This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa
File:                     B53FD334575411ECAA094876C4F9AE02.roa (raw, json)
Hash identifier:          rTrbtCmsaj6W/UVAAV1eEuxXOgzpxZqi8moqLl5cIEs=
Subject key identifier:   A6:23:02:63:F3:54:87:56:C6:89:18:72:F5:77:3E:E8:64:05:8B:43
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       269A
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa
Signing time:             Wed 31 Dec 2025 18:14:51 +0000
ROA not before:           Wed 31 Dec 2025 18:14:51 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     65535
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9882 (0x269a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Dec 31 18:14:51 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6955681b-4537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:ed:02:5c:a3:21:2f:1a:51:b7:26:ad:bc:
                    86:aa:b5:c8:79:e5:c4:00:f0:cd:15:db:33:eb:7e:
                    1d:e8:3e:e4:61:72:8d:c9:29:a6:55:6e:8e:b3:5f:
                    ce:3e:71:57:c4:a1:5c:79:f0:20:74:50:e7:99:b7:
                    93:4e:36:cf:d3:bc:b2:7e:9a:6a:a7:9c:f3:e1:a6:
                    77:ea:e2:30:c7:a4:7a:52:52:49:c1:bc:cb:c6:ab:
                    6c:2d:28:b9:54:3f:92:9f:5d:4b:d8:a2:fc:5a:15:
                    87:a1:0e:69:29:3f:22:66:da:f8:5a:9a:df:2d:65:
                    5c:20:34:96:25:32:2c:78:19:66:15:c1:3f:d6:3f:
                    81:34:bb:68:8f:67:df:cf:4a:d1:20:05:c9:0a:b7:
                    1c:69:e0:91:2e:99:c4:70:42:64:13:1f:62:91:64:
                    af:b3:6a:0d:36:10:98:e4:c2:e3:01:30:93:f3:92:
                    49:6a:89:46:82:4d:b0:3a:2d:ef:d5:90:fc:c1:ba:
                    ab:da:cd:2f:37:16:c3:29:21:85:b2:28:40:d4:27:
                    90:d8:af:7d:50:3b:13:af:c4:66:31:29:6e:9f:ce:
                    bc:93:fa:e6:73:91:d0:6f:40:0b:6e:a2:50:aa:74:
                    28:61:b8:28:1b:fb:7e:bc:f9:85:6e:be:07:06:df:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:23:02:63:F3:54:87:56:C6:89:18:72:F5:77:3E:E8:64:05:8B:43
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:27:68:f7:1a:20:2b:f7:15:8c:09:f9:50:5a:04:dc:ee:77:
         40:aa:ef:46:44:6e:de:d5:c7:32:c2:f3:de:cb:1f:95:ed:f1:
         67:46:04:7e:c8:c9:7f:75:38:63:85:41:c1:e5:01:85:c3:1c:
         14:1c:8d:09:e0:1e:d6:0f:a3:21:d0:99:38:a9:62:fd:d6:26:
         54:9e:e9:2a:84:14:d6:ce:61:a3:8b:91:55:de:b6:43:93:69:
         0d:6d:c3:29:ea:3a:ea:3d:0c:9c:35:63:5f:40:dd:01:5f:7e:
         79:45:38:e5:a4:62:9d:99:3d:af:59:42:79:2b:09:4e:fa:9a:
         f7:c0:a2:65:28:ce:8f:b6:04:65:91:f5:f1:9a:f5:f0:53:15:
         28:71:d2:36:0c:ed:15:e2:f5:fd:69:66:48:f1:05:ce:d7:d8:
         cd:bc:00:66:88:f4:9e:c6:c8:67:c9:65:66:c3:3f:9f:cb:18:
         78:72:c5:73:aa:97:d3:30:f0:2f:c8:39:2a:f4:6e:58:2d:09:
         f6:3a:bb:e3:32:02:48:9d:f0:c3:c3:a9:a6:5e:6b:db:32:7f:
         8e:ec:47:c0:a8:44:cf:46:1a:38:09:1b:0c:0b:0d:f1:8b:9b:
         60:86:86:f3:cb:a4:92:e6:df:98:9a:45:5d:16:c3:90:d5:23:
         e8:47:8c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:58:08 2026 by rpki-client