This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/007AE4426C9311EEBEA0EB63C4F9AE02.roa
File:                     007AE4426C9311EEBEA0EB63C4F9AE02.roa (raw, json)
Hash identifier:          NFmNkjaiU0uYTs29NAH/47n0Z0kFYXvb8Jo+kIWbJVI=
Subject key identifier:   19:5E:AB:2C:C2:44:C1:34:8B:B9:8F:8E:49:BB:A1:07:60:EE:3F:5C
Certificate issuer:       /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Certificate serial:       01B6
Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/007AE4426C9311EEBEA0EB63C4F9AE02.roa
Signing time:             Wed 21 Jan 2026 03:22:27 +0000
ROA not before:           Wed 21 Jan 2026 03:22:27 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     135403
IP address blocks:        103.180.48.0/23 maxlen: 23
                          103.180.48.0/24 maxlen: 24
                          103.180.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl
                          rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
        Validity
            Not Before: Jan 21 03:22:27 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69704673-fdda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:33:05:06:42:27:18:52:c4:9e:7d:d4:04:8a:
                    35:38:f0:4f:37:f2:f4:6c:16:fa:cf:40:d5:30:24:
                    04:39:bd:0d:37:1a:1f:90:1b:10:af:34:c7:51:70:
                    3a:f3:b9:26:a8:6c:ea:7d:e8:9a:35:b9:c0:e7:e8:
                    5a:68:e9:04:70:3b:ba:2f:30:04:af:a8:45:3c:95:
                    40:dc:85:67:2b:ba:7a:f7:3b:d0:67:a5:82:f0:71:
                    3f:c5:32:97:0c:dc:4a:f8:48:d9:9b:22:cb:7b:e6:
                    9e:a3:a3:f7:d7:75:32:6f:29:41:0f:a7:75:84:c7:
                    d6:9a:0f:43:e1:7b:7b:f0:15:ff:32:52:8d:0c:95:
                    3f:2a:15:3b:a9:8f:8c:23:79:4f:3e:0e:e3:45:a7:
                    24:33:37:6c:bc:84:d4:ea:2e:1c:48:c3:6e:76:aa:
                    a7:5f:13:33:b7:cd:69:7e:9a:d8:f1:6c:31:3d:d2:
                    00:58:1c:ae:e5:ec:e5:dc:9f:82:af:6f:a6:1b:99:
                    bf:33:6a:df:bc:29:da:2d:d3:8d:32:64:dc:c6:22:
                    93:00:63:b3:98:b7:64:40:0b:14:39:66:bc:dd:19:
                    ce:8b:34:50:85:d1:e6:c5:90:78:28:b5:40:00:99:
                    8c:88:82:b8:6e:75:76:27:10:a4:49:d0:61:ab:57:
                    09:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5E:AB:2C:C2:44:C1:34:8B:B9:8F:8E:49:BB:A1:07:60:EE:3F:5C
            X509v3 Authority Key Identifier:
                keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/007AE4426C9311EEBEA0EB63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:b3:86:36:55:4b:91:85:f6:88:33:c6:7e:1c:16:0e:0c:6f:
         e1:ee:6f:2e:bf:17:bf:aa:a5:14:d0:e1:2c:65:fe:72:e3:56:
         d3:af:8a:f3:61:8f:71:e0:9c:6b:27:90:8f:9c:4f:88:4d:4e:
         3b:2e:de:19:81:ec:64:c9:c4:3f:82:2c:d3:ec:62:2f:cf:53:
         ef:02:d5:d8:31:a6:e8:85:fd:1b:09:dc:52:e8:48:86:ec:d2:
         71:a5:01:31:16:26:fe:2f:49:d0:59:37:78:be:a5:28:b2:a1:
         e8:3a:46:64:90:73:95:94:91:6a:22:af:a3:a8:8b:5e:95:4f:
         1f:85:0b:c1:d1:47:5a:48:02:94:7d:dc:ba:b7:87:f6:f9:84:
         6c:f8:c9:08:5e:dc:19:47:db:67:e1:e3:0f:fe:a9:5d:61:9f:
         d5:3a:9c:25:03:46:73:11:35:9f:09:79:bf:df:47:2f:b7:18:
         09:ac:bb:b8:ca:ef:01:ae:22:07:fc:85:a5:33:44:a8:8c:07:
         c7:fe:f1:eb:31:91:e5:03:40:a1:be:31:f0:9d:04:f0:96:b5:
         04:8a:e2:1d:c3:9e:44:45:e4:4d:e9:a1:5f:63:9c:6f:b9:ca:
         99:bd:c4:6b:b8:91:b0:f5:2d:55:9a:b2:40:f1:fb:45:42:16:
         d4:ea:06:f7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NDQ3ODgxMTAvBgNVBAUTKDgyMDlGREYzOUFGMDJDM0I5QUU1MDNGMjI1RDc0N0U2
N0FBM0NERjMwHhcNMjYwMTIxMDMyMjI3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTcwNDY3My1mZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAojMFBkInGFLEnn3UBIo1OPBPN/L0bBb6z0DVMCQEOb0NNxofkBsQrzTHUXA6
87kmqGzqfeiaNbnA5+haaOkEcDu6LzAEr6hFPJVA3IVnK7p69zvQZ6WC8HE/xTKX
DNxK+EjZmyLLe+aeo6P313UybylBD6d1hMfWmg9D4Xt78BX/MlKNDJU/KhU7qY+M
I3lPPg7jRackMzdsvITU6i4cSMNudqqnXxMzt81pfprY8WwxPdIAWByu5ezl3J+C
r2+mG5m/M2rfvCnaLdONMmTcxiKTAGOzmLdkQAsUOWa83RnOizRQhdHmxZB4KLVA
AJmMiIK4bnV2JxCkSdBhq1cJcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBleqyzC
RME0i7mPjkm7oQdg7j9cMB8GA1UdIwQYMBaAFIIJ/fOa8Cw7muUD8iXXR+Z6o83z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDc4OC8zN0YwMUIxQTZD
OTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xEdWE1UVB5SmRkSDVucWp6
Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpmTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDQ3ODgvMzdGMDFCMUE2QzkxMTFFRUE1NjA3QjI5QzRGOUFFMDIvMDA3QUU0NDI2
QzkzMTFFRUJFQTBFQjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFntDAwDQYJKoZIhvcNAQELBQADggEBADWzhjZVS5GF9ogz
xn4cFg4Mb+Huby6/F7+qpRTQ4Sxl/nLjVtOvivNhj3HgnGsnkI+cT4hNTjsu3hmB
7GTJxD+CLNPsYi/PU+8C1dgxpuiF/RsJ3FLoSIbs0nGlATEWJv4vSdBZN3i+pSiy
oeg6RmSQc5WUkWoir6Ooi16VTx+FC8HRR1pIApR93Lq3h/b5hGz4yQhe3BlH22fh
4w/+qV1hn9U6nCUDRnMRNZ8Jeb/fRy+3GAmsu7jK7wGuIgf8haUzRKiMB8f+8esx
keUDQKG+MfCdBPCWtQSK4h3DnkRF5E3poV9jnG+5ypm9xGu4kbD1LVWaskDx+0VC
FtTqBvc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:41 2026 by rpki-client