This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/4E87E6766C9311EEA3DF6E7FC4F9AE02.roa
File:                     4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (raw, json)
Hash identifier:          Id5hTSqnCq9sIlYBlEobLdREPLbQi9MsA4cN90jqm/4=
Subject key identifier:   EC:2E:C6:F1:D1:F8:9D:E3:2E:E4:E8:A9:2D:D4:5A:BA:AA:B6:A6:89
Certificate issuer:       /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Certificate serial:       01B7
Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/4E87E6766C9311EEA3DF6E7FC4F9AE02.roa
Signing time:             Wed 21 Jan 2026 03:22:28 +0000
ROA not before:           Wed 21 Jan 2026 03:22:28 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        103.180.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl
                          rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
        Validity
            Not Before: Jan 21 03:22:28 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69704674-9322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:24:c5:12:cf:a1:70:27:e7:29:bd:7b:e4:
                    43:c2:f6:15:8e:28:f2:55:5d:1b:de:b6:1e:d2:62:
                    85:b9:e9:5b:06:30:a8:5c:67:89:5d:e9:1a:e0:d6:
                    cd:38:26:80:2b:da:1f:63:40:7e:fa:b3:bc:eb:f9:
                    20:89:34:11:cf:28:f5:2a:c7:92:17:46:96:bd:b8:
                    d2:0b:e6:b3:c6:5a:af:8b:19:db:2e:fe:c5:bc:4b:
                    e9:88:2c:ea:df:8b:3e:80:8a:2f:7a:e5:3c:9f:d6:
                    88:65:7c:61:11:7f:df:48:7e:66:48:ca:1c:e9:f8:
                    2c:21:56:59:f3:90:46:4c:4b:48:07:dd:19:2d:74:
                    c7:68:d4:00:d0:1f:cf:4a:eb:f2:9d:1b:8e:e1:76:
                    d9:ab:15:d9:ba:63:b7:89:2a:eb:1a:25:b7:d3:93:
                    18:29:a5:83:03:47:42:b5:ac:8d:64:df:1c:8a:24:
                    b3:7c:28:67:74:5f:dc:09:f3:2e:2c:59:6b:c1:b8:
                    62:f0:35:da:22:27:f6:2e:27:6d:d6:2f:83:cc:db:
                    1b:d1:03:f1:fb:ad:50:ab:e2:84:d1:8c:bf:f1:d4:
                    a6:4d:a3:c2:78:5a:28:44:0c:0b:9b:ba:0b:3a:76:
                    55:6a:09:f5:d7:c7:54:5e:53:30:a5:37:98:54:20:
                    20:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2E:C6:F1:D1:F8:9D:E3:2E:E4:E8:A9:2D:D4:5A:BA:AA:B6:A6:89
            X509v3 Authority Key Identifier:
                keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/4E87E6766C9311EEA3DF6E7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:05:2d:77:55:59:f6:b7:27:4f:22:a4:d1:18:7d:5f:33:e4:
         03:7e:24:39:73:80:41:3c:08:93:dc:ee:1a:85:bb:63:e1:01:
         33:12:a9:7c:48:34:a6:dd:f2:e0:57:62:af:b8:bf:ee:a0:a7:
         0d:15:d1:9e:45:f7:61:68:80:7e:35:7b:0f:86:da:11:aa:8d:
         5e:39:6c:72:b3:ff:c6:13:34:9f:54:c3:6a:b2:e1:56:8c:64:
         3b:87:28:ae:e6:a2:2c:1b:a4:df:0b:45:87:3c:19:bb:81:92:
         cd:29:41:7e:f3:ee:af:3d:da:24:39:fe:6d:29:ea:0a:69:07:
         4f:27:b2:7e:34:10:a3:49:ac:99:3a:ce:be:b7:84:b0:69:47:
         10:c8:10:aa:44:2b:d1:34:56:24:84:07:79:dd:b8:ca:15:bf:
         bd:08:fb:09:dd:55:03:53:f0:5f:a5:5e:7c:92:9a:17:e8:21:
         85:35:9e:63:83:7c:cb:a6:2e:39:57:15:79:de:b6:70:3c:10:
         dd:9f:da:18:15:dd:9e:1b:a8:cb:f9:26:e2:3e:dc:af:38:6e:
         6c:0f:32:24:14:fb:a7:b3:bc:b4:24:fe:9a:92:8b:c8:cf:49:
         20:a0:20:49:82:8e:1e:68:d6:33:d0:cc:95:8a:8d:3f:f6:1e:
         57:af:c0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:21:17 2026 by rpki-client