This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/3A3E36B6631811F089107C4AC4F9AE02.roa
File:                     3A3E36B6631811F089107C4AC4F9AE02.roa (raw, json)
Hash identifier:          Kc95KrPSVinTJLRBIl8Mqpr4G21/wGRjTb7/cm+2W7E=
Subject key identifier:   8E:0F:E1:B6:2F:1D:3B:10:9C:AD:29:67:D3:56:B9:F9:85:78:65:5B
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       0419
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/3A3E36B6631811F089107C4AC4F9AE02.roa
Signing time:             Sat 17 Jan 2026 00:20:07 +0000
ROA not before:           Sat 17 Jan 2026 00:20:07 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     142063
IP address blocks:        103.172.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: Jan 17 00:20:07 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=696ad5b7-ffee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:1a:aa:17:03:08:af:71:71:bc:6e:4e:f9:
                    6c:a8:a9:b1:eb:88:50:bd:52:2f:9b:ee:2d:90:c0:
                    f1:2a:73:ec:4a:8f:a8:99:b8:12:a3:4c:5e:09:86:
                    41:3c:c2:55:ff:06:09:9e:d4:3f:b1:6c:34:e6:6a:
                    0f:15:dd:00:87:34:8e:5e:7f:2f:ab:9a:c1:d2:b0:
                    2b:df:16:fc:4d:5d:0d:28:2a:63:ef:04:f6:69:05:
                    4b:ef:67:31:62:6b:c1:3c:c8:ee:cb:65:70:49:18:
                    98:80:94:08:2f:f7:dc:f4:78:ff:15:96:ef:ad:0e:
                    58:72:7c:5f:da:e7:07:a3:c8:46:3d:8f:06:b6:f9:
                    59:96:2e:bf:3e:14:e9:87:6e:2e:4c:d3:e0:d3:05:
                    fa:15:02:a6:31:f2:13:9c:52:5d:45:23:3e:61:de:
                    05:22:8f:bd:97:f5:b8:68:a0:81:9f:08:a2:ac:b8:
                    4d:ab:da:d2:96:47:fa:62:19:3f:19:e5:13:87:01:
                    72:4e:26:64:d5:8d:fb:4b:6e:be:bc:1c:2c:59:9c:
                    29:8e:32:9f:ff:fb:92:26:80:be:72:c8:a4:42:66:
                    ea:4d:b7:2f:ad:de:f4:da:99:55:57:19:85:60:14:
                    4e:88:3d:02:b7:5e:fa:cf:ea:af:cf:ec:18:7f:12:
                    09:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0F:E1:B6:2F:1D:3B:10:9C:AD:29:67:D3:56:B9:F9:85:78:65:5B
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/3A3E36B6631811F089107C4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:84:33:83:2b:9e:f9:5c:83:16:70:ca:ce:4c:14:9a:ee:f8:
         a7:df:b7:b1:37:0d:48:ec:39:bd:e9:d9:34:10:e7:24:8b:4e:
         fe:9e:cf:9d:60:8f:31:52:07:80:0a:14:f6:df:0a:9f:4e:92:
         0a:fa:85:94:e7:d8:37:97:2a:8d:ac:2e:b1:e6:f7:90:c9:7d:
         d6:31:43:c8:1c:4a:9d:98:54:b3:0a:b3:1c:1a:02:99:3f:16:
         3b:66:8c:98:5e:dc:31:70:2e:da:43:7c:05:d4:4e:88:ef:dc:
         dc:f8:07:ab:bf:60:1b:4a:91:1c:78:d9:3a:cb:d7:d5:a9:7f:
         0e:d5:d2:e0:b6:d7:e4:70:bf:e1:7b:c7:cb:a3:52:65:77:8d:
         c5:5a:30:50:a2:5b:b9:87:ab:47:4e:a9:53:49:9a:ac:af:41:
         3a:a2:4c:29:59:df:14:60:91:65:f6:ec:32:38:5f:66:ab:c6:
         98:d8:f5:c6:c0:4e:0d:e8:67:8b:eb:1d:68:9e:db:22:44:f3:
         e8:4c:5b:b2:3a:0b:a6:fc:9e:46:ed:31:7d:26:05:6d:83:fa:
         ca:dd:89:22:86:99:c7:f7:67:26:23:08:0e:91:3a:44:68:47:
         99:6f:58:2d:c9:97:f6:ec:cf:a2:c0:71:62:3a:d7:66:25:ab:
         56:0c:1c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:52:39 2026 by rpki-client