This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/41A312C684BB11EC95CF1D6DC4F9AE02.roa
File:                     41A312C684BB11EC95CF1D6DC4F9AE02.roa (raw, json)
Hash identifier:          Fy3h+0Jig5gyarM0XV9CmyA2opChklQXx18/ouvlrQo=
Subject key identifier:   E5:F5:23:E6:83:DC:18:0D:FA:31:F4:B0:CC:9A:B1:C2:9B:16:4E:17
Certificate issuer:       /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
Certificate serial:       0452
Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/41A312C684BB11EC95CF1D6DC4F9AE02.roa
Signing time:             Fri 23 Jan 2026 00:19:40 +0000
ROA not before:           Fri 23 Jan 2026 00:19:40 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149473
IP address blocks:        103.180.104.0/23 maxlen: 23
                          103.180.104.0/24 maxlen: 24
                          103.180.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl
                          rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1106 (0x452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132742, serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
        Validity
            Not Before: Jan 23 00:19:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6972be9c-1ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:31:94:1b:74:18:60:ac:f1:77:d8:8b:2a:8a:
                    0a:90:10:3c:6b:16:64:bc:a8:e4:6d:24:81:50:11:
                    8f:f6:7b:73:71:48:6f:c6:2e:ff:2d:07:b4:8c:a8:
                    96:d5:a4:89:96:b7:58:fa:39:e7:7c:1a:81:cd:e8:
                    a3:2e:d0:36:0b:a1:a0:2e:65:61:6e:4e:e1:37:2b:
                    2e:53:9a:94:c0:9c:b4:e8:89:60:f6:b5:bb:5b:f8:
                    ae:a4:a9:9a:0c:8b:2b:24:24:55:24:79:5d:05:af:
                    af:4d:bc:80:45:fe:b8:47:43:a7:63:70:e6:65:a5:
                    f7:1f:b2:cc:c9:d5:71:85:81:57:8f:9b:4a:3c:2f:
                    4b:c3:84:51:bd:28:bf:3e:26:8e:ec:af:65:bf:e6:
                    ca:77:ea:6b:88:fc:c0:14:8c:e3:c4:a7:de:28:4d:
                    3f:b5:2c:b8:e4:40:49:06:79:d1:89:7d:ec:fd:fb:
                    60:fb:2c:e9:b5:81:65:31:e0:a7:7b:07:c9:9a:25:
                    20:80:87:88:18:f8:56:b4:c4:43:1f:c9:70:c6:6a:
                    fb:4a:f7:62:87:bd:ee:2f:2c:38:e9:e1:7c:65:24:
                    3a:4f:b3:90:ec:cb:c6:cb:61:bd:50:99:8a:eb:2d:
                    1d:c1:c9:a2:50:d2:1e:d5:35:25:50:db:88:f1:84:
                    66:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F5:23:E6:83:DC:18:0D:FA:31:F4:B0:CC:9A:B1:C2:9B:16:4E:17
            X509v3 Authority Key Identifier:
                keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/41A312C684BB11EC95CF1D6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:98:d0:23:79:93:f0:f3:82:53:57:57:c3:35:07:9c:dc:82:
         a7:29:50:5c:c3:f3:4c:46:b1:62:df:4d:7d:61:6e:c7:ea:6f:
         ae:4c:16:33:1d:4a:2d:29:9c:74:72:8e:22:d7:27:42:12:5c:
         1c:60:f3:90:06:2d:6f:e4:42:99:c3:2b:cc:ba:22:eb:52:94:
         6c:e6:79:34:93:6a:2e:79:dd:cf:24:5b:1a:d3:c9:f7:fe:23:
         9e:6c:79:8c:43:b7:9e:71:48:04:64:1c:08:0a:3a:6f:11:b9:
         09:99:44:f4:1b:11:f2:2f:d8:b6:ce:98:a9:07:4d:80:ed:8e:
         69:de:9b:be:ee:4a:dd:47:08:67:14:01:ff:d7:bd:7c:ee:57:
         4c:10:59:84:20:11:1f:7a:8c:34:63:51:85:2f:2d:a9:af:9d:
         15:01:67:6c:21:aa:1f:6f:ab:81:98:8f:cb:f3:43:78:f2:60:
         e6:a0:d7:f7:86:58:63:73:fd:02:d4:0c:de:ac:59:43:3d:4d:
         2c:d6:de:a1:3b:f6:6b:97:ee:61:75:18:3d:80:9e:51:d0:b7:
         8d:ae:8a:64:ac:ca:34:bd:67:3a:bc:c7:68:8c:ce:a8:0d:22:
         a6:81:c3:dd:52:71:bf:9d:35:68:ee:5c:5b:92:37:76:69:9b:
         41:14:5a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:32:21 2026 by rpki-client