This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0578A814931111EDB92FFC5FC4F9AE02.roa
File:                     0578A814931111EDB92FFC5FC4F9AE02.roa (raw, json)
Hash identifier:          1KFVycIgzz7qQ65xAIw0dxTl7iJi5NodK/l4z0fvaGs=
Subject key identifier:   D0:08:3A:1C:70:55:5E:8D:F1:E6:15:16:08:D7:12:DC:8E:E7:7E:88
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       2696
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0578A814931111EDB92FFC5FC4F9AE02.roa
Signing time:             Wed 31 Dec 2025 18:14:47 +0000
ROA not before:           Wed 31 Dec 2025 18:14:47 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     4294967294
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9878 (0x2696)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Dec 31 18:14:47 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69556816-a10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:95:06:cc:12:7b:51:ed:95:4f:1b:a6:0f:2c:
                    5d:6d:4d:95:f4:36:cd:b5:63:8f:86:24:f8:41:0d:
                    5f:ef:59:e3:ce:a2:b4:4d:e1:62:6f:68:45:f0:0f:
                    6c:58:76:9c:cf:70:d0:de:7f:84:b3:4b:ef:43:da:
                    74:f5:1f:12:30:85:97:13:d3:df:fd:7d:d9:48:0c:
                    bf:ab:f8:24:4c:2f:8c:d9:4c:ae:86:19:0c:e7:3a:
                    16:78:a6:72:55:13:cc:59:a5:09:8e:56:99:cf:44:
                    80:e0:7a:8f:a2:b5:87:19:5c:cc:e7:60:33:3e:53:
                    60:00:a0:3c:64:ee:1b:ed:4c:ce:bd:58:4a:39:50:
                    dc:5e:e9:c3:e6:6f:12:04:59:39:6d:98:de:6a:ed:
                    b7:f8:a6:fc:cc:97:03:99:92:52:49:0e:4c:64:8a:
                    33:69:cb:77:e7:40:5d:71:64:ce:71:c7:a9:6d:cd:
                    96:06:03:88:98:6d:11:a3:1c:91:d1:57:53:46:10:
                    f8:9d:21:fe:07:02:0d:b5:be:72:83:c2:19:d2:04:
                    ba:8f:ef:0b:c7:f5:7e:ee:52:f2:27:9c:60:57:33:
                    90:a0:bc:0f:b3:30:b5:3a:e9:48:e4:db:7b:b6:8e:
                    cd:e3:6c:7c:b2:dc:4f:a2:33:6f:3d:53:b3:26:cf:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:08:3A:1C:70:55:5E:8D:F1:E6:15:16:08:D7:12:DC:8E:E7:7E:88
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0578A814931111EDB92FFC5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:f1:a8:79:44:0b:81:a6:de:30:30:23:5f:72:37:b4:b8:b5:
         f6:31:de:e4:8e:c1:79:fc:e8:41:b8:6c:79:4d:b8:8b:5f:cc:
         dd:9b:78:11:10:b0:5f:eb:f2:7c:bf:3e:e8:73:cd:28:47:f9:
         14:bb:f9:d7:69:27:84:7b:55:70:e4:3d:37:c9:a0:c3:36:07:
         2e:f7:c3:a0:11:97:58:f5:77:e9:a6:b2:a2:bf:1d:3d:53:dc:
         19:ee:b5:d7:34:83:39:fe:e7:92:cb:95:4d:aa:c4:70:76:fc:
         1a:96:0c:66:07:d4:13:12:a9:45:f8:ce:5b:1a:a4:fb:13:ba:
         78:c3:9c:8b:24:69:c9:b3:56:c1:b5:1e:fe:16:5a:21:ef:2e:
         98:06:f0:77:00:25:35:eb:fd:8d:cc:d5:a7:b4:72:79:0c:cf:
         1b:1d:cf:fa:7c:f3:6a:cf:bc:a5:0c:24:a0:f6:1a:77:52:b6:
         cc:f0:b7:fb:d8:a1:ec:6e:a5:1f:20:3c:90:52:81:06:c6:f9:
         45:36:30:4c:b3:b1:eb:85:ea:a6:6a:a0:8c:9e:b5:87:78:0a:
         50:fe:83:6c:6b:f1:70:51:bc:f7:98:5f:a4:61:e4:a7:95:a7:
         d6:76:19:f6:46:f0:30:36:c2:49:c5:73:a1:62:77:9a:db:5b:
         0f:5b:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:43 2026 by rpki-client