This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/ABC69EAEEE3C11F0B9A6920D4D6F56BC.roa
File:                     ABC69EAEEE3C11F0B9A6920D4D6F56BC.roa (raw, json)
Hash identifier:          PeMe5OFS4nvrvoo9TNdEb2gqBkxCMMBpX6r0URkDzM8=
Subject key identifier:   DE:E3:24:5E:48:DF:9A:2A:2E:C9:A2:51:C4:B2:5F:55:B9:DA:9E:FB
Certificate issuer:       /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial:       023E
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/ABC69EAEEE3C11F0B9A6920D4D6F56BC.roa
Signing time:             Sat 10 Jan 2026 15:54:40 +0000
ROA not before:           Sat 10 Jan 2026 15:54:40 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     141778
IP address blocks:        103.189.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
                          rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
        Validity
            Not Before: Jan 10 15:54:40 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6962763f-c0e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:99:2a:96:80:d5:70:9b:db:92:f4:a8:18:
                    c0:35:75:62:32:b2:40:9c:8e:27:1b:6e:20:41:43:
                    94:57:46:14:7e:dc:32:9e:c1:5d:11:82:11:03:ea:
                    81:60:7b:a5:5c:ed:6e:92:17:16:c5:4b:8e:20:3e:
                    b3:18:0e:3a:42:ad:3a:aa:12:9d:0e:4e:70:78:8d:
                    ef:17:74:92:3d:ac:2d:49:0e:6f:10:f6:74:e2:14:
                    c7:d2:e7:04:23:1f:92:2a:a2:ad:2e:99:1b:de:cb:
                    6d:a1:8e:2c:ef:8b:65:04:c4:bc:4d:9e:aa:37:bb:
                    df:4b:05:ba:fb:ec:de:e9:34:73:5f:dc:d0:2c:64:
                    75:6a:5d:6d:7b:07:d4:b8:cf:9f:b0:a3:be:d2:12:
                    86:99:6e:14:d5:05:66:07:f5:6a:b2:94:6c:28:c5:
                    6b:d0:ca:b0:82:cd:7e:96:40:8a:bd:2d:6b:32:cc:
                    0e:67:3f:9c:21:ca:a7:f5:94:03:af:99:82:bd:23:
                    07:41:10:01:82:a1:48:f5:ba:21:a4:73:6c:dc:e7:
                    62:56:46:9c:e9:72:51:b3:41:49:5a:25:d0:17:2a:
                    c4:f7:02:90:e6:cb:ed:75:80:c3:3d:6b:b5:ac:14:
                    6c:fa:b7:f8:71:f9:e4:d2:63:ca:b0:c8:b4:87:b5:
                    a9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E3:24:5E:48:DF:9A:2A:2E:C9:A2:51:C4:B2:5F:55:B9:DA:9E:FB
            X509v3 Authority Key Identifier:
                keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/ABC69EAEEE3C11F0B9A6920D4D6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:f2:eb:70:22:be:53:75:04:6f:29:82:23:5c:31:14:ae:86:
         8f:a3:53:97:7f:09:ab:67:37:38:88:3b:4e:d7:cc:69:91:28:
         eb:7f:2f:63:52:68:5d:aa:d5:de:ff:be:f9:80:0b:28:2e:95:
         7f:9f:37:8a:ad:73:68:dd:81:f8:c5:66:1a:3e:31:73:50:85:
         e0:d4:f8:6a:b8:73:d4:28:e5:10:f1:dc:87:45:16:aa:52:4e:
         73:a7:85:d1:f7:09:4f:ac:50:e7:87:c9:bb:65:f3:e7:18:09:
         7e:31:cb:ee:0c:7e:0f:05:15:5b:2a:b3:2f:3b:68:11:8f:b0:
         89:30:3b:5a:ed:67:c9:ec:1b:92:b6:c3:e9:9d:9e:be:b8:7c:
         3a:fc:58:70:d9:8f:d8:3c:4f:ff:a0:8f:36:00:54:3b:5b:61:
         3c:0b:94:5b:4a:0d:96:bd:2f:d4:d0:f0:23:18:27:ee:06:d0:
         01:94:10:77:79:ce:36:82:d7:f6:89:c2:e2:86:f2:3a:bc:af:
         2d:b5:5f:5e:fb:1c:c1:d4:14:55:40:21:ad:05:a3:ca:a0:4c:
         f5:98:b9:c1:57:8e:0f:9d:ec:58:0e:e4:76:c9:22:47:bd:33:
         ba:e7:9c:3b:d9:fa:d7:bf:a1:51:30:6c:fc:22:a0:13:fc:c1:
         f6:29:16:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:26:29 2026 by rpki-client