This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/423EA4CC039B11EBB3C1465CC4F9AE02.roa
File:                     423EA4CC039B11EBB3C1465CC4F9AE02.roa (raw, json)
Hash identifier:          T9MAWcCdtYwAYULOqaLqZyMAUA+VoZpW5An7+EbLp18=
Subject key identifier:   CB:FC:BC:7C:16:20:A4:38:FA:FC:37:EF:FB:FA:91:02:6C:9F:DD:33
Certificate issuer:       /CN=A91FD088/serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916
Certificate serial:       0828
Authority key identifier: C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/423EA4CC039B11EBB3C1465CC4F9AE02.roa
Signing time:             Tue 30 Dec 2025 20:17:02 +0000
ROA not before:           Tue 30 Dec 2025 20:17:02 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136000
IP address blocks:        103.145.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl
                          rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088 (0x828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD088, serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916
        Validity
            Not Before: Dec 30 20:17:02 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6954333e-ecdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:03:fe:f6:ab:23:3d:d8:2b:5f:b4:fe:e8:3a:
                    9c:d2:97:c2:00:18:36:bd:4f:d0:f7:af:0e:d6:7d:
                    19:b6:4b:f8:20:77:10:fe:a5:39:4a:12:63:8c:d2:
                    bb:65:32:1c:20:5d:48:e8:0a:5e:60:0f:aa:57:30:
                    97:38:73:4a:9b:3c:92:3d:15:3a:34:f7:53:81:01:
                    22:d1:af:1e:ae:c2:41:ee:a9:4c:4d:f0:c1:2d:a6:
                    ee:eb:40:c6:04:2c:15:65:e6:0c:9d:64:e2:59:c8:
                    21:e8:c1:8a:a9:29:4d:fc:30:b3:b2:7d:42:f2:51:
                    97:03:d8:f7:1e:ee:03:f4:6d:f8:1e:15:01:97:3e:
                    4a:da:68:2a:0b:ba:43:53:75:9c:5d:33:bd:78:58:
                    c2:cc:f4:13:2e:9a:1a:e1:7c:f0:c9:7e:a5:87:20:
                    aa:41:82:9d:3f:24:69:16:3c:c9:6a:36:d2:fa:eb:
                    c0:fa:d5:4c:e0:59:02:9d:af:d5:68:22:2f:1b:f3:
                    0a:74:b8:b6:52:81:9d:63:4f:ce:02:cd:01:22:f4:
                    ff:a0:76:ac:17:fd:03:32:88:ae:e4:87:e0:13:c1:
                    c6:14:23:c0:ed:b1:4c:fb:10:ef:d4:e4:7a:3f:56:
                    c3:d9:da:e4:3a:8f:ec:d3:95:c9:da:2e:9f:4f:f7:
                    56:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FC:BC:7C:16:20:A4:38:FA:FC:37:EF:FB:FA:91:02:6C:9F:DD:33
            X509v3 Authority Key Identifier:
                keyid:C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/423EA4CC039B11EBB3C1465CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:ef:3d:42:94:d6:99:fb:21:d2:93:ab:8d:82:3d:69:82:14:
         ff:e5:34:5d:07:80:87:c9:c3:48:93:6c:80:2e:7f:01:32:41:
         21:ec:a0:f2:0f:a3:e8:ef:43:59:2e:dd:dd:5e:96:7b:36:c4:
         f8:76:00:63:80:6d:59:e0:48:27:74:6a:2e:03:42:c6:a1:2a:
         8c:31:1d:5f:a5:7e:5a:77:a4:a2:4d:e3:89:72:2f:5d:17:94:
         cf:98:60:01:86:e4:29:81:fd:15:38:5c:3f:82:90:b3:c1:35:
         b0:eb:53:54:9a:82:d6:b3:ab:42:b0:a7:08:0b:4a:40:75:c9:
         05:55:ad:8f:20:27:17:08:f1:a8:bb:ce:5c:0a:e3:dd:01:35:
         c6:86:ec:d1:b7:72:05:8f:a3:95:b1:07:e0:52:fa:09:45:1f:
         5d:8b:f8:ba:62:38:17:18:1e:61:10:07:87:ce:d0:c6:74:fa:
         a3:09:38:a5:01:6f:cd:cd:20:4e:6a:4f:d1:07:d3:a2:f8:b9:
         2f:54:39:aa:85:d1:16:80:79:e5:e8:9f:2e:58:22:9c:98:45:
         7b:76:92:7e:af:3f:59:03:c1:41:c0:e8:e2:e0:8f:21:9b:c8:
         ed:bb:ed:38:7c:65:b8:a8:69:b7:4c:f9:fa:5c:ef:fc:b0:63:
         24:23:f9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:55:13 2026 by rpki-client