This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF6664C04C1211F0949D8B25C4F9AE02.roa
File:                     BF6664C04C1211F0949D8B25C4F9AE02.roa (raw, json)
Hash identifier:          lCqRypmcyufFMEJ4cnLuBUW5AuH/Kafi4Z5xUeKeudA=
Subject key identifier:   53:94:35:8A:F1:83:2F:EB:47:66:0D:27:06:71:CC:14:82:12:05:AD
Certificate issuer:       /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial:       2949
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF6664C04C1211F0949D8B25C4F9AE02.roa
Signing time:             Sat 10 Jan 2026 16:12:45 +0000
ROA not before:           Sat 10 Jan 2026 16:12:45 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     209181
IP address blocks:        103.254.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
                          rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10569 (0x2949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
        Validity
            Not Before: Jan 10 16:12:45 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69627a7d-c239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:5f:53:cc:e2:c6:a8:ef:32:d3:cc:4b:8f:
                    53:6e:c8:28:0f:ee:d0:7a:fc:7d:c1:67:80:a6:4e:
                    3e:97:d2:7d:cb:5f:b1:89:7d:25:91:2e:30:98:4c:
                    57:9a:08:87:04:8c:c3:3f:41:07:7e:d1:89:ec:5b:
                    41:f3:d5:38:31:b2:5f:10:a7:f3:d5:7e:0c:18:82:
                    95:71:37:1b:61:4a:d7:fa:20:21:ed:23:0a:46:4c:
                    a1:83:dc:aa:ff:e2:b8:b4:8b:ef:fd:75:39:01:62:
                    49:eb:57:20:f1:be:ad:34:ad:df:17:bd:65:86:63:
                    bd:53:7d:19:02:82:e2:c1:40:ef:7d:76:11:77:21:
                    b5:03:1c:10:87:29:f7:65:09:ac:f2:7a:67:1f:80:
                    42:05:c7:10:d2:42:98:34:01:e0:cd:7a:00:34:36:
                    d0:ec:69:39:09:9e:72:1b:5a:2c:0e:9d:b3:3f:d9:
                    1f:d0:36:b4:85:b3:22:33:1f:f9:6c:05:0f:4d:75:
                    98:2a:ac:78:34:65:6e:21:33:91:99:2f:b1:f2:c9:
                    1f:14:df:79:cc:bb:24:5e:6c:f7:1c:fb:d2:47:16:
                    d7:e4:29:aa:2c:97:ef:b1:91:c1:ba:21:b6:08:eb:
                    13:80:21:be:07:5b:40:73:77:ba:d1:7a:40:74:c0:
                    cd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:94:35:8A:F1:83:2F:EB:47:66:0D:27:06:71:CC:14:82:12:05:AD
            X509v3 Authority Key Identifier:
                keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF6664C04C1211F0949D8B25C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:2c:6a:b7:54:48:96:7b:5b:52:de:b0:3b:51:97:1e:62:c3:
         38:3c:bc:0f:49:bd:38:6f:5d:eb:3d:40:e6:02:32:b4:2a:f5:
         73:ec:ce:3f:b7:a0:49:18:27:27:a1:f7:cd:d6:56:be:7e:4b:
         92:b9:08:67:b4:4d:61:a6:fd:21:2a:23:2a:f9:c6:42:63:ef:
         b1:9d:4f:17:8d:37:32:0c:0b:f4:9b:83:94:70:e6:61:56:72:
         17:68:f9:67:a2:14:64:b8:b9:0d:9b:a5:86:16:a6:0c:1b:e7:
         6c:c3:66:1f:e3:41:68:e8:e8:49:c3:ba:2d:d2:33:ba:e7:1a:
         60:5f:f7:82:06:92:55:c4:71:a6:56:84:0b:1e:8b:eb:d7:99:
         92:8a:67:15:30:55:7b:15:66:be:6b:79:4e:95:30:92:a6:32:
         72:8e:76:22:bd:27:31:b1:a8:48:85:6f:e8:f4:65:12:25:cb:
         f5:cf:3d:dc:3e:aa:13:ba:2b:dd:3e:ee:22:ca:5c:97:86:01:
         e1:39:a9:a8:5c:8a:48:30:2f:2d:47:d4:fa:0c:52:5a:68:f7:
         8c:21:34:31:8c:fd:11:6c:46:43:e6:6e:c7:fc:b5:a3:5a:e8:
         fb:3d:8e:49:b6:df:8b:b5:a2:68:aa:dc:13:c2:3f:6c:d4:87:
         d8:cc:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:36:53 2026 by rpki-client