This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/2601F1CEEB7111F0839E97F34E6F56BC.roa
File:                     2601F1CEEB7111F0839E97F34E6F56BC.roa (raw, json)
Hash identifier:          I/Y87XRrRQwO7a2UPMEge+E7HPCSkvSS2jWDgsl93I0=
Subject key identifier:   EE:6C:2F:9C:80:97:73:DE:A3:B5:75:E5:D5:6F:AB:D2:D7:60:A6:4F
Certificate issuer:       /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Certificate serial:       1C
Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/2601F1CEEB7111F0839E97F34E6F56BC.roa
Signing time:             Wed 07 Jan 2026 02:32:45 +0000
ROA not before:           Wed 07 Jan 2026 02:32:45 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136203
IP address blocks:        103.83.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
                          rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
        Validity
            Not Before: Jan  7 02:32:45 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=695dc5cd-048a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:cb:75:b5:bc:50:6e:2e:89:9b:3e:5d:36:
                    9f:27:80:ff:64:bc:ab:ff:ee:58:56:57:a8:91:d4:
                    85:ef:c1:12:76:ce:d3:59:4b:5b:c0:d5:ba:f5:56:
                    85:b5:10:38:7e:95:88:8e:29:ee:69:6a:94:d7:fc:
                    2e:90:b1:a0:34:50:3b:ce:b4:e8:32:f8:ce:6b:8a:
                    85:27:b3:10:99:b2:7d:c6:16:75:7e:02:9f:19:d2:
                    1e:1b:cc:27:c6:0d:91:3a:18:11:46:9e:8a:50:4d:
                    98:ce:25:d0:77:44:50:23:6a:3e:05:79:ff:5c:fc:
                    b0:f7:d0:1d:30:fe:a6:72:c1:f5:34:94:96:02:5b:
                    ce:8a:40:88:45:c1:60:bb:a9:6e:3b:cb:3e:67:bb:
                    30:22:23:f4:70:5c:3c:d2:c4:47:10:5d:03:99:9f:
                    61:a6:dc:16:8c:84:a1:ef:86:4d:94:f8:e4:13:44:
                    3c:77:e1:7b:5f:03:55:43:61:d5:3b:ab:4b:7b:c0:
                    d8:7a:72:d8:81:9c:48:c4:4b:bb:1e:4d:10:07:7b:
                    14:79:e3:f6:9f:c7:84:dc:37:ef:0c:94:46:b0:30:
                    73:0b:65:47:ff:1b:1a:98:c2:74:c5:ae:04:94:d8:
                    24:a3:59:60:be:39:bf:ea:19:fb:3f:ba:3c:99:73:
                    b8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6C:2F:9C:80:97:73:DE:A3:B5:75:E5:D5:6F:AB:D2:D7:60:A6:4F
            X509v3 Authority Key Identifier:
                keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/2601F1CEEB7111F0839E97F34E6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:b5:71:31:27:83:2c:ff:9a:f9:f6:db:b6:25:30:62:8b:d7:
         b5:df:93:b5:32:5c:4b:9b:c0:b7:81:06:2f:56:cb:c8:c2:b7:
         d5:4b:a8:71:6d:fc:f5:24:70:ea:93:7e:7c:15:c8:66:3c:d0:
         a7:1b:a6:cb:4a:ee:9b:f5:b6:84:19:70:64:ca:86:40:7d:c1:
         36:eb:34:4d:d1:a9:12:67:e0:93:80:6c:8e:b4:8f:19:47:c6:
         3f:45:c0:60:79:b9:75:0c:cc:9b:5e:5e:64:05:7f:fa:34:9a:
         e8:05:44:6b:4a:b2:03:b0:5b:5e:8c:5e:42:2a:5e:d3:17:84:
         0b:9b:7c:73:ea:a1:a6:77:90:ca:61:18:dc:f2:df:9c:78:b3:
         c7:d2:7b:48:0b:aa:2b:55:78:bd:5f:7d:71:6b:0a:c3:4d:da:
         27:9f:87:12:8f:b1:0e:e2:80:5a:f8:d7:a8:52:3b:5d:92:67:
         25:51:70:9d:44:cc:96:35:3d:3d:34:aa:c5:91:4b:d5:52:e0:
         ca:a2:64:1b:5d:79:ee:e7:d8:3e:e7:5f:9c:93:8b:bc:bf:1a:
         49:6c:b7:f5:b4:f6:d1:bf:f9:cc:25:66:33:c0:fd:ad:e7:7b:
         96:66:ed:79:8a:66:a0:85:ae:86:10:f4:e5:68:e4:80:79:19:
         e8:6a:8f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:15:28 2026 by rpki-client