This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/6B47EC68529E11EC9C7C2081C4F9AE02.roa
File:                     6B47EC68529E11EC9C7C2081C4F9AE02.roa (raw, json)
Hash identifier:          LLpqzktmy/i0p/yMDD90KQ0Uru5Dr8T7c0G+T8iss+o=
Subject key identifier:   D9:53:2F:37:97:C1:0E:A9:CC:C5:88:88:72:A3:03:7D:36:46:1C:02
Certificate issuer:       /CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9
Certificate serial:       04D5
Authority key identifier: 89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/6B47EC68529E11EC9C7C2081C4F9AE02.roa
Signing time:             Tue 20 Jan 2026 23:19:38 +0000
ROA not before:           Tue 20 Jan 2026 23:19:38 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149037
IP address blocks:        103.177.68.0/23 maxlen: 24
                          2400:3860::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl
                          rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1237 (0x4d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143035, serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9
        Validity
            Not Before: Jan 20 23:19:38 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69700d8a-b8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9e:c6:1a:fa:91:44:e8:e2:ac:f6:e0:d0:29:
                    63:57:99:d0:81:53:b2:76:33:3e:25:72:57:ca:51:
                    a6:8d:11:1d:07:58:89:7a:4b:ac:85:ca:ad:2f:8e:
                    ac:00:ed:d7:12:e0:fa:05:85:4a:e4:07:ca:42:32:
                    6d:54:e6:6d:a6:36:b7:9f:f7:cc:ed:c2:bc:74:48:
                    29:c4:ad:31:e2:1a:0b:31:53:5e:bf:3a:50:6d:6a:
                    e5:9a:81:e5:02:8f:85:a8:a7:79:5c:79:fb:ca:81:
                    d0:4a:78:79:a7:fb:c8:8f:59:f3:10:9b:60:18:4c:
                    ba:86:de:40:51:f2:86:29:36:1e:26:87:48:cf:b3:
                    e5:51:38:9c:22:b9:c5:7b:b4:62:41:11:cf:78:ce:
                    e2:21:c1:d5:ce:ea:a2:e0:4f:93:28:3d:89:7e:8a:
                    4b:22:5d:15:cd:8c:71:f6:c5:cb:6a:17:9d:6d:7e:
                    2a:78:a6:14:46:0a:3e:35:b1:b6:ed:73:9f:59:f2:
                    32:53:68:88:0a:e1:8c:ad:33:2b:5a:24:5e:f0:88:
                    f0:eb:ed:4a:ab:62:77:04:a7:5e:a9:64:8e:9e:14:
                    4c:f9:0d:56:28:ab:42:08:95:c4:2e:51:d5:32:6d:
                    e2:dc:dd:23:0c:68:7d:0b:b9:2b:1b:49:50:ec:36:
                    cb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:53:2F:37:97:C1:0E:A9:CC:C5:88:88:72:A3:03:7D:36:46:1C:02
            X509v3 Authority Key Identifier:
                keyid:89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/6B47EC68529E11EC9C7C2081C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.68.0/23
                IPv6:
                  2400:3860::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:15:e7:30:eb:47:54:0e:ed:cc:b4:23:4d:69:c5:bb:05:fb:
         96:fc:71:07:88:6a:4e:91:9e:5f:4e:02:cb:65:2c:57:73:9c:
         fe:ed:2a:96:94:de:4a:f2:0a:fe:0a:72:f3:c1:5a:fb:21:c7:
         fb:df:73:5a:6a:8b:29:f9:8a:b3:1d:83:88:a2:61:33:e6:73:
         c7:84:6f:87:e1:2b:e3:5f:ee:91:3a:f5:e5:26:ab:55:6c:cc:
         ff:e1:57:c3:36:a8:e8:96:d7:c1:d9:5e:fd:12:8c:5e:a0:98:
         ac:00:35:89:5d:de:04:ea:63:75:43:16:20:2f:aa:6c:c5:6c:
         da:6a:d6:3f:d7:d5:46:c7:46:71:69:e0:ff:ef:86:4e:92:46:
         9a:fc:ff:9d:8a:95:79:3b:e4:8d:16:e4:99:92:c5:8e:e9:0f:
         bc:13:4a:96:ff:c9:85:47:59:de:52:3c:cb:09:c1:65:6c:cd:
         d5:79:ae:2a:93:8f:d9:89:99:f1:87:bf:b4:10:05:31:80:b4:
         fa:de:48:36:11:54:bb:62:cd:5e:9c:0d:87:77:a4:d8:bd:43:
         2b:7e:09:a7:fb:ed:7a:05:01:e1:0e:69:3f:78:37:83:94:66:
         63:25:9f:87:82:01:4a:e0:9a:a9:ed:3c:99:93:06:53:01:67:
         44:1b:9a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:56:57 2026 by rpki-client