This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/12789D14F82E11F09E4CD127396F56BC.roa
File:                     12789D14F82E11F09E4CD127396F56BC.roa (raw, json)
Hash identifier:          Bn4Zq/WogEn4q36rXYBR9tyfdRna7y7hPbMgVacqEVY=
Subject key identifier:   93:E5:09:FF:6A:D1:01:17:AC:AF:C7:C3:5C:08:55:BE:E4:7C:59:DE
Certificate issuer:       /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial:       08D7
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/12789D14F82E11F09E4CD127396F56BC.roa
Signing time:             Fri 23 Jan 2026 07:35:21 +0000
ROA not before:           Fri 23 Jan 2026 07:35:21 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137818
IP address blocks:        103.70.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
                          rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2263 (0x8d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
        Validity
            Not Before: Jan 23 07:35:21 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=697324b9-77a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:99:98:69:38:8a:f9:3c:d1:1d:c2:51:d0:
                    b0:cc:8a:07:2d:73:2c:73:34:8f:81:7f:d0:ec:a3:
                    42:09:94:c4:79:32:2e:37:3c:a7:54:ae:d5:cc:ac:
                    ac:f2:fa:22:7f:ea:f2:80:40:09:89:69:52:f2:dc:
                    33:0e:ae:64:83:6b:16:a7:4b:d0:99:0c:60:5a:ee:
                    9a:f8:3b:78:79:42:b6:b7:85:20:0f:b0:33:96:0c:
                    23:04:a0:46:53:c9:8d:07:30:d1:82:96:22:7c:26:
                    d8:70:9f:c1:de:d8:b5:d0:29:f3:0d:9e:b5:58:00:
                    0e:ec:e5:d4:45:a9:e1:94:f5:cd:6f:3d:a6:2d:f3:
                    13:0a:74:45:5d:78:69:a3:4a:d2:83:82:3d:27:fd:
                    a9:84:a0:86:c2:b6:f4:19:c7:bc:41:43:71:25:f3:
                    3e:7b:29:db:83:42:74:1d:b6:c0:67:f3:35:7b:ce:
                    ef:e1:fd:e4:c6:fd:57:aa:a1:81:40:eb:88:00:f4:
                    4a:29:70:50:79:30:c3:1d:67:68:5f:3b:99:f5:4b:
                    8a:f3:36:47:4e:29:ea:5e:a2:50:92:a9:b0:42:3d:
                    14:64:f6:a0:c5:c7:1d:c2:48:40:15:32:95:c2:7c:
                    8e:6c:c5:38:aa:96:0a:12:82:f3:66:fa:74:f5:9f:
                    eb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E5:09:FF:6A:D1:01:17:AC:AF:C7:C3:5C:08:55:BE:E4:7C:59:DE
            X509v3 Authority Key Identifier:
                keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/12789D14F82E11F09E4CD127396F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:b0:ff:76:b7:7d:c3:82:bb:ec:df:7c:51:b8:ba:93:9e:f8:
         c0:ad:0e:8d:3b:99:95:4c:e1:66:d0:78:3f:16:59:7f:48:73:
         41:e2:d5:9e:c4:ac:22:e4:66:ce:1b:9c:40:64:5b:ce:0f:db:
         b9:7f:4e:fd:1b:69:46:d6:8f:70:9a:e5:92:1a:48:67:4e:48:
         00:d3:7b:24:c6:b3:91:1e:78:c1:e2:8b:9c:ab:dc:30:67:f4:
         5c:bb:61:c4:bc:d8:55:ed:df:6d:91:3a:21:c4:b8:75:46:8e:
         cd:46:d1:d8:16:1f:28:9b:f2:26:59:70:44:ad:25:fa:8f:6c:
         c5:87:9d:bf:7e:87:e8:77:ff:61:6f:02:f2:50:52:10:e9:d2:
         c7:21:c2:bb:0b:5d:74:b6:73:47:ea:ca:42:f8:2e:df:42:dc:
         78:1f:fa:8a:ae:93:7e:a2:25:0a:bd:9f:50:7f:ca:ec:cb:04:
         7e:66:d7:eb:fb:70:7b:f9:ad:8f:d4:86:80:0d:2f:de:b8:91:
         8a:07:89:83:48:a8:c5:99:fd:73:e3:c2:8c:af:ad:07:4a:8a:
         bc:a2:ec:57:ec:15:4a:b9:63:08:12:2c:ea:04:60:db:8e:c5:
         ea:ed:ea:20:4f:3f:4d:c6:07:a2:d6:41:a5:40:47:6f:fe:65:
         55:e7:79:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:13:30 2026 by rpki-client