This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/6079B40AD98211EBAA210852C4F9AE02.roa
File:                     6079B40AD98211EBAA210852C4F9AE02.roa (raw, json)
Hash identifier:          Eem3/PbzQzEIFholXd1EiEHAlAwuUXPxRqFzAD8h/Kk=
Subject key identifier:   BC:E0:F5:F8:39:AD:96:0D:10:64:F9:00:E5:BE:90:B7:EA:B1:AE:4C
Certificate issuer:       /CN=A912C3BD/serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA
Certificate serial:       060E
Authority key identifier: 46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/6079B40AD98211EBAA210852C4F9AE02.roa
Signing time:             Sun 18 Jan 2026 22:19:01 +0000
ROA not before:           Sun 18 Jan 2026 22:19:01 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     139927
IP address blocks:        103.147.106.0/23 maxlen: 23
                          103.147.106.0/24 maxlen: 24
                          103.147.107.0/24 maxlen: 24
                          2001:df2:9180::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl
                          rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1550 (0x60e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C3BD, serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA
        Validity
            Not Before: Jan 18 22:19:01 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696d5c55-90e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:f0:bc:2a:b1:42:5e:21:f0:67:97:33:02:
                    1d:b9:cc:dc:0a:50:91:39:82:b4:0f:a7:71:e6:64:
                    e5:4d:59:3e:a1:9c:50:b4:95:eb:c9:7d:1c:aa:72:
                    6f:55:95:8b:93:6c:0c:31:60:3f:a0:c3:24:00:00:
                    b7:a7:82:e0:19:1b:7b:8b:af:f2:e9:85:49:46:96:
                    11:80:44:57:f2:42:3d:3e:84:fb:84:8d:ea:8c:34:
                    ef:cc:2b:c8:2c:96:bd:2b:49:6f:8e:7c:62:63:57:
                    44:57:f6:8f:a3:74:d1:d3:a7:d9:bd:03:84:fa:a2:
                    e6:68:07:7f:03:26:96:e6:b8:30:80:20:20:ea:30:
                    0c:b3:6b:0f:89:80:68:ee:c2:84:09:cc:b4:44:2f:
                    27:ca:d6:dd:49:77:aa:3d:5c:11:fb:7c:7e:71:86:
                    d3:07:60:b1:77:4d:21:26:e6:2e:40:a3:7c:3b:8c:
                    99:04:b6:fd:1c:a6:e7:9b:6f:44:2b:80:fb:92:38:
                    21:14:c6:7e:1c:de:2b:36:a2:87:52:8e:7e:76:08:
                    61:74:e5:8b:c7:87:c8:15:25:df:b8:37:f3:68:d4:
                    f3:5c:6d:4f:1a:6a:15:78:0e:0e:91:5d:97:fc:ad:
                    40:4c:c0:a5:9d:e7:e9:93:aa:e4:1e:97:d0:e7:6f:
                    c3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E0:F5:F8:39:AD:96:0D:10:64:F9:00:E5:BE:90:B7:EA:B1:AE:4C
            X509v3 Authority Key Identifier:
                keyid:46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/6079B40AD98211EBAA210852C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.106.0/23
                IPv6:
                  2001:df2:9180::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:8c:be:54:8e:d5:fb:2d:49:2a:38:43:df:9d:8b:42:6e:b2:
         79:60:a4:d2:6e:38:0d:89:cc:ef:f3:7a:6b:ab:e2:2f:1b:40:
         47:e5:ec:57:79:48:d5:fc:fa:d1:34:cd:98:d5:74:4e:48:e6:
         eb:4d:6d:8a:63:f5:22:df:e5:42:3f:ae:a0:80:36:63:ab:f6:
         93:e9:e6:06:84:d6:c5:37:2f:0a:5a:fa:aa:af:87:d9:ff:0f:
         2e:5b:48:92:d9:e4:22:c6:53:f6:19:75:76:2a:4c:ed:01:db:
         c8:5d:e5:39:b9:e0:6d:e7:69:ec:8f:f7:b3:77:38:1b:f3:76:
         2e:ba:49:0a:75:a8:f4:cd:2b:05:08:7d:1e:ec:fb:43:cc:9e:
         01:1c:3d:69:35:00:56:08:d7:2c:ff:bc:ae:0e:c6:e3:b6:14:
         b9:c6:15:e0:99:ac:4a:c7:f9:2e:80:be:af:47:b9:7f:02:ef:
         91:f7:43:00:c3:02:92:9c:d5:9c:79:f6:10:80:a4:04:26:af:
         c7:fc:8d:23:07:8f:fa:c1:4a:6d:4d:26:20:ed:7c:56:36:5e:
         80:13:eb:08:19:51:cc:3d:9c:4c:96:b3:4f:e3:7b:09:04:78:
         f5:26:d5:88:d0:d0:d1:b2:07:dc:7c:0d:da:37:f3:04:e3:4e:
         9f:93:62:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:06:12 2026 by rpki-client