This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BC85BF12986611F099AC837DC4F9AE02.roa
File:                     BC85BF12986611F099AC837DC4F9AE02.roa (raw, json)
Hash identifier:          3fZwO0qDdCeu1Dl5+Ou0cMucQkUJwisYtiMHygk7+s0=
Subject key identifier:   D7:6A:0B:FD:03:F4:B0:3D:EF:F3:16:50:A7:CC:F3:5F:90:6A:04:1C
Certificate issuer:       /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial:       2948
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BC85BF12986611F099AC837DC4F9AE02.roa
Signing time:             Sat 10 Jan 2026 16:12:44 +0000
ROA not before:           Sat 10 Jan 2026 16:12:44 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     205938
IP address blocks:        103.254.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
                          rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10568 (0x2948)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
        Validity
            Not Before: Jan 10 16:12:44 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69627a7b-eff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b7:2e:7a:1f:7d:ff:04:39:55:c2:76:30:3a:
                    8b:94:ff:7e:96:8b:42:2e:5a:ce:b4:8e:23:11:ef:
                    64:23:79:58:ea:dc:a7:b2:40:5a:60:03:35:fe:1e:
                    d5:15:f9:fb:9a:fe:18:f6:2f:df:71:60:e8:24:5f:
                    6f:83:70:fb:2d:a0:88:3b:66:39:26:2c:9e:de:81:
                    1d:57:83:d2:00:a6:7a:f2:6b:ad:01:65:a2:d5:f3:
                    86:99:ee:8b:be:68:ae:f9:65:b2:8e:d5:94:a5:ed:
                    1a:34:32:75:24:41:45:8e:2e:35:f7:3f:9a:80:6c:
                    78:53:90:6e:00:f9:06:b9:73:cc:96:34:1a:f1:fb:
                    0e:32:e1:42:e1:73:14:11:dc:04:fd:8a:be:63:ec:
                    ca:d2:cc:4d:91:c5:1f:c1:7d:13:c4:fe:8d:51:a5:
                    2f:8e:5a:6c:db:97:c8:ed:12:c8:b0:50:00:2f:83:
                    6e:a5:c7:45:90:8d:00:2e:35:b0:ce:94:88:d6:0a:
                    a2:75:f2:22:0f:eb:e4:e1:f0:3c:a9:6e:15:b8:d1:
                    03:7d:5e:c1:1f:55:66:e2:fb:00:d2:3b:0c:6f:6e:
                    17:00:d0:92:fd:d6:86:a2:11:99:49:1a:f7:86:60:
                    26:f2:d6:fe:8c:ea:19:00:3d:7b:56:43:82:ab:48:
                    20:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6A:0B:FD:03:F4:B0:3D:EF:F3:16:50:A7:CC:F3:5F:90:6A:04:1C
            X509v3 Authority Key Identifier:
                keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BC85BF12986611F099AC837DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:89:49:50:61:c7:97:78:6c:54:42:9d:38:a3:02:36:b1:e5:
         f0:35:05:e9:41:7a:3b:29:43:98:eb:41:88:23:cd:96:1e:f4:
         cd:d8:5e:c9:38:f1:ec:df:b8:6e:db:71:7a:e6:ea:9b:4b:29:
         21:99:b1:47:89:c3:be:c6:d3:c3:30:65:ad:39:42:42:24:ea:
         a4:4b:78:03:a7:d9:2e:35:fb:42:e7:ba:85:1f:73:d6:32:9f:
         33:b0:66:6a:e3:94:18:b6:86:e3:e3:b4:13:16:62:72:c1:5d:
         ea:db:65:e3:90:87:c8:bf:a8:a8:1f:4e:1f:68:4d:93:b6:39:
         05:8d:17:ba:0c:b9:89:7c:15:de:b7:5b:b1:92:56:15:96:69:
         4b:8a:09:06:e1:b7:cf:73:09:92:c2:17:a7:31:74:65:6d:1f:
         46:94:aa:4b:12:00:45:7b:dd:9b:df:e9:c7:20:b7:50:ba:27:
         2d:a9:91:2a:7c:01:9e:23:b6:88:f0:11:68:d7:4d:07:07:a7:
         5b:5c:46:bf:0a:00:46:74:ac:e4:1c:23:b4:a5:1a:b4:00:e8:
         2e:d5:fb:b6:36:b2:d9:2b:4e:b1:de:b5:72:45:72:3b:45:86:
         e3:05:50:58:82:c9:8c:0c:77:cf:e8:f6:9f:1c:30:56:9d:e4:
         23:7f:46:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:31:54 2026 by rpki-client