This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/1979A7C0586111EA9FC98555C4F9AE02.roa
File:                     1979A7C0586111EA9FC98555C4F9AE02.roa (raw, json)
Hash identifier:          xDyHMOSdBh/dyG33YZNyTvI/uTZvDpSN0G7FGwuu7h4=
Subject key identifier:   C8:EA:C5:6C:80:FA:D6:62:06:80:3E:B4:A5:E8:2C:3E:14:82:CC:F6
Certificate issuer:       /CN=A91F104D/serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53
Certificate serial:       0B16
Authority key identifier: 4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/1979A7C0586111EA9FC98555C4F9AE02.roa
Signing time:             Fri 16 Jan 2026 19:16:23 +0000
ROA not before:           Fri 16 Jan 2026 19:16:23 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138543
IP address blocks:        103.132.168.0/24 maxlen: 24
                          103.148.60.0/24 maxlen: 24
                          2001:df7:8100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl
                          rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2838 (0xb16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F104D, serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53
        Validity
            Not Before: Jan 16 19:16:23 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=696a8e87-74bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:17:76:4c:b8:ed:10:1f:95:aa:11:73:16:c3:
                    54:b3:2c:fb:43:1d:9b:a0:ce:26:76:db:3f:19:7c:
                    7d:a0:f2:17:97:6f:6d:3c:41:3c:48:c6:b6:79:b6:
                    f7:f7:45:28:11:6b:7a:76:c2:8a:a7:88:63:03:92:
                    68:2d:3a:3e:28:79:c9:eb:59:c2:5c:d3:bc:d4:9d:
                    d0:8b:f8:36:ec:ce:aa:8d:16:23:07:8e:93:25:de:
                    33:49:d4:1d:c5:41:fd:36:85:7c:37:b8:1a:7c:8d:
                    d0:4a:87:3c:af:9f:8c:b2:ae:e8:98:62:c4:7f:c7:
                    b5:df:18:c9:9b:b4:c8:2e:0f:fe:91:05:c0:60:e0:
                    ed:b1:91:57:2b:b0:b3:75:60:a2:75:1c:7d:25:a7:
                    f0:5a:7d:27:2c:46:61:dc:4a:6f:b0:33:fa:21:10:
                    9b:71:83:ea:5d:80:a5:9e:7b:c7:c4:ca:94:6b:57:
                    dd:4c:21:26:b1:03:c5:e9:eb:ce:8b:16:8c:6c:cd:
                    9b:b4:81:41:cb:f1:c0:93:79:49:9a:c3:fd:82:b5:
                    ef:0c:82:7d:d7:48:ae:e8:34:9b:61:b7:37:94:67:
                    5f:ec:f0:45:c9:73:5c:42:2d:97:4b:2f:a1:cf:02:
                    c8:a4:45:b6:f0:31:36:de:46:2c:5f:f7:1d:e1:e2:
                    b8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EA:C5:6C:80:FA:D6:62:06:80:3E:B4:A5:E8:2C:3E:14:82:CC:F6
            X509v3 Authority Key Identifier:
                keyid:4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/1979A7C0586111EA9FC98555C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.168.0/24
                  103.148.60.0/24
                IPv6:
                  2001:df7:8100::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:70:b8:8b:65:b0:7f:81:5e:e1:f5:24:0b:77:f3:0c:0d:35:
         24:59:6c:5d:5c:74:f5:e6:c4:9a:b0:7c:01:b7:6a:db:05:61:
         3f:f6:dc:05:e4:0d:8c:1c:01:da:68:a7:62:86:e8:55:d3:96:
         2a:08:13:37:4f:9f:f5:4a:45:6c:22:07:4f:cd:13:2c:02:17:
         ba:cc:97:bb:4f:eb:40:fb:b3:88:c2:7f:4d:24:40:e6:06:41:
         e0:41:3d:52:c5:94:8f:99:b6:a5:b7:ea:03:47:a4:7b:75:de:
         96:85:ee:6a:d9:34:24:1f:f3:99:f5:f2:c5:a1:99:65:7c:3c:
         13:c8:3d:7d:ec:d5:0a:6b:ae:35:70:de:09:ec:2e:f6:10:21:
         82:c6:27:38:1f:92:fc:9b:ca:b7:44:bf:f3:db:e0:d6:6b:ae:
         40:b8:49:09:98:b5:4f:ce:2c:3e:28:44:d2:c1:1a:15:d7:05:
         9d:fd:fa:df:ef:2c:29:44:e4:a4:f6:a1:24:7b:7e:2a:6d:65:
         c9:d0:d9:e8:de:9e:e8:d9:f5:9e:5b:56:f8:09:8d:d5:84:18:
         c2:f8:a9:a6:8f:b6:71:ff:c6:71:0c:8b:49:29:c6:76:10:e0:
         7f:6c:3e:ec:7a:a1:61:b4:3a:ba:66:11:31:b4:c9:95:dc:7c:
         8e:a4:ce:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:41:47 2026 by rpki-client