This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/AF506F14630811EC97879243C4F9AE02.roa
File:                     AF506F14630811EC97879243C4F9AE02.roa (raw, json)
Hash identifier:          ABE3n2gGnPfakf7p9TF+AJqd9EOU6JrzfzQOXBXKXxs=
Subject key identifier:   16:D8:25:8F:36:D7:4E:9F:D5:F2:F9:48:48:CA:92:A3:38:D5:62:56
Certificate issuer:       /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
Certificate serial:       04AB
Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/AF506F14630811EC97879243C4F9AE02.roa
Signing time:             Tue 20 Jan 2026 23:19:55 +0000
ROA not before:           Tue 20 Jan 2026 23:19:55 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149169
IP address blocks:        103.177.200.0/24 maxlen: 24
                          103.177.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl
                          rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1195 (0x4ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125A95, serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
        Validity
            Not Before: Jan 20 23:19:55 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69700d9b-8cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:15:67:7f:4e:1a:f2:29:e3:8e:70:9b:c6:
                    3c:3d:3e:b3:14:9e:10:f2:44:72:ce:75:fa:3e:e0:
                    42:f7:1f:73:bc:82:0e:ae:3e:9a:e1:b6:2d:b8:ed:
                    0b:b0:6c:35:87:72:31:d2:1c:cf:bc:62:80:6f:1c:
                    8a:16:cf:4d:8b:53:83:0c:2a:52:c1:a9:22:14:3b:
                    45:c7:34:1e:dd:86:52:f0:f5:c6:94:ac:2f:70:7c:
                    19:5b:6f:46:67:a2:8b:df:f0:5f:8a:1e:8d:ec:48:
                    2c:15:77:6c:e2:2e:cc:9d:81:f2:ad:0d:3d:1c:cf:
                    82:13:30:ce:5b:6c:75:3b:5a:a4:e3:9e:15:db:f5:
                    56:80:79:f9:0f:29:ff:c6:9f:6c:91:bb:77:b1:00:
                    e3:87:b4:d6:dc:58:5a:a6:e0:6f:7e:29:7d:08:14:
                    f0:10:31:bb:67:d5:4c:ea:06:0a:aa:7b:4e:f1:a8:
                    29:dd:47:0a:53:f9:58:55:e5:f6:54:ca:37:e2:97:
                    73:f0:dc:53:f1:2a:44:65:26:f9:b3:bf:67:68:07:
                    3b:5c:74:3b:67:77:06:22:5c:75:22:df:da:24:86:
                    58:a3:81:e8:a6:0a:4c:17:69:4b:77:54:3a:bd:61:
                    fd:46:57:dc:47:9a:2e:bd:ce:eb:ec:d2:b0:f7:92:
                    63:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D8:25:8F:36:D7:4E:9F:D5:F2:F9:48:48:CA:92:A3:38:D5:62:56
            X509v3 Authority Key Identifier:
                keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/AF506F14630811EC97879243C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:f8:b7:0e:05:b9:e1:63:51:83:d8:89:d2:0f:d3:89:91:6e:
         9a:95:58:ed:ad:ee:d3:e5:9e:33:17:cb:d7:98:f7:01:ee:0a:
         a1:ea:2a:df:b5:c4:87:95:5f:9d:58:53:20:ec:52:62:76:dc:
         03:97:f9:a6:7d:0b:69:03:64:c1:a3:e4:96:01:d8:a0:ff:6c:
         28:d6:2c:81:3f:03:7d:05:f6:34:97:0c:fa:cf:5a:01:5d:50:
         bd:72:79:76:5d:fb:b3:4e:e3:d2:93:42:55:5f:a3:be:46:94:
         f1:74:00:d5:0d:16:8b:14:d4:25:05:9d:0d:dd:2d:11:63:e2:
         f5:da:5f:d6:b7:26:a0:b2:ef:e0:34:a4:7f:ca:c2:94:06:5a:
         6c:31:fc:5b:15:35:82:93:b4:49:fc:0f:84:25:72:30:34:3d:
         62:56:1b:04:7a:cc:65:1b:c0:f8:82:a1:50:a7:f1:de:ea:97:
         d1:57:10:85:46:06:7f:71:e6:6a:43:cc:2b:ee:d4:69:46:36:
         a2:31:cc:34:b6:15:af:13:a1:00:13:ae:ae:b9:6b:66:6b:2f:
         28:b3:87:37:ec:e6:cb:d3:f5:68:b0:09:b8:d2:55:3f:e8:63:
         13:73:77:f1:9e:c5:1e:51:fe:e0:8e:ba:b1:b0:2d:1d:49:1a:
         58:4e:79:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:57:43 2026 by rpki-client