This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/A7982B82B88011F081A7B245C4F9AE02.roa
File:                     A7982B82B88011F081A7B245C4F9AE02.roa (raw, json)
Hash identifier:          LvTJBLnJPXcw1Th5AV7X1RP31W6NL3Gb75mx55CzI/c=
Subject key identifier:   D2:F1:71:1A:9B:21:C3:73:72:37:64:94:CF:12:0C:4A:80:AF:E8:E9
Certificate issuer:       /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768
Certificate serial:       0BCD
Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/A7982B82B88011F081A7B245C4F9AE02.roa
Signing time:             Tue 20 Jan 2026 19:16:06 +0000
ROA not before:           Tue 20 Jan 2026 19:16:06 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138557
IP address blocks:        103.132.217.0/24 maxlen: 24
                          103.132.218.0/23 maxlen: 23
                          103.132.218.0/24 maxlen: 24
                          103.132.219.0/24 maxlen: 24
                          2404:4040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl
                          rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3021 (0xbcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768
        Validity
            Not Before: Jan 20 19:16:06 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696fd476-cd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:62:8f:9c:1e:11:d4:4f:fe:3d:65:95:49:36:
                    90:1f:c2:06:42:ac:16:ea:99:f2:3d:25:f0:7f:bd:
                    be:78:37:45:7a:59:ed:d4:d3:18:dc:26:99:aa:23:
                    bb:35:b0:c0:61:8b:ed:8f:1f:9d:df:08:3b:32:9a:
                    9c:5e:3d:a9:08:f5:7c:c5:85:5f:2b:29:11:e7:98:
                    b6:a6:8b:cd:d5:47:64:fb:38:6e:29:ec:7a:ab:f9:
                    50:fd:ad:b7:60:24:37:2c:fe:ef:1d:57:e8:c3:98:
                    61:d5:6e:dc:45:19:4b:e3:5c:6a:f3:04:4c:e9:00:
                    ee:7e:cc:ac:3d:08:14:87:0a:ef:57:42:9f:22:0d:
                    28:5b:f0:5d:3f:55:cf:e9:58:8c:a9:73:da:6b:30:
                    0d:83:2b:fc:65:76:7f:21:3c:58:3c:79:4e:b2:8f:
                    2e:86:a4:a9:b7:37:ea:90:d1:ae:61:8a:53:b5:34:
                    69:df:72:f0:06:07:26:b6:cc:f7:12:32:00:a1:22:
                    05:1f:68:15:58:bc:75:e9:ae:20:9c:e6:56:7e:bd:
                    80:cd:29:eb:76:74:bb:6a:6f:2e:fa:c8:37:b0:21:
                    2f:81:cf:82:0f:88:a1:e6:74:1f:39:1e:b5:7c:56:
                    ca:f2:39:e8:aa:71:2e:f6:50:2c:15:9a:da:4b:01:
                    e8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F1:71:1A:9B:21:C3:73:72:37:64:94:CF:12:0C:4A:80:AF:E8:E9
            X509v3 Authority Key Identifier:
                keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/A7982B82B88011F081A7B245C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.217.0-103.132.219.255
                IPv6:
                  2404:4040::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:11:ce:6f:e9:62:6e:6f:90:36:d1:a3:69:d4:a8:30:b7:83:
         e7:33:e6:26:15:f9:ab:2e:be:ea:6d:95:c2:37:d4:df:02:bf:
         d9:f7:0d:f1:0e:2d:1f:80:7d:56:98:09:20:f3:fa:96:ba:d9:
         ca:14:7f:28:d6:5a:6a:55:d3:5b:e7:c0:45:0b:60:76:f3:a1:
         32:62:24:c0:36:ec:8e:bc:b8:85:eb:79:70:43:c2:8a:cd:36:
         63:cc:ff:27:ba:64:7e:d8:e5:72:e6:10:ad:d8:71:fe:c7:08:
         5b:ff:09:c5:b2:b9:21:c9:a5:77:a6:d7:e5:48:b8:ae:a8:88:
         e1:a4:35:85:0a:64:3c:1f:e3:00:c7:d4:7c:7a:65:83:6e:cf:
         91:80:23:82:f8:64:1a:55:cc:b2:12:63:ff:84:51:f8:e8:66:
         0b:88:3d:c2:e1:1c:47:9a:59:f9:db:bd:13:98:19:bd:b1:be:
         ee:20:69:7c:6e:a2:e6:c2:5a:a4:cc:57:ad:e8:56:6c:30:f7:
         8c:cb:10:fa:fa:80:5c:c2:5f:5d:ee:76:41:a9:7b:78:de:c5:
         34:88:5c:42:37:ff:94:f9:52:bd:ba:0d:d4:dd:7a:c8:c5:e3:
         c1:ad:9e:d8:6c:d7:83:e8:2c:0a:12:4f:99:9b:1a:e2:e4:f7:
         05:55:cc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:46:12 2026 by rpki-client