This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/7CA749FCF63E11F080BDB1B6646F56BC.roa
File:                     7CA749FCF63E11F080BDB1B6646F56BC.roa (raw, json)
Hash identifier:          1uXJHpZYoYY7a9xkM86Mmpg8dwYz34Kd604Y8hvk7Og=
Subject key identifier:   A5:A8:23:69:04:C2:C4:DF:F3:44:6C:34:6F:D1:4D:A1:53:2E:79:2B
Certificate issuer:       /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial:       07A3
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/7CA749FCF63E11F080BDB1B6646F56BC.roa
Signing time:             Tue 20 Jan 2026 20:27:49 +0000
ROA not before:           Tue 20 Jan 2026 20:27:49 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     137510
IP address blocks:        103.226.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
                          rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1955 (0x7a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9665, serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
        Validity
            Not Before: Jan 20 20:27:49 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=696fe545-8e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:74:00:4d:e2:64:83:9d:fe:6c:db:10:10:
                    5f:b5:e9:f5:6b:36:32:53:73:2e:d4:73:76:6f:4d:
                    20:e3:25:d4:5e:a3:f7:22:c0:68:2f:61:1c:86:2b:
                    4f:02:36:24:50:fb:0e:39:11:66:c8:a4:09:67:00:
                    57:12:b9:be:1e:bd:4e:50:a0:79:0e:7a:27:80:19:
                    35:18:7f:74:5f:19:07:34:13:6a:c5:86:3c:2c:04:
                    7f:d9:81:99:d3:e3:33:01:28:ff:e6:21:69:b6:29:
                    73:30:74:b1:fb:36:0a:79:8b:9b:dd:61:d0:85:c2:
                    b8:c4:b8:63:4b:79:b9:45:e6:c6:75:4d:43:1a:ac:
                    28:93:06:16:a6:c5:13:b2:a9:51:d1:89:76:95:e7:
                    a5:a7:ce:08:e9:f9:a2:7d:2a:4a:40:b3:40:0e:0e:
                    5e:49:0d:f8:9f:d2:9d:4f:4e:a7:74:d0:ba:43:3a:
                    96:93:e8:63:13:f3:c4:4a:5e:a7:e2:7e:f9:cc:3e:
                    ae:c6:de:72:10:6f:7b:43:cf:a9:0b:e7:32:c3:b6:
                    65:f8:97:0f:3e:a4:9d:53:e6:36:c1:0b:44:2a:de:
                    55:bc:48:e4:ae:57:7a:8a:0d:ab:51:4f:18:c0:64:
                    cb:81:74:50:bb:e2:b3:a1:4f:46:1a:da:bf:fc:16:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A8:23:69:04:C2:C4:DF:F3:44:6C:34:6F:D1:4D:A1:53:2E:79:2B
            X509v3 Authority Key Identifier:
                keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/7CA749FCF63E11F080BDB1B6646F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:27:c7:b6:3f:eb:cf:44:12:4a:b9:f4:89:a7:0a:64:7c:b8:
         fb:4e:f8:05:c6:b4:37:be:ef:82:5e:3a:f8:4a:2e:eb:ad:b1:
         58:22:6c:14:e9:14:f3:d0:3b:c8:75:77:02:91:d9:6e:10:fc:
         50:6b:15:16:03:1f:8b:d1:39:95:25:68:a3:fa:01:10:ba:a0:
         11:38:de:09:8c:c3:15:bd:ce:42:ea:35:3e:91:97:4c:41:d8:
         0d:db:75:55:fc:84:ce:4d:01:c3:d9:92:84:94:c6:bd:b2:c6:
         2f:b0:c7:48:67:23:34:dd:33:37:78:0f:9d:4d:74:20:14:f9:
         c0:af:b8:aa:e2:66:a5:9d:5d:39:c4:c0:2a:76:bb:d5:5e:e2:
         fd:20:9c:f2:fd:80:e6:d6:61:38:65:13:60:b8:4b:f7:2f:37:
         19:06:18:d2:c4:ca:79:ee:da:b6:13:9a:09:de:2e:42:20:9c:
         bb:41:e7:16:2a:b8:43:68:e8:cd:8c:1e:27:84:1d:5e:6b:08:
         9d:9e:54:3d:dd:b3:29:6b:a7:f3:8f:20:ce:3f:27:36:74:44:
         64:4b:f8:96:09:bd:4e:4e:e5:be:20:74:2e:d8:c2:ef:fb:72:
         6c:3b:33:56:78:6a:c3:8a:9e:4f:3b:10:22:a0:3d:fb:f9:9d:
         b0:61:73:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:20:02 2026 by rpki-client