c5:
                    e5:e5:4d:c5:26:45:4b:f7:80:a9:7d:d7:74:7a:e4:
                    6e:41:71:c5:d7:37:fa:a0:ce:fd:2c:b1:98:63:36:
                    6a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E6:97:68:98:F5:48:D3:ED:A3:57:43:97:77:C8:37:7D:60:47:91
            X509v3 Authority Key Identifier:
                keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6811EDA5FB811F094135B2FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.70.0/23
                  103.50.91.0/24
                  103.82.141.0-103.82.143.255

    Signature Algorithm: sha256WithRSAEncryption
         77:85:58:1b:b6:43:49:0e:56:66:e9:50:51:42:07:eb:2a:2a:
         ea:b9:ce:e8:63:52:4f:8b:a3:c9:63:68:58:0a:da:84:de:89:
         f1:e2:aa:91:5e:f6:82:1d:bc:5d:a9:93:7a:e3:e1:7a:1e:6e:
         49:d7:f4:88:42:6d:b3:eb:e4:e5:b0:83:10:56:f6:5d:ff:c1:
         d5:8a:62:40:72:02:94:86:0a:7e:b2:22:8f:84:26:6d:c5:e4:
         1f:e3:a1:59:24:9a:0e:fe:08:39:c0:0d:13:86:04:f5:1b:7b:
         43:4c:fd:7e:e0:24:98:fe:90:85:76:8a:2f:c7:6a:2b:1c:e0:
         7a:0d:3b:a3:af:1b:aa:01:ed:30:99:fa:e6:43:22:20:12:8f:
         a3:85:6f:80:2d:6d:0f:8b:58:45:00:49:56:1b:44:a9:b5:10:
         e0:a5:08:14:7f:df:11:be:ce:86:f3:60:cb:b0:dd:86:8d:62:
         e7:75:56:d3:b6:d8:e4:c7:50:ea:81:7b:1a:2a:46:83:2c:e9:
         46:8b:b1:15:fe:76:fe:0f:2f:a1:78:e8:53:6c:6b:36:64:40:
         9c:fe:04:6c:f0:6f:66:67:79:33:5e:25:00:53:15:c3:87:2f:
         3c:57:bb:90:b1:57:be:fa:7c:91:2c:ab:eb:91:db:5b:33:74:
         42:2c:a8:2a
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
Q0MwQzkxMTAvBgNVBAUTKDQ3QjU3N0I5QzhBQkUyQzM2MDBDNUI0RTc5M0ZGNEQ0
N0I2NTA2MjAwHhcNMjYwMTE4MTc1NTAwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZkMWU3NC05N2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqMeJr9BjtLcqRgs5HOVnEncSSu79ZrLzU60r9wOnQpyGJGDOtRl8LH6XVjyN
dVAnX0DANGEKWkSDr/IEGxwNFRRVcf+5+9YaVT3gjgCyDyh8fEU5kw1Mac7Atiki
vvyvj/bS522VOweddRIJQ6roztbqAU8TEBpRp6gKq5UyvLH3wiYyHDNmLUHMMTnj
AIWVhvQqa5FIb6GxV8ynalwoGaVRUUNscUAGEmm7Aq6s4W0hESF19RVviwIBUdmX
Rw2x9MWFHNzaSCky/zbtc5A1gwV4KzKV5DNuDe0iGzV1hcXl5U3FJkVL94Cpfdd0
euRuQXHF1zf6oM79LLGYYzZqfQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFMbml2iY
9UjT7aNXQ5d3yDd9YEeRMB8GA1UdIwQYMBaAFEe1d7nIq+LDYAxbTnk/9NR7ZQYg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzBDOS9DNURBQkVFQTVG
QjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRzTmdERnRPZVRfMDFIdGxC
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJpQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0MwQzkvQzVEQUJFRUE1RkI0MTFGMDgyMDM0NDdEQzRGOUFFMDIvQzY4MTFFREE1
RkI4MTFGMDk0MTM1QjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E
JDAiMCAEAgABMBoDBAFnK0YDBABnMlswDAMEAGdSjQMEBGdSgDANBgkqhkiG9w0B
AQsFAAOCAQEAd4VYG7ZDSQ5WZulQUUIH6yoq6rnO6GNST4ujyWNoWArahN6J8eKq
kV72gh28XamTeuPheh5uSdf0iEJts+vk5bCDEFb2Xf/B1YpiQHIClIYKfrIij4Qm
bcXkH+OhWSSaDv4IOcANE4YE9Rt7Q0z9fuAkmP6QhXaKL8dqKxzgeg07o68bqgHt
MJn65kMiIBKPo4VvgC1tD4tYRQBJVhtEqbUQ4KUIFH/fEb7OhvNgy7Ddho1i53VW
07bY5MdQ6oF7GipGgyzpRouxFf52/g8voXjoU2xrNmRAnP4EbPBvZmd5M14lAFMV
w4cvPFe7kLFXvvp8kSyr65HbWzN0QiyoKg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:55:43 2026 by rpki-client