This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/82A69048E5E611E9A31D0F15C4F9AE02.roa
File:                     82A69048E5E611E9A31D0F15C4F9AE02.roa (raw, json)
Hash identifier:          aZq4FYBFzGzR2X6coM/NMVV2ebkRvTSDLARnEUGejwo=
Subject key identifier:   11:D7:66:81:AC:5C:F7:6D:BD:11:67:22:C5:3B:05:79:70:5E:C5:5D
Certificate issuer:       /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
Certificate serial:       0D8D
Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/82A69048E5E611E9A31D0F15C4F9AE02.roa
Signing time:             Thu 22 Jan 2026 18:14:59 +0000
ROA not before:           Thu 22 Jan 2026 18:14:59 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     40927
IP address blocks:        103.124.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl
                          rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3469 (0xd8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
        Validity
            Not Before: Jan 22 18:14:59 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69726923-917b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:1d:2a:ca:ca:34:76:c8:ad:37:c8:9b:7c:
                    ef:cf:40:d6:63:11:de:10:02:7f:73:96:1e:73:a4:
                    c0:8a:d7:03:6c:c4:03:3e:f1:ce:32:fb:91:d6:f0:
                    45:80:fb:5c:d7:24:39:1f:20:8f:78:48:29:b8:0a:
                    00:e7:19:12:78:40:bc:6c:a9:1e:bb:e0:99:7b:cb:
                    ea:87:cd:d4:87:9b:a5:c7:14:16:94:ec:12:38:2b:
                    a5:ab:6b:ac:58:79:08:f4:84:f0:27:a3:25:6d:0a:
                    be:a4:2e:25:b4:ed:2f:af:68:47:4e:b0:98:cb:c8:
                    2d:35:d9:00:f7:c1:b2:8a:20:7f:4e:85:06:71:a8:
                    88:39:94:79:81:2c:fd:80:39:a6:13:68:2f:07:88:
                    c5:6f:43:00:3d:bc:73:55:0f:ff:44:34:3b:5a:b9:
                    70:b5:49:17:df:41:4d:58:f5:6a:d3:bf:6c:ea:01:
                    ea:39:5d:48:66:c7:a9:98:eb:a0:dc:60:c1:9b:a7:
                    0f:33:ec:dc:da:0e:20:f3:34:11:d4:13:bb:ea:aa:
                    d1:9c:eb:af:31:ec:63:30:c7:e2:2e:a7:8e:1c:60:
                    2b:0f:9d:38:d3:3c:98:71:04:51:e4:06:86:3c:33:
                    4e:ef:c8:e6:43:68:28:fc:99:36:80:77:9d:72:9e:
                    d6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D7:66:81:AC:5C:F7:6D:BD:11:67:22:C5:3B:05:79:70:5E:C5:5D
            X509v3 Authority Key Identifier:
                keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/82A69048E5E611E9A31D0F15C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:1e:82:bd:28:4f:19:52:a3:6c:12:15:f7:5d:c9:4a:6a:c2:
         b8:d7:35:e8:ea:7c:98:8a:8d:f3:b3:c5:01:67:54:6c:5c:9a:
         85:0d:24:38:97:07:9e:25:2c:c6:36:34:d7:dc:64:84:09:ac:
         64:4b:86:55:ff:74:5b:63:ae:3c:42:f5:66:16:f8:36:b2:9b:
         e7:e3:86:b9:7c:b7:2a:f1:d6:9b:9b:7f:31:39:3c:19:c7:9a:
         d0:69:2d:42:f1:d1:c8:bf:98:61:5d:d4:20:ae:30:09:b4:5a:
         70:e1:9e:85:74:d2:95:f3:ed:0d:35:1b:3f:20:30:55:5c:42:
         ea:ff:4e:52:44:63:0b:18:f2:c4:80:ae:a2:99:42:d2:6c:f1:
         a9:05:f1:99:72:ac:25:eb:88:72:9f:60:99:cd:72:91:af:be:
         c3:79:f1:60:3b:be:fc:e6:a3:1c:27:37:dd:fc:d9:86:2f:5a:
         27:cc:80:fe:8f:9b:7c:80:18:44:38:e8:7d:f8:b9:9c:d2:4d:
         d0:a4:f0:4e:39:e7:7a:4c:3a:0d:ba:30:b2:7d:10:9c:38:9f:
         6f:2d:d0:11:4a:76:16:a4:17:4c:4b:55:60:3c:c2:87:f7:23:
         43:66:d4:ae:8a:fd:b3:c3:16:b4:72:82:ff:bb:cf:7f:74:0d:
         4b:73:9b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:54:04 2026 by rpki-client