This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/992104CE2EA211EBA8D67685C4F9AE02.roa
File:                     992104CE2EA211EBA8D67685C4F9AE02.roa (raw, json)
Hash identifier:          sQXpj6eKh5lMVKh4gbaEoCoRMdnfyCTyGQWDQlIDPLY=
Subject key identifier:   F6:3F:33:74:28:42:7F:35:F4:47:E7:24:0F:40:E7:86:34:DA:35:07
Certificate issuer:       /CN=A9137917/serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
Certificate serial:       0805
Authority key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/992104CE2EA211EBA8D67685C4F9AE02.roa
Signing time:             Wed 31 Dec 2025 21:17:24 +0000
ROA not before:           Wed 31 Dec 2025 21:17:24 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     56382
IP address blocks:        103.158.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl
                          rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2053 (0x805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137917, serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
        Validity
            Not Before: Dec 31 21:17:24 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=695592e4-f2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:c2:71:46:5d:2f:48:a9:43:b5:72:27:84:
                    65:e8:92:f4:2e:ff:bc:1a:ac:69:6f:5c:e6:19:52:
                    e8:04:16:01:c7:07:00:fe:41:2b:63:10:67:09:58:
                    de:4b:ec:f5:a6:0f:81:ad:14:a9:28:ca:1c:b5:32:
                    c7:99:7b:2c:2e:29:70:ce:10:39:8c:8b:a1:e1:4c:
                    9a:80:5e:66:3e:86:ae:b3:97:af:80:b2:b5:2a:de:
                    90:2c:59:de:21:6c:95:14:83:5a:8b:ba:a6:27:28:
                    b8:19:0d:66:c3:fc:45:38:2f:78:f7:6d:e8:ed:f9:
                    f7:e7:d3:7a:61:97:b3:27:e5:c9:af:d7:b5:80:d3:
                    b7:3f:1d:55:2a:d7:9a:fe:32:78:92:a4:d8:cc:3b:
                    96:0b:f8:75:d3:e2:06:f2:56:46:9c:dc:a2:48:df:
                    06:9e:9f:4d:b8:ff:c6:56:42:e7:f4:50:cb:00:d4:
                    56:3e:28:26:22:91:39:c1:f2:16:03:45:b5:70:4a:
                    2a:fd:cb:4d:fd:0e:32:f5:0b:20:0b:ab:1a:87:0f:
                    3b:d2:db:f1:25:34:0f:8f:35:e7:d9:11:cf:9d:e3:
                    d2:41:1d:39:1c:4a:3a:92:62:2d:36:15:b5:96:e2:
                    ef:df:85:75:b8:45:c6:26:f2:96:cf:98:58:07:06:
                    2b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3F:33:74:28:42:7F:35:F4:47:E7:24:0F:40:E7:86:34:DA:35:07
            X509v3 Authority Key Identifier:
                keyid:F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/992104CE2EA211EBA8D67685C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:1c:c0:2d:12:5a:6c:f5:01:b8:34:e5:b7:64:89:ac:37:31:
         10:e2:e5:58:78:b0:f8:75:20:a4:ab:f1:b3:8c:4d:5a:18:e3:
         15:3d:c7:de:ac:52:89:3e:24:a6:bb:9b:f4:70:fc:3c:97:44:
         aa:c8:ea:6f:bd:6b:f4:ba:10:de:00:29:34:47:67:08:03:19:
         05:9b:d1:5e:ac:d1:b5:74:02:95:33:ef:99:18:ba:71:27:02:
         71:7a:99:17:a4:84:71:4a:8d:1e:b5:b7:6b:88:ec:94:0d:c8:
         73:8f:0e:4e:f7:f3:1c:df:30:2b:ba:64:2e:ed:6a:34:d5:5c:
         ae:a4:12:0f:f1:ef:e4:78:34:79:ce:7d:93:6d:ff:26:54:ab:
         7d:e7:a2:58:25:a4:9c:7c:e4:ab:02:c8:95:6c:9a:23:93:28:
         e1:05:e0:3e:e2:15:da:6d:88:9b:5a:f7:f1:14:f6:ca:54:09:
         4f:f3:9b:58:17:f7:4a:9c:20:17:8c:fd:39:25:09:bd:e1:f1:
         5e:e5:dc:2f:2f:f1:cf:2a:55:6c:5f:3a:ea:ab:f7:a8:db:55:
         0d:79:17:77:3e:df:24:3e:d0:57:b3:85:ba:61:d5:b5:58:27:
         9c:9b:cc:10:3f:3d:25:c1:05:a0:5a:fe:bb:2e:73:44:ce:f3:
         9e:98:76:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:51:37 2026 by rpki-client