This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/A2EF68E66EAD11EC8796A251C4F9AE02.roa
File:                     A2EF68E66EAD11EC8796A251C4F9AE02.roa (raw, json)
Hash identifier:          Dil3/Uk9eT2zGIdSHil/xOkblPnb6d1LUXZm1Mfn7EY=
Subject key identifier:   9B:66:6B:F4:08:7A:30:22:F0:F1:A9:82:18:8B:69:82:E8:21:66:81
Certificate issuer:       /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Certificate serial:       0754
Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/A2EF68E66EAD11EC8796A251C4F9AE02.roa
Signing time:             Wed 31 Dec 2025 21:17:55 +0000
ROA not before:           Wed 31 Dec 2025 21:17:55 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138623
IP address blocks:        103.174.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
                          rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1876 (0x754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
        Validity
            Not Before: Dec 31 21:17:55 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69559303-0d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:ac:5d:60:7e:79:5f:95:c7:20:c3:55:18:
                    9b:21:86:fd:0c:14:38:17:be:99:b9:13:93:a6:13:
                    d9:4e:16:d1:85:86:71:14:81:6a:a5:cd:17:4d:79:
                    13:36:70:42:38:84:d4:3b:ed:b3:52:7f:d8:ae:76:
                    eb:72:d7:33:39:20:ca:78:e5:62:3d:08:0f:90:92:
                    ce:3c:83:4e:27:84:80:e4:8b:78:ae:83:80:2c:22:
                    a6:81:de:50:71:5d:82:90:77:b4:67:97:aa:b4:d4:
                    f0:a3:1b:e9:11:0b:3a:6c:cc:b6:92:42:62:6a:12:
                    6d:8f:1c:01:ea:a8:15:21:b7:b1:c5:77:af:a4:2b:
                    10:be:5e:9e:d4:56:18:55:a2:23:07:6d:91:58:cc:
                    8b:3c:2b:82:e3:75:96:27:c8:10:19:aa:28:38:9b:
                    e9:cf:b1:54:ab:17:3b:db:a3:57:f5:40:bc:cc:20:
                    d7:b0:0c:81:5e:1e:dd:f8:35:66:21:5a:b8:68:e8:
                    9e:f1:dd:97:f5:cf:71:30:de:0f:9d:f4:92:af:28:
                    90:02:ae:b4:67:55:33:68:78:3f:d3:b5:fa:42:33:
                    b7:cc:fc:41:ea:77:b2:41:ef:b9:b0:bd:df:08:c3:
                    49:4e:ea:8c:54:b6:c0:10:48:5f:5b:4e:7e:0f:c1:
                    a2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:66:6B:F4:08:7A:30:22:F0:F1:A9:82:18:8B:69:82:E8:21:66:81
            X509v3 Authority Key Identifier:
                keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/A2EF68E66EAD11EC8796A251C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:d3:fb:d9:79:c4:07:01:2c:73:d0:ef:8d:c2:82:18:27:40:
         23:f8:fe:e0:0b:c3:83:d7:e1:fb:da:4c:42:39:6e:54:63:46:
         b5:d5:b2:c5:d2:06:d0:60:3b:c3:e3:56:43:96:8e:e3:6f:ec:
         4b:d6:eb:19:a2:b9:77:a0:e2:aa:51:b8:34:9a:bb:37:e0:49:
         69:76:f1:c6:6b:90:13:4f:f6:ef:ea:92:92:70:95:a3:56:f3:
         11:a0:64:14:8c:69:d1:f5:1f:6b:28:fc:91:43:68:94:81:f7:
         c7:2a:10:87:1a:a4:36:6a:cf:a2:03:3a:6f:cc:2a:d7:19:ea:
         84:82:fc:ef:b8:f7:b2:7f:5e:1c:bf:93:fa:43:3a:a2:9c:25:
         aa:6f:85:0d:62:67:b7:54:d6:d6:aa:12:7e:23:62:d7:3e:6b:
         01:f9:32:fd:fc:5f:28:72:1c:87:ee:6e:38:cd:60:3f:a9:39:
         4c:55:a7:ac:3c:06:11:cd:67:c2:a3:bd:32:8f:98:f2:4f:8b:
         73:28:f5:3a:04:1c:01:2c:4e:41:e6:25:d0:af:41:05:7e:f7:
         76:66:a3:0f:52:a7:be:52:cb:b1:b1:e4:60:76:96:d1:72:b2:
         a3:fb:b1:2a:5b:7d:14:4f:b9:76:80:7c:aa:e5:e4:a1:4f:83:
         75:87:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:40:31 2026 by rpki-client