This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4DC77C600A9111EEB13EAF44C4F9AE02.roa
File:                     4DC77C600A9111EEB13EAF44C4F9AE02.roa (raw, json)
Hash identifier:          FwgzcLz0ulXMRpFgzbkDkNByfvZ6IbVg9iuXnMBlPn8=
Subject key identifier:   DC:D6:AC:CA:98:86:7F:50:55:1C:E9:9E:5C:5C:86:B8:50:52:C9:F9
Certificate issuer:       /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial:       0C42
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4DC77C600A9111EEB13EAF44C4F9AE02.roa
Signing time:             Thu 08 Jan 2026 19:15:44 +0000
ROA not before:           Thu 08 Jan 2026 19:15:44 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     64098
IP address blocks:        103.143.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
                          rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3138 (0xc42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
        Validity
            Not Before: Jan  8 19:15:44 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69600260-0f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a2:9b:e1:46:87:fc:65:60:89:d3:d4:0f:62:
                    69:9b:be:fa:25:13:bd:77:bf:a7:5f:94:ab:80:2c:
                    5e:b5:d2:3f:5b:e3:82:fb:21:95:41:23:08:0f:bd:
                    d4:54:30:e4:b2:4f:b5:41:b8:89:b6:c1:40:0b:67:
                    8e:ab:e3:ef:7b:24:f6:7c:31:ee:53:7a:b2:e8:28:
                    a6:2c:c2:96:cd:a2:54:5d:1b:7d:d8:8d:e2:c6:50:
                    bd:b4:7a:fa:55:05:99:ca:34:15:fe:7c:2f:29:02:
                    e2:a2:f8:f7:2b:32:7e:0f:71:ab:47:d0:d5:dc:66:
                    5e:d3:d7:20:7a:83:3c:7a:2f:9d:6b:70:04:85:99:
                    0b:68:99:9b:ba:45:8f:ed:58:7c:82:6f:5f:20:23:
                    94:30:1e:02:81:7f:7a:0e:d7:77:3b:f4:cc:e9:f3:
                    75:c9:5b:e1:a6:80:52:ea:e8:b9:20:36:32:c2:21:
                    95:ff:be:94:5f:9f:66:35:f2:f9:36:05:78:01:4c:
                    ef:f1:d5:ee:9e:e3:a4:2e:92:5a:63:ac:76:de:c5:
                    df:30:ea:49:19:d9:ff:77:a5:a0:30:d2:96:c9:7e:
                    11:f5:ea:8a:3f:97:58:b2:6e:09:0b:c1:ae:bd:20:
                    5b:47:ed:18:5f:82:60:c5:57:70:20:89:84:ef:60:
                    42:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D6:AC:CA:98:86:7F:50:55:1C:E9:9E:5C:5C:86:B8:50:52:C9:F9
            X509v3 Authority Key Identifier:
                keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4DC77C600A9111EEB13EAF44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:1d:cc:6d:b8:09:d7:6c:0f:6a:c1:34:fa:08:e1:17:0d:19:
         85:eb:3b:70:23:10:8d:ff:4f:1d:67:c7:38:16:e3:c8:89:19:
         6d:e0:16:35:86:1a:81:ab:62:0b:23:cc:03:a6:87:c4:a6:98:
         0c:e3:34:c0:dc:34:65:e2:39:a5:db:4b:37:66:9a:34:48:c2:
         b2:d0:c4:d2:c5:e6:2e:08:b8:ab:ce:79:f6:3d:48:06:6e:02:
         e6:94:77:c4:7c:e7:b0:a1:2b:de:c0:c2:fd:7b:36:14:7a:2e:
         dc:d0:fd:28:bc:0f:d0:44:47:24:eb:3d:4f:ef:79:a7:92:f0:
         ca:52:ef:59:3c:51:2c:2f:f5:5a:27:9e:c5:fe:13:8c:99:cb:
         3d:2c:1f:95:89:14:19:75:bf:ba:71:7c:aa:39:31:e4:b8:52:
         0d:e0:5b:da:6c:eb:2a:d8:dd:15:5d:5d:24:a2:35:88:9c:dd:
         ef:9c:9b:90:b4:f4:d7:fd:74:cf:d8:1e:59:90:6c:f3:d6:7b:
         6a:ad:c0:7d:84:df:e7:2a:8e:1b:2d:81:5f:47:77:53:4d:b3:
         1d:18:b3:c8:d6:4f:76:af:03:ab:78:6a:26:85:50:19:ea:f8:
         4d:83:b2:f1:f2:bc:7a:50:ac:36:a1:3a:f5:66:ed:21:00:03:
         3b:7b:ba:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:50:45 2026 by rpki-client