This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/FF1C0B44C0D411EEB8303680C4F9AE02.roa
File:                     FF1C0B44C0D411EEB8303680C4F9AE02.roa (raw, json)
Hash identifier:          bKGg80hZuOEvJRA8hUA84Nu8p3hXxPKLN3DLYnrKZ6E=
Subject key identifier:   DD:41:B5:44:1E:46:B1:5D:96:BB:87:3F:19:9A:6B:71:FB:24:15:06
Certificate issuer:       /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0
Certificate serial:       0172
Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/FF1C0B44C0D411EEB8303680C4F9AE02.roa
Signing time:             Wed 07 Jan 2026 03:22:54 +0000
ROA not before:           Wed 07 Jan 2026 03:22:54 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     55361
IP address blocks:        103.254.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl
                          rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912404E, serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0
        Validity
            Not Before: Jan  7 03:22:54 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=695dd18e-a88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:72:88:c4:b8:3a:72:f8:f7:f7:33:c7:e6:
                    34:11:53:d2:bd:ec:3f:10:e6:77:af:68:c7:dc:b1:
                    b2:7c:ed:cb:22:85:40:84:e8:32:86:dd:32:3e:4b:
                    4b:c6:4f:e9:6d:88:d2:96:f2:37:02:b5:15:58:37:
                    fc:f7:df:ed:39:05:5a:56:55:38:f9:65:bc:c2:32:
                    59:ab:f0:50:d8:c7:94:1c:7e:0b:75:c2:64:f1:b6:
                    9a:2b:44:8b:af:8b:28:94:e9:dd:c3:ee:8a:e7:ee:
                    1a:45:e2:4d:7c:75:40:88:02:e0:53:b9:5c:99:2c:
                    91:1e:22:9d:99:73:42:e7:b7:00:df:d7:9b:53:ab:
                    c2:e7:6b:ac:0b:09:ab:fb:74:31:84:9f:28:f3:f0:
                    e5:27:1f:b5:39:f0:aa:68:6c:5a:80:9b:9b:f2:4a:
                    33:a0:91:21:30:48:ec:39:f9:92:62:20:e7:9b:1f:
                    84:4e:23:d3:ff:22:ba:0b:e2:e7:20:53:97:fe:52:
                    b7:a6:dd:a9:7f:4f:9a:85:99:3e:2a:13:0f:9e:11:
                    6c:8e:28:b4:8d:3e:01:a6:e8:28:70:fc:94:e0:6b:
                    10:48:dd:7e:05:ce:16:33:e2:00:ad:82:2a:43:f4:
                    4a:b5:1d:56:8f:e4:f4:d1:39:b8:58:d7:51:ca:a0:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:41:B5:44:1E:46:B1:5D:96:BB:87:3F:19:9A:6B:71:FB:24:15:06
            X509v3 Authority Key Identifier:
                keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/FF1C0B44C0D411EEB8303680C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:f4:f6:88:fc:f5:a1:85:f5:b1:55:45:cc:2d:6a:85:42:c2:
         88:a0:59:f6:89:0e:42:fd:7b:33:33:75:04:7b:78:35:ad:ed:
         b2:7a:4d:d9:07:26:14:12:68:90:24:23:ac:af:fa:54:ef:ea:
         dc:26:49:d0:3a:2f:f8:65:34:b1:d6:09:6c:2e:79:b9:1c:56:
         85:1a:c8:e4:9d:50:bc:73:06:a9:a7:0a:1a:61:91:d1:de:b4:
         13:e9:d0:1b:13:40:b7:b5:0d:e4:11:1e:d8:7d:16:e2:2b:1a:
         c3:5d:bd:48:22:d6:5b:04:48:ea:67:f2:3d:90:0f:9b:0c:3a:
         b0:8e:4a:64:8f:f3:99:ac:38:aa:f0:7b:21:07:2f:a3:d5:a3:
         3a:19:d3:94:54:35:70:9f:e6:18:a6:6d:07:78:74:1f:22:68:
         a6:50:a4:2d:28:f3:3b:25:9b:dc:62:02:1a:9f:f2:63:04:9d:
         df:18:55:e1:b1:0b:5b:53:42:7b:a7:3a:72:ee:8a:0b:bc:aa:
         06:1e:7c:78:3c:07:f3:cf:4f:09:5f:81:24:62:6b:a4:d2:b1:
         cc:6d:6a:94:9d:26:0d:8d:cf:6f:33:c6:fe:27:08:b8:bc:fc:
         7f:b8:1f:1d:aa:4d:c3:06:ab:81:40:db:bc:77:c5:6f:80:9d:
         5d:0a:34:b5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MjQwNEUxMTAvBgNVBAUTKDU1MzkwRjNGNkIzQjMwRUQ0QTlDNkZCOUFEODI5N0I4
RUY5OTA2RTAwHhcNMjYwMTA3MDMyMjU0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTVkZDE4ZS1hODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr2ZyiMS4OnL49/czx+Y0EVPSvew/EOZ3r2jH3LGyfO3LIoVAhOgyht0yPktL
xk/pbYjSlvI3ArUVWDf899/tOQVaVlU4+WW8wjJZq/BQ2MeUHH4LdcJk8baaK0SL
r4solOndw+6K5+4aReJNfHVAiALgU7lcmSyRHiKdmXNC57cA39ebU6vC52usCwmr
+3QxhJ8o8/DlJx+1OfCqaGxagJub8kozoJEhMEjsOfmSYiDnmx+ETiPT/yK6C+Ln
IFOX/lK3pt2pf0+ahZk+KhMPnhFsjii0jT4BpugocPyU4GsQSN1+Bc4WM+IArYIq
Q/RKtR1Wj+T00Tm4WNdRyqCxxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFN1BtUQe
RrFdlruHPxmaa3H7JBUGMB8GA1UdIwQYMBaAFFU5Dz9rOzDtSpxvua2Cl7jvmQbg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDA0RS80OURGNjUzRUJG
NDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01PMUtuRy01cllLWHVPLVpC
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjQwNEUvNDlERjY1M0VCRjQyMTFFRTlCMzU5NjU2QzRGOUFFMDIvRkYxQzBCNDRD
MEQ0MTFFRUI4MzAzNjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn/twwDQYJKoZIhvcNAQELBQADggEBAIb09oj89aGF9bFV
RcwtaoVCwoigWfaJDkL9ezMzdQR7eDWt7bJ6TdkHJhQSaJAkI6yv+lTv6twmSdA6
L/hlNLHWCWwuebkcVoUayOSdULxzBqmnChphkdHetBPp0BsTQLe1DeQRHth9FuIr
GsNdvUgi1lsESOpn8j2QD5sMOrCOSmSP85msOKrweyEHL6PVozoZ05RUNXCf5him
bQd4dB8iaKZQpC0o8zslm9xiAhqf8mMEnd8YVeGxC1tTQnunOnLuigu8qgYefHg8
B/PPTwlfgSRia6TSscxtapSdJg2Nz28zxv4nCLi8/H+4Hx2qTcMGq4FA27x3xW+A
nV0KNLU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:30:20 2026 by rpki-client