This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/2CB6A79C3C6411F098BE6F2EC4F9AE02.roa
File:                     2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (raw, json)
Hash identifier:          eSwdDwvfNryRrmyB4yrJmfhPogsly2ZtG6ay58P5nY8=
Subject key identifier:   79:A5:2B:15:CF:00:60:C1:F9:B6:BE:F7:61:56:39:1F:5E:DA:C6:D6
Certificate issuer:       /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial:       0DDC
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/2CB6A79C3C6411F098BE6F2EC4F9AE02.roa
Signing time:             Tue 20 Jan 2026 18:15:14 +0000
ROA not before:           Tue 20 Jan 2026 18:15:14 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150748
IP address blocks:        103.89.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
                          rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3548 (0xddc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
        Validity
            Not Before: Jan 20 18:15:14 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=696fc632-b0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:c3:29:64:2f:fe:74:40:7e:a7:61:82:41:
                    8a:05:db:62:ea:a1:a8:32:f5:74:f1:ec:a2:70:e4:
                    7c:a6:f3:f0:98:0d:dc:a4:e1:2a:4b:4d:1d:88:8d:
                    da:47:00:bb:8d:72:e4:39:ac:0f:3b:11:35:73:43:
                    1f:aa:5c:c1:7f:7e:87:1b:0e:2d:b3:40:6a:e2:69:
                    69:f0:ad:17:bc:66:1a:78:a8:ed:98:16:be:c2:fc:
                    a2:f5:ca:b4:3e:73:78:58:66:83:7c:b1:40:66:97:
                    69:f9:32:c0:47:7d:17:69:71:49:25:a7:59:c3:0f:
                    69:6d:1b:2a:18:94:ef:55:ae:6a:f2:50:97:2e:61:
                    11:9f:0b:35:59:bf:50:b2:2c:49:cb:ad:5e:21:3a:
                    4a:32:c5:e1:ac:8d:ae:45:2a:cd:8c:59:16:60:2d:
                    78:4f:89:19:c8:cb:fa:22:da:a0:3f:d4:75:42:3a:
                    f5:11:07:a7:f2:54:73:8f:c5:e3:8f:66:8e:9d:5d:
                    72:c8:d0:e7:23:d9:55:5d:6f:75:00:d6:ea:bd:60:
                    f4:90:ee:a1:35:33:25:a5:36:31:b3:b1:fa:39:2c:
                    e3:a1:b8:51:a6:81:d3:fc:a5:eb:0d:50:d0:16:1a:
                    29:df:a3:20:08:5c:a8:ae:3f:db:8c:ac:c0:01:4a:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A5:2B:15:CF:00:60:C1:F9:B6:BE:F7:61:56:39:1F:5E:DA:C6:D6
            X509v3 Authority Key Identifier:
                keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/2CB6A79C3C6411F098BE6F2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:37:48:b4:50:f4:d2:af:72:92:23:06:36:89:e6:24:e7:cf:
         8e:ce:f1:12:a8:17:96:4a:3a:e7:57:03:aa:b7:5d:1f:7d:dc:
         67:a3:2a:80:4e:91:c0:e5:28:8e:b3:9a:fa:32:29:37:d7:1d:
         4a:78:9a:0a:47:92:5c:86:33:9f:bd:38:80:62:22:7e:58:ee:
         55:c2:b9:58:6e:77:fc:5c:bf:69:4a:bf:dc:f7:2e:74:08:4a:
         4d:76:ba:a6:17:15:66:a1:02:f5:99:60:d6:2e:df:31:74:29:
         50:ea:4c:90:89:a0:dc:0f:c7:73:c6:04:0a:69:22:7d:cd:c8:
         78:ae:00:0e:98:d5:ac:fa:d3:1f:49:88:d3:29:53:d2:5d:48:
         cb:58:e8:b4:df:73:18:2a:b9:e0:d3:6b:e9:92:cf:de:2c:c3:
         ff:fd:fb:35:c7:7b:bb:66:9a:45:84:50:d4:a7:90:24:a0:04:
         8d:b7:40:01:cf:94:ec:ad:a4:91:de:82:af:3a:1f:04:2a:28:
         71:e8:b1:49:47:b6:b9:b7:bc:4d:03:a0:f6:f6:b3:93:d7:47:
         31:a3:d1:12:21:83:86:b2:0a:e1:32:4d:67:58:1e:90:fc:4c:
         65:ab:7c:0b:f2:1d:47:c7:8c:51:1e:bc:20:95:1d:a2:a1:08:
         7d:57:77:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:24:54 2026 by rpki-client