This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/968DFDCE973311EDBFD0B43CC4F9AE02.roa
File:                     968DFDCE973311EDBFD0B43CC4F9AE02.roa (raw, json)
Hash identifier:          o2GI7XMYv3MlSbkYvk4kVzlhPkarAqFpqw7uDHNAuAU=
Subject key identifier:   DD:6D:EB:46:1E:F8:C3:6A:46:9A:3F:CD:BE:4D:A5:EA:FD:3C:B5:62
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       2699
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/968DFDCE973311EDBFD0B43CC4F9AE02.roa
Signing time:             Wed 31 Dec 2025 18:14:49 +0000
ROA not before:           Wed 31 Dec 2025 18:14:49 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     65533
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9881 (0x2699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Dec 31 18:14:49 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69556819-105a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b4:2e:cc:75:ea:48:05:bc:fc:db:c6:2c:f3:
                    14:a8:64:d6:ce:06:e6:be:51:a0:24:dc:fe:32:8b:
                    2c:1d:9c:09:b2:00:fe:7b:af:b5:11:4a:2d:a7:aa:
                    e3:d0:1b:87:6f:7a:e8:07:e6:a6:a8:26:a1:d7:c4:
                    c4:21:23:0c:e2:4a:58:51:4d:5c:7b:e8:2f:7e:54:
                    f8:5e:12:94:03:82:95:6e:2e:3b:ad:95:16:a4:52:
                    72:25:5b:cf:1d:e3:04:cb:68:df:db:5d:d2:7f:d5:
                    0b:a3:5a:6c:c0:34:8d:64:80:e6:4e:5c:04:ae:47:
                    7b:58:cd:61:bf:70:e2:51:2e:69:5d:4b:22:f9:65:
                    a0:cf:0a:55:84:aa:74:14:0c:f8:93:d8:61:cd:57:
                    00:72:65:ff:4a:c5:1b:b3:2a:eb:52:68:da:0c:b6:
                    77:3c:b3:00:90:69:d8:0f:42:52:72:12:41:a3:06:
                    a7:03:ec:b0:31:09:9d:be:8b:14:58:bc:b2:b5:2f:
                    a0:3f:22:9d:77:d9:60:c5:8e:a1:a0:0b:8c:7c:15:
                    7a:b5:09:62:2e:25:bd:be:99:04:8c:36:df:63:d9:
                    e5:6a:83:46:70:98:f0:21:65:2d:01:f4:1d:64:d2:
                    28:bb:93:a4:aa:43:c9:47:e8:4a:03:84:f3:a3:ff:
                    c6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6D:EB:46:1E:F8:C3:6A:46:9A:3F:CD:BE:4D:A5:EA:FD:3C:B5:62
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/968DFDCE973311EDBFD0B43CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:a5:2a:b0:8d:83:3c:e7:1f:3f:fa:9c:b4:da:be:ac:5f:aa:
         1a:92:b1:8d:4b:35:18:e9:15:8b:5e:38:40:05:96:15:d2:4d:
         01:4e:a0:c0:b7:06:3c:1e:f3:14:b0:bb:57:2e:27:ba:6f:3f:
         6c:4b:f4:84:6a:f0:26:3f:83:c3:14:39:18:ae:e9:21:ae:7c:
         04:b3:93:4f:53:2c:25:c7:c9:f0:03:d1:d5:31:b4:96:d0:82:
         27:ac:71:cf:5d:46:2c:d2:a7:db:e0:7b:3b:20:e0:a3:6c:67:
         3a:5d:49:da:52:a7:31:03:74:c5:a7:5f:ad:09:33:64:ef:45:
         20:36:dc:ee:e6:2b:51:a9:16:7f:39:d6:6a:d7:ac:09:18:36:
         bf:35:d9:78:23:42:7a:b1:b6:38:93:84:c7:e2:e9:27:cf:6f:
         40:dd:e3:f6:96:50:76:d0:e6:2c:78:78:02:5e:9c:f6:b9:98:
         59:5d:a3:dd:f1:a8:b8:25:46:6d:d4:7c:1f:16:ec:a4:99:6f:
         09:0e:4b:e6:7d:39:1a:2a:3a:a5:e2:46:61:a5:84:9d:7f:14:
         49:05:0d:ea:11:ea:a2:d9:a6:ba:3b:02:84:df:26:a2:bc:56:
         a0:fc:97:c2:23:8f:47:1e:1d:c3:df:ea:7a:63:76:d7:dc:00:
         7c:fd:02:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:20:56 2026 by rpki-client