This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4B6A736E0A9111EEB13EAF44C4F9AE02.roa
File:                     4B6A736E0A9111EEB13EAF44C4F9AE02.roa (raw, json)
Hash identifier:          Sl2tMoYhByQON3OQDfsgcEffVFzoKHXdVYWVXDvcBs0=
Subject key identifier:   54:AF:57:65:AB:C9:6A:10:68:4E:C5:A6:B9:3F:C5:39:F3:8A:18:98
Certificate issuer:       /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial:       0C3F
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4B6A736E0A9111EEB13EAF44C4F9AE02.roa
Signing time:             Thu 08 Jan 2026 19:15:40 +0000
ROA not before:           Thu 08 Jan 2026 19:15:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     137182
IP address blocks:        103.104.98.0/24 maxlen: 24
                          103.143.172.0/24 maxlen: 24
                          2402:9c0::/48 maxlen: 48
                          2402:9c0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
                          rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3135 (0xc3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
        Validity
            Not Before: Jan  8 19:15:40 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6960025c-8211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:34:6b:dc:70:4a:81:aa:4c:1f:ec:f0:8f:
                    96:eb:c0:80:41:2f:a9:63:7b:92:e6:37:2c:10:ce:
                    7a:23:c0:82:41:b8:4f:e3:6c:97:40:80:61:21:51:
                    a3:52:a3:9f:31:e4:b1:41:96:af:c0:5a:42:55:36:
                    78:90:c7:81:08:b3:ef:62:aa:df:97:25:27:42:47:
                    00:a4:fc:57:c0:bc:e8:30:8d:1f:2e:c1:4c:3f:4c:
                    d7:ae:4b:86:1e:97:61:a5:ce:3b:e6:c5:ac:95:32:
                    4d:76:07:ca:ba:15:bf:12:bc:f8:76:cb:af:5a:98:
                    90:ff:be:9c:0f:6d:f2:ff:ad:86:fe:ce:29:a4:8a:
                    69:fb:a5:ab:ac:b0:1c:78:d9:9b:6f:40:eb:de:3c:
                    2f:88:6e:d7:c9:bd:66:6a:99:fd:56:30:c5:64:83:
                    f4:e6:0b:b6:b9:27:46:bc:0a:66:ff:c9:29:2f:61:
                    2e:78:e2:f6:97:47:4a:bf:98:a5:4f:b2:b9:c7:ef:
                    45:a8:59:e7:90:5b:8c:ad:23:37:60:12:c7:7a:89:
                    34:df:d3:44:90:d1:6b:68:42:ff:50:39:05:e4:2c:
                    3c:b8:7f:04:6f:2b:02:a9:d2:37:0c:52:c2:d3:63:
                    e2:c1:c9:f7:80:08:ae:b2:07:08:0f:25:4e:60:11:
                    03:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AF:57:65:AB:C9:6A:10:68:4E:C5:A6:B9:3F:C5:39:F3:8A:18:98
            X509v3 Authority Key Identifier:
                keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4B6A736E0A9111EEB13EAF44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.98.0/24
                  103.143.172.0/24
                IPv6:
                  2402:9c0::/47

    Signature Algorithm: sha256WithRSAEncryption
         af:20:52:19:0e:06:c0:7b:91:a9:7e:e2:b4:2b:74:52:80:f0:
         2d:da:8e:bc:e8:60:c8:50:73:5f:ef:29:0d:71:c7:b7:85:ac:
         2f:24:93:2a:c0:78:70:16:4f:99:2a:77:84:9d:40:26:9a:b1:
         41:ea:2d:45:a6:38:ed:90:5a:ca:07:0f:59:90:54:a3:35:1b:
         62:c8:f1:6b:97:a4:84:a2:98:7f:72:59:98:a3:b7:e0:f6:79:
         06:76:1b:f8:98:18:32:4a:b0:85:6c:8e:06:11:0a:22:51:1b:
         ab:aa:4e:44:9e:a4:d1:75:c6:af:07:d5:00:36:a9:50:ae:e0:
         65:6f:e3:64:bc:43:bb:3c:6e:63:3c:5d:bf:00:a9:13:d6:ef:
         76:dd:2d:2c:d8:ba:b5:4d:09:93:41:9e:28:c8:e6:70:04:7d:
         65:59:cb:c6:c0:87:a8:20:38:ff:83:6b:c5:8b:63:28:b3:8b:
         9e:0f:e9:42:a1:5a:01:44:5f:74:ec:b9:d7:fd:b6:8f:3c:28:
         ab:03:88:a4:bc:74:87:a0:10:df:19:75:c5:b7:e3:10:ae:cb:
         b6:56:3a:6d:b6:08:89:a3:38:47:9b:a6:3c:8c:41:7e:fd:e3:
         5e:97:cd:97:3a:d7:b8:80:98:44:73:5f:af:d1:78:b6:45:8f:
         a9:ad:c4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:39:13 2026 by rpki-client