This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/F8D520505D0E11EA89C55D65C4F9AE02.roa
File:                     F8D520505D0E11EA89C55D65C4F9AE02.roa (raw, json)
Hash identifier:          NhCnhSZSfkDREQa5IgZy4tILaVnRqHkxPBLk2fQgkMU=
Subject key identifier:   B9:D2:3F:06:78:64:EC:FA:9D:F1:AB:06:C7:EF:F0:BE:23:A1:2E:4D
Certificate issuer:       /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
Certificate serial:       1219
Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/F8D520505D0E11EA89C55D65C4F9AE02.roa
Signing time:             Wed 14 Jan 2026 22:15:41 +0000
ROA not before:           Wed 14 Jan 2026 22:15:41 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     13444
IP address blocks:        45.119.6.0/24 maxlen: 24
                          45.119.7.0/24 maxlen: 24
                          103.49.92.0/22 maxlen: 24
                          103.59.48.0/24 maxlen: 24
                          103.59.49.0/24 maxlen: 24
                          103.59.50.0/24 maxlen: 24
                          103.84.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl
                          rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4633 (0x1219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
        Validity
            Not Before: Jan 14 22:15:41 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6968158d-ba3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:24:ce:60:71:7c:ee:79:5b:24:73:55:3f:
                    42:06:68:2e:80:b0:c8:d1:50:32:6c:12:93:01:e6:
                    27:10:11:34:5a:7e:bb:0e:ed:dc:03:c9:27:0d:b8:
                    8e:2d:4b:15:86:bd:c8:cb:43:41:62:82:d4:8b:5f:
                    55:71:af:67:12:3d:49:67:7e:39:4b:72:e9:12:64:
                    de:8e:8c:7c:80:39:da:ef:0c:ba:bf:c8:1f:7e:e2:
                    32:13:c2:f2:62:70:5b:f3:da:01:ad:4d:4b:6d:7c:
                    3e:dc:3d:75:3d:29:4c:cb:b7:c9:53:2d:77:e5:75:
                    8d:2a:ab:50:72:fe:23:8d:43:dc:71:d9:81:cd:0a:
                    71:1e:bb:47:ed:3a:b1:01:f5:99:df:aa:f2:c6:9f:
                    ef:7b:b8:4f:55:6b:17:2d:da:60:f7:2d:10:3f:69:
                    55:d3:eb:cd:78:2c:9e:0a:99:d8:fc:06:a2:6f:42:
                    1a:1e:16:85:fc:22:a5:32:26:82:18:90:3e:f1:aa:
                    0b:24:69:b2:a9:da:f8:bd:86:da:8a:6f:48:24:8e:
                    ea:8f:8e:2c:11:c4:99:fd:d9:47:64:5b:7a:91:96:
                    c3:4f:a2:27:55:a3:7b:0d:03:e0:f6:7d:6c:88:b6:
                    e0:a3:61:0a:d8:c8:f3:77:16:d7:06:61:99:6c:8a:
                    f1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D2:3F:06:78:64:EC:FA:9D:F1:AB:06:C7:EF:F0:BE:23:A1:2E:4D
            X509v3 Authority Key Identifier:
                keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/F8D520505D0E11EA89C55D65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.119.6.0/23
                  103.49.92.0/22
                  103.59.48.0-103.59.50.255
                  103.84.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:51:d7:d6:10:a8:80:83:3a:d1:fa:16:55:50:d9:1c:83:e0:
         ca:da:83:d3:2b:b4:0d:eb:9d:5b:fe:4f:23:6a:46:79:2d:8d:
         51:40:73:51:9d:68:1c:24:89:f4:58:4b:5f:f4:a2:dc:a1:e1:
         72:ec:ea:d0:75:3d:83:2a:6c:8b:b4:ab:1c:ee:f5:43:c7:b7:
         b0:6c:85:84:0f:a2:7c:47:12:51:05:96:62:40:32:92:9e:ee:
         77:7d:02:a2:e7:f4:a2:32:e8:43:63:7e:2b:a0:98:b2:3f:41:
         7d:42:85:65:da:73:53:a2:6f:2f:7d:73:03:ef:8e:26:89:b4:
         1e:25:a4:47:15:ba:af:fa:37:4a:64:42:d9:85:ce:3d:1b:ec:
         b0:92:37:39:a9:16:c6:94:5f:b4:57:1d:32:4c:fa:af:b0:ce:
         63:80:59:2c:55:e3:fb:a3:1f:e3:55:0c:b0:54:0c:de:a2:0b:
         53:16:f0:10:d9:aa:97:dc:ef:fb:6e:fd:4a:50:4b:62:db:ed:
         d5:4d:dd:eb:6a:1c:ab:98:8e:71:b1:cc:6c:7d:7d:81:8b:73:
         97:58:11:4f:09:5a:ff:04:9a:c3:e4:a6:e8:7f:67:3e:49:bc:
         06:c4:0f:5d:47:69:9b:6e:46:0c:a6:1c:0c:70:b5:45:a4:2a:
         9b:3d:83:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:33:43 2026 by rpki-client