This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/7D857A30F11811EC86D3AD4BC4F9AE02.roa
File:                     7D857A30F11811EC86D3AD4BC4F9AE02.roa (raw, json)
Hash identifier:          W3wkEeHhj7Ezvu6rXVuXewssQtL4IOnsFBykI5+RvLQ=
Subject key identifier:   FC:E7:19:67:1A:D4:63:DC:E4:F5:32:9C:BE:AD:40:73:3E:81:13:4C
Certificate issuer:       /CN=A91EE1DD/serialNumber=3282380F57D6170F45CF520E7B2C1A3CDA2FCAAD
Certificate serial:       033D
Authority key identifier: 32:82:38:0F:57:D6:17:0F:45:CF:52:0E:7B:2C:1A:3C:DA:2F:CA:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/7D857A30F11811EC86D3AD4BC4F9AE02.roa
Signing time:             Wed 21 Jan 2026 00:20:55 +0000
ROA not before:           Wed 21 Jan 2026 00:20:55 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132409
IP address blocks:        103.80.208.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.crl
                          rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 829 (0x33d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE1DD, serialNumber=3282380F57D6170F45CF520E7B2C1A3CDA2FCAAD
        Validity
            Not Before: Jan 21 00:20:55 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69701be7-b225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b2:61:bf:69:72:94:51:06:93:57:c8:5c:7f:
                    59:dc:86:94:89:4c:b2:44:4c:e0:af:96:b8:e4:86:
                    3d:af:69:01:5c:46:70:0b:aa:11:e4:84:d9:21:71:
                    05:6f:6c:7c:34:09:09:fb:c5:58:08:bd:76:41:7b:
                    bd:54:d6:e9:a2:e2:32:0e:12:b9:21:41:0c:07:c0:
                    c4:3f:28:9a:41:8e:ad:7f:7b:b5:db:db:ce:30:e1:
                    70:fa:1c:5c:53:4c:30:ad:de:f7:2f:f3:08:bc:ce:
                    12:4f:16:2d:ac:2c:b2:3c:1e:52:dc:6d:d1:70:17:
                    13:a4:d1:b5:9c:84:6a:88:b6:7a:e3:6d:1e:c3:3f:
                    35:fb:ad:ef:15:61:e1:e0:94:6c:f1:da:6d:dc:7d:
                    86:41:16:84:14:aa:58:ec:56:fd:23:d0:0e:ef:67:
                    a3:1b:61:74:da:7f:43:b7:29:11:dd:e2:b9:87:0e:
                    d4:3f:71:fd:40:c8:5e:5f:6e:09:cb:9e:f7:b6:2d:
                    b4:53:e1:eb:56:53:b4:91:5a:d2:64:3e:49:41:03:
                    b1:c8:a9:d8:2f:1c:2a:e1:4f:51:12:b2:0d:aa:42:
                    6d:bb:57:95:86:34:03:8e:a4:93:e6:5d:7e:e1:90:
                    3e:ae:2f:59:cb:c4:c4:43:06:f6:c5:c6:94:ff:ee:
                    4a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E7:19:67:1A:D4:63:DC:E4:F5:32:9C:BE:AD:40:73:3E:81:13:4C
            X509v3 Authority Key Identifier:
                keyid:32:82:38:0F:57:D6:17:0F:45:CF:52:0E:7B:2C:1A:3C:DA:2F:CA:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/MoI4D1fWFw9Fz1IOeywaPNovyq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoI4D1fWFw9Fz1IOeywaPNovyq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1DD/F15003C8F11211EC91965444C4F9AE02/7D857A30F11811EC86D3AD4BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:53:9f:91:9f:73:e9:9c:67:8c:a0:b4:63:9f:df:f4:3f:79:
         25:60:0e:b1:c8:76:20:60:da:3a:2d:21:93:6d:32:3e:db:8d:
         ac:f2:a6:ec:99:33:6c:cd:91:3f:ec:6c:b3:df:b2:15:fc:9b:
         13:19:a6:4f:3b:fd:b8:6a:7f:11:d0:58:67:72:5b:d4:e4:4a:
         6a:b3:39:14:ca:fb:a9:78:f0:27:44:bf:56:6e:fe:95:f1:7b:
         5a:87:e2:de:77:c2:01:18:84:5c:bd:5a:e3:2f:ac:58:8f:1e:
         65:5d:6a:7f:b6:4e:73:54:cd:aa:af:6f:44:46:39:07:76:39:
         a3:47:81:4d:53:95:54:dc:ee:1d:e8:71:ad:a8:35:b1:5e:c6:
         6c:1c:3d:15:7f:dc:88:81:c6:15:b6:cc:ff:e6:af:d0:b7:b2:
         d6:e1:77:78:4f:fa:0f:a1:2f:87:a6:22:37:ba:b6:36:73:15:
         9e:a5:45:3c:f3:4e:99:87:b8:24:2a:73:34:5d:f1:39:80:ce:
         54:b6:cf:b9:69:67:a6:89:08:4d:2e:5a:a9:60:82:de:88:f8:
         fb:55:a5:73:ac:de:3b:9b:cc:17:25:d0:43:46:52:c4:8e:45:
         73:48:f8:b3:88:93:91:35:96:6c:19:bd:41:ff:25:0b:e7:0c:
         f9:e8:7e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:06:52 2026 by rpki-client