This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/D4D3B47EA27811EE9C29A256C4F9AE02.roa
File:                     D4D3B47EA27811EE9C29A256C4F9AE02.roa (raw, json)
Hash identifier:          MzuY/3ML0siWq52An8D2iVFfKjth8lH8OSOkXB7vDp8=
Subject key identifier:   83:E0:79:9F:23:A8:E1:54:95:0D:8E:62:61:6D:57:A6:43:7F:2F:DE
Certificate issuer:       /CN=A911A6D6/serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A
Certificate serial:       01F6
Authority key identifier: 3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/D4D3B47EA27811EE9C29A256C4F9AE02.roa
Signing time:             Fri 23 Jan 2026 02:22:48 +0000
ROA not before:           Fri 23 Jan 2026 02:22:48 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     139208
IP address blocks:        103.179.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl
                          rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A6D6, serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A
        Validity
            Not Before: Jan 23 02:22:48 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6972db78-5b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f4:20:d8:cb:d5:bd:af:20:d2:9f:d8:87:7d:
                    31:c9:44:69:b8:16:eb:ae:43:62:9d:29:3d:3e:69:
                    91:15:f7:6f:e8:aa:e2:a4:23:20:84:69:f2:d7:8a:
                    3b:e1:bc:c3:aa:fe:d4:2b:1a:da:92:29:91:cb:06:
                    3f:32:58:f7:ed:b8:42:c9:5e:69:b0:4c:a9:c1:fb:
                    8b:df:de:35:8e:81:2c:48:1f:62:c6:94:ce:18:d6:
                    de:30:f9:d6:9d:b4:a9:6d:5b:83:35:fc:3b:7c:d5:
                    eb:02:82:6e:6d:17:2e:9f:f9:1b:2f:31:87:3c:3e:
                    2d:d3:77:84:ff:b6:3b:9f:53:15:e8:4e:c9:9e:2e:
                    43:81:3f:04:40:9b:4d:2c:e8:89:d2:29:ce:54:06:
                    10:ee:9a:2a:ed:37:2e:ac:2d:25:28:38:84:6e:b7:
                    0d:5f:85:79:1f:7a:3d:dc:10:93:6e:fa:bc:12:af:
                    9f:59:01:f4:0c:fb:40:ec:91:b0:d4:fd:bf:63:60:
                    dc:66:d0:e6:ce:e3:33:b4:4b:ac:d9:70:07:15:ce:
                    5b:bb:cd:b9:19:1b:49:49:59:a3:38:ee:4d:9f:1f:
                    47:bf:bb:66:a6:75:70:73:f7:95:40:fc:3c:18:94:
                    18:28:36:83:73:08:a7:49:05:7b:25:64:e1:94:8d:
                    11:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E0:79:9F:23:A8:E1:54:95:0D:8E:62:61:6D:57:A6:43:7F:2F:DE
            X509v3 Authority Key Identifier:
                keyid:3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/D4D3B47EA27811EE9C29A256C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:56:88:8b:03:db:3f:0b:05:e4:cf:51:49:ed:4b:03:6f:16:
         5c:2c:5b:cd:fd:5c:fd:40:11:bc:e2:87:66:40:33:49:e4:23:
         d3:b7:fb:08:22:b3:48:ab:f6:63:66:5b:27:d5:e0:8f:22:cd:
         9e:5c:02:73:a1:8a:c3:ce:3e:3f:ac:ec:47:ed:e5:d6:5b:0b:
         7c:7d:a0:c1:d8:1f:b2:1e:64:d4:6d:58:45:6d:55:92:f9:44:
         9e:90:1a:6e:b4:ba:66:4c:23:33:c5:ea:86:c8:a2:a7:2f:10:
         07:b4:cb:61:28:73:04:44:1e:3e:b2:7f:3a:90:44:5f:80:c9:
         39:f1:cc:f0:f8:81:ce:6f:24:5b:0d:59:12:06:0a:e0:da:e8:
         d4:94:ec:d1:bb:4e:c8:8e:03:4d:de:ed:0d:7f:c1:6d:33:9a:
         8b:23:cb:48:78:2e:b6:38:3e:23:af:5c:b1:36:9f:5e:cc:31:
         c0:86:1b:38:0f:9a:19:52:03:ad:24:09:7c:6a:45:b5:cc:81:
         ad:47:9b:a7:28:40:75:af:77:41:e1:d1:d5:2c:2d:cd:54:2c:
         9e:60:46:5a:47:7f:e6:fc:19:a6:cf:f8:8a:b3:f1:7d:11:b5:
         db:2d:eb:b4:c7:0b:e5:ee:aa:4c:db:20:aa:d6:e7:2e:b1:e5:
         d3:6b:69:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:44:00 2026 by rpki-client