This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/4A31F616E8DD11F0AFF4FBBE636F56BC.roa
File:                     4A31F616E8DD11F0AFF4FBBE636F56BC.roa (raw, json)
Hash identifier:          1KM1bFKVJjKJY9RFjtArJTK0rbIigsPOhJEAbj9nQSg=
Subject key identifier:   EC:27:32:E3:53:DE:46:B9:4D:C4:11:B0:7C:72:88:FE:DD:F7:D6:49
Certificate issuer:       /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429
Certificate serial:       098E
Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/4A31F616E8DD11F0AFF4FBBE636F56BC.roa
Signing time:             Fri 23 Jan 2026 02:51:13 +0000
ROA not before:           Fri 23 Jan 2026 02:51:13 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     135130
IP address blocks:        103.210.56.0/24 maxlen: 24
                          103.210.57.0/24 maxlen: 24
                          103.210.58.0/24 maxlen: 24
                          103.210.59.0/24 maxlen: 24
                          2404:6480::/32 maxlen: 32
                          2404:6480::/48 maxlen: 48
                          2404:6480:1::/48 maxlen: 48
                          2404:6480:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl
                          rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2446 (0x98e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429
        Validity
            Not Before: Jan 23 02:51:13 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6972e221-f9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:ac:d9:93:c5:d3:c8:6c:aa:24:97:c0:26:
                    f5:7b:0e:47:7e:04:c5:3b:54:ee:79:3f:bf:19:a2:
                    14:5b:ef:f3:3f:69:d8:7e:b6:3e:be:a8:28:93:07:
                    9d:74:e1:4a:b1:84:4d:11:92:b2:18:56:21:b2:b4:
                    d6:27:c8:8a:ac:3b:86:7d:58:54:b3:52:bf:01:ca:
                    7b:0e:21:f4:71:55:2a:e3:52:c3:cd:8e:83:6d:95:
                    d3:b6:83:e7:5c:db:3d:13:58:f7:f9:6a:a7:1d:f4:
                    1b:03:cb:a3:9c:12:4c:6e:43:f9:f8:fa:cd:b1:87:
                    60:6f:d5:72:c7:25:c1:fd:2a:e3:de:71:0a:f5:4f:
                    28:89:69:6c:d8:f7:73:7e:4b:ea:24:c2:be:f0:cb:
                    3b:29:f2:3b:0f:62:a9:95:86:a4:c1:98:32:ea:04:
                    4a:6d:6a:2a:29:20:d2:08:43:19:2c:e7:e9:0e:37:
                    45:4f:43:38:0a:fc:59:99:9b:52:10:8c:aa:0c:3f:
                    5f:73:98:13:44:c9:40:87:04:90:27:24:35:2d:f8:
                    08:15:5d:75:5b:70:1c:f3:d3:fa:28:d3:d5:bf:56:
                    11:d8:20:a6:b9:f0:d6:7c:9c:ee:19:ab:58:40:33:
                    48:f6:ab:b5:1e:52:2d:7c:7a:fb:08:b2:f4:ab:48:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:27:32:E3:53:DE:46:B9:4D:C4:11:B0:7C:72:88:FE:DD:F7:D6:49
            X509v3 Authority Key Identifier:
                keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/4A31F616E8DD11F0AFF4FBBE636F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.56.0/22
                IPv6:
                  2404:6480::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:5a:ed:39:52:70:01:91:58:73:ac:5a:29:e5:95:94:7f:9b:
         a3:e4:84:86:dc:9a:46:b3:c9:94:a7:03:e7:f9:e1:d7:9c:02:
         4e:28:34:04:2b:cd:b4:8a:06:c6:ea:75:9d:45:c2:d6:1d:54:
         df:e2:12:90:c0:7e:b4:99:45:c7:89:3c:a1:d9:8c:ea:5b:51:
         40:eb:9f:ca:c1:79:7a:38:43:1f:66:30:8b:a1:dd:10:54:08:
         00:c2:4c:45:d0:b8:9d:ea:fd:aa:65:b5:69:94:ed:84:0c:08:
         4e:3f:74:dd:1f:30:71:52:1b:90:a2:a6:a8:92:c1:ca:c7:69:
         27:6d:b3:d3:88:42:0f:f7:94:cd:a6:9c:1b:ac:23:3a:de:6a:
         0e:e5:34:75:5a:04:5f:0d:e2:15:a8:48:c0:30:13:3a:14:b4:
         31:4e:fb:af:a2:59:16:10:78:d8:78:29:6f:12:ef:0f:80:4c:
         c8:01:b5:ba:8e:7e:03:54:84:ae:b6:b9:c6:e2:65:24:c1:21:
         8f:d7:49:ae:bc:7b:17:cf:76:ea:a3:83:ac:91:dc:eb:8d:6c:
         78:d0:d1:1b:37:26:ac:12:d3:ec:6d:ee:9e:dc:3d:47:29:06:
         bc:ce:f1:a5:cb:49:58:ff:53:f6:bf:63:cf:7d:ac:0f:a2:f1:
         4a:1e:fa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:00:48 2026 by rpki-client