This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/DF7C7778A97711F0A76BF369C4F9AE02.roa
File:                     DF7C7778A97711F0A76BF369C4F9AE02.roa (raw, json)
Hash identifier:          Jipe5dnQoJbhxNEq2fSj1cmESpJbXmRcW3pELaCptG8=
Subject key identifier:   7A:74:C7:54:58:5D:44:FD:59:05:2D:F1:A0:99:FB:04:6A:BC:F3:63
Certificate issuer:       /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949
Certificate serial:       0C86
Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/DF7C7778A97711F0A76BF369C4F9AE02.roa
Signing time:             Fri 02 Jan 2026 11:35:56 +0000
ROA not before:           Fri 02 Jan 2026 11:35:56 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     153038
IP address blocks:        103.155.27.0/24 maxlen: 24
                          103.156.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl
                          rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:08:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3206 (0xc86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949
        Validity
            Not Before: Jan  2 11:35:56 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6957ad9c-34ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:62:00:2b:8d:f1:65:eb:80:16:3f:b7:ca:
                    ff:b3:42:59:b6:be:c8:ee:d7:4a:6e:0f:23:63:85:
                    24:f2:4f:68:f3:6a:ae:e8:01:5b:77:5f:f2:8c:39:
                    92:b2:f4:00:d1:3e:8d:71:41:4b:18:04:22:06:01:
                    c7:7a:cc:49:b7:94:aa:96:31:2d:3d:15:6c:cc:14:
                    ac:78:8d:15:48:06:91:5f:44:f9:37:c7:a3:36:c7:
                    dd:7a:2d:8b:1b:31:b0:c8:c6:5f:69:52:e4:23:67:
                    a8:1c:7e:0e:ff:08:5c:c5:6a:61:b8:13:25:56:8e:
                    4c:95:84:28:22:20:36:7c:43:94:ce:02:fc:77:1f:
                    cc:22:00:6a:ae:77:71:ea:8c:8c:a8:59:cf:48:3a:
                    a7:ad:2b:6f:78:02:1a:e4:c8:c5:44:81:86:a0:4b:
                    f9:7b:35:51:80:33:51:d1:d7:34:a8:6f:79:df:11:
                    4d:ae:41:67:be:76:81:8e:91:fc:81:a2:5b:75:0e:
                    65:bb:c6:f0:84:07:16:23:2d:ab:bc:dc:0f:55:fc:
                    9f:22:79:c4:8a:b9:33:09:ec:fb:5f:02:04:ce:1d:
                    cf:b7:a5:aa:91:4f:7e:a9:2b:40:b4:9a:39:36:a3:
                    73:f9:14:b0:75:51:22:c1:a5:1d:44:a2:e3:55:43:
                    19:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:74:C7:54:58:5D:44:FD:59:05:2D:F1:A0:99:FB:04:6A:BC:F3:63
            X509v3 Authority Key Identifier:
                keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/DF7C7778A97711F0A76BF369C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.27.0/24
                  103.156.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:12:bd:69:0b:66:3d:fe:73:b7:3c:d4:0f:d7:4d:83:d0:bc:
         03:77:88:9c:25:98:62:6b:7b:69:ff:60:9f:f3:d5:74:c8:1e:
         fa:09:58:ee:fe:0e:6a:cb:13:d9:01:8f:52:3d:f2:b2:87:26:
         84:42:ad:00:e7:c1:de:75:c6:33:03:b0:ab:5a:ac:51:17:ca:
         cc:d2:5a:63:92:e1:8d:a7:ee:fe:b0:92:63:92:52:fe:b4:49:
         8a:79:6b:8f:5a:1d:b7:f5:e5:2d:ab:41:ac:cd:df:f4:84:4b:
         c2:19:1a:0d:51:ba:98:9b:ca:47:66:b7:f1:8b:17:92:bb:eb:
         30:c0:b7:41:ce:3b:34:00:e3:bc:9d:fa:46:9a:99:29:95:e5:
         25:c8:61:9d:e5:e7:23:5e:93:24:0b:81:0e:2c:2d:9e:d8:fd:
         e9:e1:72:9a:0e:51:6a:21:6e:3b:74:9c:2a:eb:52:b2:c5:4f:
         98:05:84:d3:a5:b3:39:74:e7:ec:5b:50:b6:68:63:ec:c1:df:
         25:42:be:95:dc:ef:be:62:51:41:40:ae:22:22:f2:11:21:ea:
         24:58:dd:9e:48:92:a0:aa:7e:74:0c:d3:ed:d2:ee:b4:4c:67:
         b7:b4:2e:fc:e0:c6:67:33:d3:38:89:cd:a7:3f:86:76:5f:d6:
         20:29:cc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:26:06 2026 by rpki-client