This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/7D1E4382F7E111F09133AC30656F56BC.roa
File:                     7D1E4382F7E111F09133AC30656F56BC.roa (raw, json)
Hash identifier:          Uf9M//rmVdXn4maQXPPakSkeGaGz9gpRRtbB9yQ4Rlc=
Subject key identifier:   1E:13:FC:66:DB:B7:B4:73:23:9C:0F:76:79:2D:18:65:F0:EB:E7:A3
Certificate issuer:       /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
Certificate serial:       0419
Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/7D1E4382F7E111F09133AC30656F56BC.roa
Signing time:             Thu 22 Jan 2026 22:27:09 +0000
ROA not before:           Thu 22 Jan 2026 22:27:09 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     4515
IP address blocks:        103.182.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl
                          rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DF8A, serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
        Validity
            Not Before: Jan 22 22:27:09 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6972a43d-ae11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:34:94:18:3e:1c:ba:3d:8d:c0:97:53:24:
                    eb:44:54:8b:29:f9:9b:e0:5a:9a:01:93:96:f6:2c:
                    bb:4a:45:9a:9b:94:82:72:19:51:6e:49:ff:13:52:
                    b5:69:3e:4e:c4:26:b5:92:af:c8:b2:cc:37:37:cb:
                    9d:d4:1e:08:ce:de:3d:09:b3:6e:53:ec:08:b7:36:
                    ef:bf:06:26:b2:f6:ad:45:a2:dc:74:ad:01:cd:67:
                    81:9c:2a:ba:b2:c5:61:95:b4:97:14:cb:92:b7:5c:
                    d4:4a:77:6d:ea:8a:22:f2:db:4b:0a:16:71:67:89:
                    47:04:1b:46:f9:70:2c:bc:60:c9:6b:87:e4:cb:70:
                    aa:06:f6:76:4e:98:8e:01:67:0b:5e:38:b7:f5:19:
                    fd:03:74:ef:4b:8a:58:a7:dd:33:a6:14:4f:27:e8:
                    ee:57:28:df:2e:b6:8e:bf:aa:37:0d:e8:b6:26:99:
                    0a:ed:e1:b2:c2:72:60:d4:c9:c5:5e:70:13:ab:bb:
                    3c:67:7d:00:ef:42:92:10:2e:d5:2d:f2:21:c1:f2:
                    f9:1d:70:39:e4:1a:33:9f:92:54:22:1a:74:63:c6:
                    8e:7f:3e:72:d6:c9:d3:04:e7:2e:73:f9:6d:9f:e2:
                    d3:64:95:1f:92:b4:09:9c:82:e4:48:52:c2:b4:7c:
                    94:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:13:FC:66:DB:B7:B4:73:23:9C:0F:76:79:2D:18:65:F0:EB:E7:A3
            X509v3 Authority Key Identifier:
                keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/7D1E4382F7E111F09133AC30656F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:65:0f:9e:c9:47:d6:21:47:b0:62:23:73:bf:84:7e:ea:62:
         8d:f9:61:39:66:fb:6b:cc:d1:5c:05:17:dc:56:cb:30:e7:25:
         7d:af:db:b9:1c:bf:7d:24:db:38:87:6c:ab:b7:72:be:40:c5:
         f7:ba:17:df:76:1c:50:29:31:8c:a8:2a:f4:33:6a:79:89:90:
         11:5b:a2:7e:4e:70:ca:5c:2d:4e:da:db:b1:ee:cc:34:35:9f:
         c7:68:32:cf:e9:7d:e4:bf:0d:1a:80:31:90:45:c5:fb:f0:a2:
         5f:f5:4a:a0:fc:3b:ff:c3:6b:c4:fa:dc:7d:4b:13:83:48:e8:
         88:55:b1:c4:19:07:ce:36:16:fa:66:4e:28:7b:94:3a:9e:f2:
         34:8d:01:12:59:03:1f:76:23:cf:26:9b:64:22:ae:f3:73:da:
         3c:9b:11:20:ab:0e:67:a2:03:1a:93:93:c2:4b:78:a3:a4:50:
         11:99:b1:07:97:5b:e7:01:99:a5:86:8b:a5:70:0f:d2:29:e8:
         87:1f:8d:02:d7:34:1b:b2:93:b6:b5:9e:33:ef:56:07:9c:13:
         fb:d8:8e:c9:27:38:67:e7:8e:19:7c:b2:e2:4b:7a:d3:7f:3b:
         0b:f7:ba:cb:da:68:c0:28:14:7e:90:aa:1c:ef:0f:c1:9d:c2:
         57:5f:e5:91
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURGOEExMTAvBgNVBAUTKDgyNjAwN0E0RTNEMTRCQjBCNTA5QkI5Njk4NDVEMDFF
QjgwOUREN0EwHhcNMjYwMTIyMjIyNzA5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDDA02OTcyYTQzZC1hZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0VQ0lBg+HLo9jcCXUyTrRFSLKfmb4FqaAZOW9iy7SkWam5SCchlRbkn/E1K1
aT5OxCa1kq/Issw3N8ud1B4Izt49CbNuU+wItzbvvwYmsvatRaLcdK0BzWeBnCq6
ssVhlbSXFMuSt1zUSndt6ooi8ttLChZxZ4lHBBtG+XAsvGDJa4fky3CqBvZ2TpiO
AWcLXji39Rn9A3TvS4pYp90zphRPJ+juVyjfLraOv6o3Dei2JpkK7eGywnJg1MnF
XnATq7s8Z30A70KSEC7VLfIhwfL5HXA55Bozn5JUIhp0Y8aOfz5y1snTBOcuc/lt
n+LTZJUfkrQJnILkSFLCtHyUIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFB4T/Gbb
t7RzI5wPdnktGGXw6+ejMB8GA1UdIwQYMBaAFIJgB6Tj0UuwtQm7lphF0B64Cd16
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY4QS8zNTUzQ0ZBQUEz
N0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3QzFDYnVXbUVYUUhyZ0oz
WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dtQUhwT1BSUzdDMUNidVdtRVhRSHJnSjNYby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MURGOEEvMzU1M0NGQUFBMzdGMTFFQzkyRDZGQTVFQzRGOUFFMDIvN0QxRTQzODJG
N0UxMTFGMDkxMzNBQzMwNjU2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFntmAwDQYJKoZIhvcNAQELBQADggEBAJRlD57JR9YhR7Bi
I3O/hH7qYo35YTlm+2vM0VwFF9xWyzDnJX2v27kcv30k2ziHbKu3cr5Axfe6F992
HFApMYyoKvQzanmJkBFbon5OcMpcLU7a27HuzDQ1n8doMs/pfeS/DRqAMZBFxfvw
ol/1SqD8O//Da8T63H1LE4NI6IhVscQZB842FvpmTih7lDqe8jSNARJZAx92I88m
m2QirvNz2jybESCrDmeiAxqTk8JLeKOkUBGZsQeXW+cBmaWGi6VwD9Ip6IcfjQLX
NBuyk7a1njPvVgecE/vYjsknOGfnjhl8suJLetN/Owv3usvaaMAoFH6QqhzvD8Gd
wldf5ZE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 05:53:54 2026 by rpki-client