This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/7C76E4F6928611EE9B72027FC4F9AE02.roa
File:                     7C76E4F6928611EE9B72027FC4F9AE02.roa (raw, json)
Hash identifier:          xcqfwDXsyJ627moTrRcBvX0KULbwueHcuuhlJKxtnlM=
Subject key identifier:   FD:27:BB:DB:A0:09:A5:D8:2E:D1:90:22:05:83:0F:0D:B0:D7:EB:19
Certificate issuer:       /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial:       018F
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/7C76E4F6928611EE9B72027FC4F9AE02.roa
Signing time:             Tue 23 Dec 2025 03:23:50 +0000
ROA not before:           Tue 23 Dec 2025 03:23:50 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     7474
IP address blocks:        103.126.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
                          rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D109, serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
        Validity
            Not Before: Dec 23 03:23:50 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=694a0b46-2207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:36:ce:e5:81:cf:46:ea:29:0e:59:1d:aa:
                    6b:56:e7:61:c3:2a:e6:9d:fa:6a:9c:71:e1:04:b1:
                    15:99:3d:6b:3a:c2:f8:e0:94:0e:2a:92:23:87:83:
                    52:46:fe:fb:13:2b:c9:25:ce:91:d9:2a:0b:15:7b:
                    66:43:46:2d:4d:11:f7:d9:fb:66:09:23:91:88:d3:
                    b2:a0:4b:0b:cc:f5:ac:62:16:72:f3:9c:76:17:02:
                    d3:7b:e8:96:fa:95:cd:25:1a:0d:03:d9:53:2b:92:
                    33:b4:65:83:18:d2:83:06:ab:67:82:d2:27:0e:e7:
                    0b:ce:18:c9:47:01:c3:86:f1:6c:53:e9:2d:7a:71:
                    23:b8:7e:4c:23:f0:34:c2:f9:a9:04:4d:21:3c:e7:
                    db:79:81:e4:9d:74:76:7d:f5:bf:ec:ee:8e:d9:e2:
                    7e:3a:be:0c:d0:cd:3d:63:31:9a:67:63:dd:be:a4:
                    2a:57:46:22:e5:65:d6:af:98:1d:41:cb:2f:0f:91:
                    27:1a:34:52:21:2e:ac:29:23:b9:41:b4:f7:b8:1c:
                    3d:f8:fa:dd:62:e1:ee:9e:96:66:4f:b4:ef:6b:87:
                    96:29:94:38:0c:40:ee:50:10:19:02:82:64:c0:99:
                    a2:18:2b:0b:5b:d7:fa:64:4b:ea:d8:49:6c:03:2a:
                    64:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:27:BB:DB:A0:09:A5:D8:2E:D1:90:22:05:83:0F:0D:B0:D7:EB:19
            X509v3 Authority Key Identifier:
                keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/7C76E4F6928611EE9B72027FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:e1:e8:b7:7d:5b:66:9c:09:b4:ce:2b:3a:f0:81:11:fd:41:
         88:25:81:a4:7b:ca:5e:c1:4e:6b:be:00:a2:99:c9:9f:30:db:
         91:fe:a3:fc:23:32:33:98:db:c2:2e:de:68:51:87:05:72:78:
         90:4c:f7:9b:7e:b2:25:2c:e3:eb:be:9a:fa:fa:99:17:f7:1c:
         78:e4:31:d2:79:6b:3a:f6:0e:54:36:83:e5:ee:4f:56:fd:ce:
         f2:1e:d3:de:2a:4e:17:dd:25:f6:6e:ad:66:e8:eb:86:67:3b:
         fc:d0:47:ab:c1:f8:19:3c:c4:ff:4a:ef:1f:77:97:6e:e3:1d:
         ca:6b:df:93:8a:4e:cc:9e:e8:1f:b9:4c:77:61:ba:58:01:ea:
         ea:35:46:a3:aa:0d:96:39:91:3e:d6:80:f6:d9:0e:00:a9:07:
         f5:5d:b1:a0:ce:df:d3:17:16:f2:ba:21:f8:46:2b:34:eb:8d:
         d3:ff:3d:ab:21:f9:80:17:af:a2:83:96:a6:50:c6:be:9e:76:
         df:d1:f8:41:15:a2:d0:8d:1d:d4:fb:e1:d8:37:bb:24:35:24:
         e3:7c:0a:4a:54:52:7e:f4:3b:a7:b3:80:bc:89:06:dc:11:d6:
         58:5a:10:83:1e:01:4a:7e:8d:c3:02:57:4c:9f:2f:04:1f:cb:
         bf:5c:87:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:15 2026 by rpki-client