This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa
File:                     A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (raw, json)
Hash identifier:          rEVB7hJJdLai3V3B5ZFYUWbEvJf82ttor/9LG0nHBY8=
Subject key identifier:   88:8F:BE:2E:3D:38:5C:5C:1A:7A:8C:8A:C4:A4:9A:37:FC:81:A9:39
Certificate issuer:       /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C
Certificate serial:       1F5D
Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa
Signing time:             Wed 31 Dec 2025 16:13:23 +0000
ROA not before:           Wed 31 Dec 2025 16:13:23 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     132089
IP address blocks:        103.70.78.0/24 maxlen: 24
                          103.70.78.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl
                          rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8029 (0x1f5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C
        Validity
            Not Before: Dec 31 16:13:23 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69554ba3-6fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:45:cc:3f:48:8b:bd:e7:d4:9d:69:c5:06:03:
                    e4:31:79:ce:0b:3c:88:f5:97:17:c5:26:a7:ef:d1:
                    fe:71:2b:0c:57:25:84:23:28:e5:90:d3:41:f5:c1:
                    27:63:bd:61:2e:42:18:6f:6e:01:10:49:f1:ef:f3:
                    13:a9:f2:46:8a:ae:d1:a3:18:50:cc:6b:03:33:2c:
                    0f:f2:9c:d5:a4:ce:31:57:aa:1a:10:fa:3e:3d:92:
                    e9:c2:04:25:48:7f:44:b4:1e:0a:18:b9:25:6d:b5:
                    f9:0c:8d:58:1b:8c:4c:13:80:db:18:44:17:c6:19:
                    24:46:de:44:41:99:a0:43:05:dc:69:35:21:31:61:
                    c2:e8:c4:6d:ea:e4:60:e8:c1:fe:ab:60:5d:d1:da:
                    b8:95:03:53:63:b3:e3:1a:6a:91:9e:25:84:68:04:
                    cf:e6:64:bb:85:26:2a:f1:a2:bc:f3:da:2b:9a:ad:
                    ad:ef:05:46:be:c5:55:3d:a9:7e:1c:03:76:8d:74:
                    eb:58:aa:e2:6e:ca:b7:82:88:0f:4c:de:c3:4b:c7:
                    c1:15:0e:83:e8:5f:9a:05:a6:ca:3e:6c:c5:23:b0:
                    81:e1:41:f5:62:32:96:a9:df:b3:26:8a:71:79:1f:
                    0c:f6:56:ca:e6:99:52:a7:52:ef:f1:fb:12:51:62:
                    06:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8F:BE:2E:3D:38:5C:5C:1A:7A:8C:8A:C4:A4:9A:37:FC:81:A9:39
            X509v3 Authority Key Identifier:
                keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:93:9d:26:11:6e:4c:ea:80:fe:04:fb:0c:b6:1e:76:e2:82:
         88:a1:73:77:e5:c9:48:81:03:3c:d0:c0:54:db:52:30:74:67:
         0e:af:d4:85:5a:0f:6b:79:60:c2:28:5b:af:9e:12:35:43:76:
         be:e1:10:46:a3:f7:d5:6b:31:93:de:91:0d:16:7c:38:a6:c2:
         99:a8:26:f2:21:a8:5c:2e:a9:35:7b:20:cc:c5:af:9b:c4:51:
         eb:d9:e8:1b:59:6b:ba:4b:0c:c5:4a:30:b0:dd:ec:c1:07:21:
         20:e0:b1:b2:19:20:80:fb:c8:d1:bf:7a:ca:29:37:9a:7d:ea:
         f6:67:66:a0:e9:01:94:03:d4:40:40:ca:0b:77:b4:f4:ca:fa:
         ba:5e:9f:54:3e:46:f9:ef:44:2b:06:92:c9:39:10:c7:2a:75:
         75:cf:12:c3:12:df:16:8c:e7:f4:59:74:07:d4:de:00:30:70:
         8f:5c:a9:b3:a2:c6:fd:48:b0:fd:bf:7f:08:66:c3:e7:a5:9a:
         90:a7:c7:e7:dd:aa:2d:6c:78:c0:59:9a:60:6c:70:9e:bb:f6:
         b5:9d:69:9d:82:84:05:26:3f:43:da:e8:6f:bf:c7:ba:83:5a:
         35:70:2c:16:f0:45:30:79:04:77:e1:e5:98:37:d0:b9:8a:00:
         95:da:3a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:03:41 2026 by rpki-client