This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/715A7174F80411F099DDF14C6E6F56BC.roa
File:                     715A7174F80411F099DDF14C6E6F56BC.roa (raw, json)
Hash identifier:          czSUWkJH2qK1x4LMIuOs8ap+/AAaQlGwSHC4CNcs3zI=
Subject key identifier:   88:53:60:8F:C8:20:10:9F:A4:CC:23:A5:39:65:DA:0B:81:7F:0C:9B
Certificate issuer:       /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Certificate serial:       075C
Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/715A7174F80411F099DDF14C6E6F56BC.roa
Signing time:             Fri 23 Jan 2026 02:37:22 +0000
ROA not before:           Fri 23 Jan 2026 02:37:21 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     42960
IP address blocks:        103.96.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
                          rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1884 (0x75c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
        Validity
            Not Before: Jan 23 02:37:21 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6972dee1-1df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a0:a7:a7:8b:3f:f4:64:62:77:d6:67:dc:d9:
                    54:4d:93:33:4d:d4:f1:8c:ba:53:53:73:92:18:64:
                    3a:ed:c7:54:63:7b:4d:7c:3d:f9:50:1a:76:22:2c:
                    b2:f9:6c:fb:82:a4:f3:1d:ed:a9:b0:df:40:fb:c3:
                    9b:4b:cd:05:e6:5e:da:ff:4e:c3:91:fb:87:ae:cc:
                    34:24:37:61:fb:03:f1:ed:3a:49:0e:6a:e8:8f:58:
                    d9:a8:75:17:ca:b4:76:9b:90:5a:74:f9:12:bb:3a:
                    10:dc:d6:dd:28:f8:b5:52:c1:80:da:ea:46:a1:ab:
                    2e:f9:06:3a:cf:ff:cb:5e:11:9f:f8:2b:b4:25:77:
                    c3:3a:0b:6f:ac:41:62:8e:99:e7:99:8e:f5:01:ec:
                    c8:a2:6d:1c:eb:93:3c:d0:42:1c:64:ca:6b:2c:8b:
                    dd:9c:f8:6d:0a:bc:8d:f8:29:ec:89:bf:35:4e:f3:
                    83:69:a9:7e:31:2d:a1:07:86:97:14:7b:0c:ee:e9:
                    49:f0:c4:2c:dd:cb:e5:93:ff:67:ba:3d:ba:2d:51:
                    ae:43:59:9b:45:30:65:6e:46:86:27:a1:cb:30:da:
                    8b:3b:1c:9a:15:b4:d9:8a:70:9d:87:ac:1d:57:a6:
                    44:86:06:db:1d:2d:fc:16:e7:bb:b7:75:b5:9e:09:
                    ac:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:53:60:8F:C8:20:10:9F:A4:CC:23:A5:39:65:DA:0B:81:7F:0C:9B
            X509v3 Authority Key Identifier:
                keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/715A7174F80411F099DDF14C6E6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:63:6f:15:0a:da:07:06:45:23:b9:3b:83:f3:a6:04:63:69:
         f3:52:94:61:29:11:88:19:9d:23:98:10:3b:0f:8d:62:a6:d1:
         6a:da:6b:8e:85:bf:d0:ee:36:51:ec:5e:e7:c0:20:44:52:e8:
         96:63:ff:21:9e:b0:7b:a9:c1:70:2f:1d:83:a8:9f:47:1f:ea:
         ff:d1:a0:90:7d:db:5b:90:f1:1b:77:bb:fc:b0:c8:83:72:eb:
         b1:37:d0:7d:b6:21:70:54:8a:ab:a1:7f:e7:f7:ee:6d:6f:30:
         0c:40:62:fc:1e:a0:9d:d2:85:c6:7b:84:f6:7a:0f:35:ed:27:
         c6:25:3b:b0:58:77:00:37:d0:7a:7c:43:cc:13:17:55:9c:a7:
         54:4b:2d:a7:58:37:81:34:e9:d9:ec:82:36:3c:8b:29:ae:d7:
         4d:1a:f9:3b:8b:b6:74:ad:40:92:66:c8:3d:06:6f:82:23:44:
         74:ff:fa:4e:89:e2:ac:ef:95:60:db:82:d9:24:a6:7f:d2:31:
         28:18:7f:23:56:ac:7c:a2:2b:41:7c:6a:30:30:2a:f7:19:07:
         f6:c9:e4:69:05:bd:38:71:2b:b9:7e:86:cf:23:04:d2:dd:03:
         cb:67:a7:b9:65:09:a7:80:f6:d1:c3:eb:4f:0c:3c:a7:e6:4a:
         51:ae:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:34 2026 by rpki-client