This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/F394D822271911EF86EB1C09C4F9AE02.roa
File:                     F394D822271911EF86EB1C09C4F9AE02.roa (raw, json)
Hash identifier:          zGfm7uWkmrKCifSvIZ/uCpwyMpXY0pJ7FDB5PjCQIxc=
Subject key identifier:   AE:37:C3:9B:D1:D5:2D:63:F3:13:6D:94:66:1B:B8:F0:47:69:10:F4
Certificate issuer:       /CN=A91EDD99/serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
Certificate serial:       013F
Authority key identifier: 4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/F394D822271911EF86EB1C09C4F9AE02.roa
Signing time:             Tue 13 Jan 2026 04:22:58 +0000
ROA not before:           Tue 13 Jan 2026 04:22:58 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     45119
IP address blocks:        103.76.48.0/24 maxlen: 24
                          103.76.49.0/24 maxlen: 24
                          202.174.122.0/24 maxlen: 24
                          202.174.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDD99, serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
        Validity
            Not Before: Jan 13 04:22:58 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6965c8a2-d985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ce:44:c7:db:ad:f0:f4:1f:46:2a:af:fe:44:
                    7f:54:bd:51:aa:eb:17:b9:ae:6b:8e:91:e2:d6:80:
                    4b:da:53:7c:ac:69:1e:ed:68:46:5b:5e:7f:db:d7:
                    7e:a8:cd:b7:06:48:6d:29:da:43:b0:70:e9:1a:33:
                    e1:b7:f0:86:59:f5:37:82:35:e3:5c:ad:88:8c:ea:
                    53:0f:16:87:ac:96:b8:d8:a8:53:5c:b4:67:54:e1:
                    91:db:41:61:63:04:da:b0:58:78:36:93:ad:df:45:
                    53:32:cd:ea:d3:ba:39:6c:77:ef:a3:58:7b:cb:ca:
                    03:69:9c:64:d8:4b:0a:8e:a8:37:e1:16:95:4a:7a:
                    55:17:87:38:9d:e7:e0:61:62:53:23:02:70:5c:3c:
                    4e:42:05:fb:99:b9:5b:ef:d9:96:37:5b:2e:10:38:
                    33:f1:24:c9:53:27:38:11:f1:25:9a:9e:4a:12:2f:
                    9b:e9:c7:b6:32:bc:6b:09:42:ec:6f:5c:55:48:21:
                    7d:02:19:1d:a8:17:d6:25:59:69:dc:bf:f5:d4:b7:
                    53:ed:b9:08:7d:d7:72:c5:ee:e9:e6:06:82:43:5c:
                    98:2f:ee:32:2f:af:84:06:4e:1b:23:91:53:bd:cf:
                    ce:90:e9:b7:6b:64:6a:30:07:65:ca:df:7c:9f:b1:
                    76:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:37:C3:9B:D1:D5:2D:63:F3:13:6D:94:66:1B:B8:F0:47:69:10:F4
            X509v3 Authority Key Identifier:
                keyid:4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/F394D822271911EF86EB1C09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.48.0/23
                  202.174.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:b3:c0:f6:27:57:18:9d:ec:da:23:05:0c:96:e3:ac:92:c0:
         85:ea:77:fd:86:71:99:b1:98:36:db:7f:e1:97:d9:94:77:96:
         4a:fc:32:f8:6a:47:c2:67:4f:ab:ca:42:9f:9d:35:25:c2:e8:
         cb:b0:c8:1b:38:ef:0c:99:ec:55:ca:44:26:dd:c1:ef:68:8d:
         9b:76:21:fd:39:29:a5:45:9f:19:5a:85:ff:df:95:e7:a1:b1:
         5b:2c:08:10:1f:53:be:e1:fd:7e:3d:b8:d9:25:f6:f7:a4:91:
         5c:a3:6f:04:02:33:f7:2a:fe:da:88:98:97:b6:0c:67:81:43:
         1d:f7:8b:bb:80:1a:be:bf:47:f2:ff:22:6c:f1:c5:93:1d:70:
         61:0c:06:8f:4d:fc:ee:88:c2:bf:90:ca:51:29:c1:8a:77:8e:
         91:e6:1a:a8:db:3e:fe:df:c5:56:c6:02:85:2c:e8:5f:59:0c:
         00:10:bb:3e:c7:1e:76:46:b8:0a:16:fd:bb:25:69:c5:f1:60:
         27:b2:37:6a:b8:61:6f:28:9c:16:12:1d:44:75:d1:fb:87:e1:
         91:9c:f4:58:1d:11:48:10:d0:43:2a:80:5d:9e:14:32:10:6c:
         7e:f5:83:7e:c8:a2:d3:2b:cb:7c:eb:ed:89:83:76:17:46:9f:
         7e:d8:0c:9d
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RUREOTkxMTAvBgNVBAUTKDRGQzQ2MEYwOUY5MEFBODZDQUY0NjdDMjg1QUQ3OEY0
MzEyNzIwQjAwHhcNMjYwMTEzMDQyMjU4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTY1YzhhMi1kOTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1M5Ex9ut8PQfRiqv/kR/VL1RqusXua5rjpHi1oBL2lN8rGke7WhGW15/29d+
qM23BkhtKdpDsHDpGjPht/CGWfU3gjXjXK2IjOpTDxaHrJa42KhTXLRnVOGR20Fh
YwTasFh4NpOt30VTMs3q07o5bHfvo1h7y8oDaZxk2EsKjqg34RaVSnpVF4c4nefg
YWJTIwJwXDxOQgX7mblb79mWN1suEDgz8STJUyc4EfElmp5KEi+b6ce2MrxrCULs
b1xVSCF9AhkdqBfWJVlp3L/11LdT7bkIfddyxe7p5gaCQ1yYL+4yL6+EBk4bI5FT
vc/OkOm3a2RqMAdlyt98n7F2TwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFK43w5vR
1S1j8xNtlGYbuPBHaRD0MB8GA1UdIwQYMBaAFE/EYPCfkKqGyvRnwoWtePQxJyCw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREQ5OS8wNTcyOUI0QzE5
QjkxMUVGOEUwREZFM0VDNEY5QUUwMi9UOFJnOEotUXFvYks5R2ZDaGExNDlERW5J
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Q4Umc4Si1RcW9iSzlHZkNoYTE0OURFbklMQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUREOTkvMDU3MjlCNEMxOUI5MTFFRjhFMERGRTNFQzRGOUFFMDIvRjM5NEQ4MjIy
NzE5MTFFRjg2RUIxQzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAFnTDADBAHKrnowDQYJKoZIhvcNAQELBQADggEBAKuzwPYn
Vxid7NojBQyW46ySwIXqd/2GcZmxmDbbf+GX2ZR3lkr8MvhqR8JnT6vKQp+dNSXC
6MuwyBs47wyZ7FXKRCbdwe9ojZt2If05KaVFnxlahf/fleehsVssCBAfU77h/X49
uNkl9vekkVyjbwQCM/cq/tqImJe2DGeBQx33i7uAGr6/R/L/ImzxxZMdcGEMBo9N
/O6Iwr+QylEpwYp3jpHmGqjbPv7fxVbGAoUs6F9ZDAAQuz7HHnZGuAoW/bslacXx
YCeyN2q4YW8onBYSHUR10fuH4ZGc9FgdEUgQ0EMqgF2eFDIQbH71g37IotMry3zr
7YmDdhdGn37YDJ0=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:19 2026 by rpki-client