This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/813F208AE5E611E9A31D0F15C4F9AE02.roa
File:                     813F208AE5E611E9A31D0F15C4F9AE02.roa (raw, json)
Hash identifier:          1VEaLJzMqVUh5pmDDUtLTGbfIgcPJAbqGVpXaUmeoFM=
Subject key identifier:   C7:39:9C:23:35:A1:40:18:1A:B4:48:33:32:89:64:DC:76:EF:FC:5C
Certificate issuer:       /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
Certificate serial:       0D8B
Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/813F208AE5E611E9A31D0F15C4F9AE02.roa
Signing time:             Thu 22 Jan 2026 18:14:58 +0000
ROA not before:           Thu 22 Jan 2026 18:14:58 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138394
IP address blocks:        103.124.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl
                          rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3467 (0xd8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
        Validity
            Not Before: Jan 22 18:14:58 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69726921-b2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2d:7a:c0:a2:dd:1a:35:57:34:04:e5:ce:ad:
                    f9:73:38:c5:c4:cc:85:e7:3b:fd:81:0d:53:04:14:
                    3e:96:e9:d9:db:79:8d:fa:4d:dc:16:6b:db:a0:81:
                    af:fc:55:b3:64:27:f5:35:4b:5f:66:c5:99:67:e3:
                    b9:2a:ac:3b:51:1f:e5:a4:2e:be:eb:81:d9:b2:d3:
                    6b:ef:f6:24:cf:19:66:f0:33:a2:16:b4:53:ec:d7:
                    d6:60:68:0e:25:b7:41:91:fc:be:7d:e7:41:7c:13:
                    3b:94:2a:32:ae:9b:e0:d3:ab:fc:58:91:52:e1:fd:
                    2a:dd:7d:28:34:c2:e9:b8:0b:c9:07:43:91:34:f6:
                    4b:e1:29:0b:33:31:03:31:2d:1e:35:ae:aa:c6:9f:
                    b5:e1:03:ed:0a:f0:a5:25:7a:d1:7d:26:03:33:2d:
                    31:65:a5:f5:05:7d:a8:05:bb:f7:d0:6e:b6:58:85:
                    f0:97:5c:bd:15:c0:45:d9:88:a1:fe:d7:fe:e5:f9:
                    cc:63:d4:59:ec:29:fd:b0:5e:83:99:93:0a:3f:b0:
                    0e:e2:82:b3:ee:c4:da:45:30:e8:76:c6:c1:86:6f:
                    18:e8:ff:ec:fd:4d:ec:0e:a1:12:31:73:fb:6c:93:
                    9a:76:be:74:b4:a3:7e:68:ef:98:9f:e5:d0:e6:dd:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:39:9C:23:35:A1:40:18:1A:B4:48:33:32:89:64:DC:76:EF:FC:5C
            X509v3 Authority Key Identifier:
                keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/813F208AE5E611E9A31D0F15C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:9d:ce:b4:c1:cb:98:46:77:aa:e8:7f:8d:31:5b:50:3b:9d:
         ba:a6:8c:23:89:85:df:ac:15:1c:cf:d5:e6:3d:90:26:76:28:
         cb:ed:e6:ea:ae:12:bc:92:03:d5:7e:31:9f:b6:78:fa:b7:60:
         85:aa:cd:bf:b2:f4:fa:bb:78:3f:8e:e8:52:1b:5c:b2:91:26:
         49:18:e4:4b:a6:67:c1:46:44:8a:f9:ba:21:b8:ca:4b:45:6f:
         5c:96:a1:2a:af:4a:80:3f:3d:d2:dc:06:9e:6b:71:04:f1:fe:
         5b:df:29:49:26:4e:9d:62:89:8c:c4:b9:59:8d:28:85:47:c9:
         36:ff:17:bf:04:29:1f:0d:ad:ef:39:3f:4d:d6:d4:5d:dc:dc:
         5f:65:2d:3f:e0:d6:57:49:b6:11:58:18:49:e8:7f:2e:86:6e:
         de:d2:7a:98:0b:e9:56:53:94:37:04:6e:8e:1f:17:6a:c1:c6:
         13:b4:70:05:eb:92:42:14:7a:b9:d4:70:ff:ce:4a:eb:6a:b8:
         cc:06:64:db:06:53:bf:aa:ef:a1:26:93:c6:2f:9f:98:ea:53:
         a5:c4:bf:40:da:5e:f0:3d:ae:fc:59:0f:8f:2a:fc:ed:87:2b:
         49:79:9e:7a:2a:f9:ec:d0:91:08:56:41:ea:66:c9:a9:f5:5e:
         fc:8e:cd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:31:58 2026 by rpki-client