This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa
File:                     C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (raw, json)
Hash identifier:          4UHRu2Jate8sUpVjXNkZfk/ijCzdZQabtXIGQSyv2Wg=
Subject key identifier:   CE:A7:7D:6E:6B:63:A3:83:07:9B:53:23:26:F8:FA:10:B9:2C:55:67
Certificate issuer:       /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188
Certificate serial:       017D
Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa
Signing time:             Fri 23 Jan 2026 02:23:05 +0000
ROA not before:           Fri 23 Jan 2026 02:23:05 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     151484
IP address blocks:        103.230.244.0/24 maxlen: 24
                          103.230.245.0/24 maxlen: 24
                          2001:df2:a340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl
                          rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188
        Validity
            Not Before: Jan 23 02:23:05 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6972db89-715f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f0:d3:0a:cd:c7:05:46:ea:b7:b0:d6:62:fc:
                    25:f2:0b:51:71:e7:b1:48:26:28:49:81:5d:76:70:
                    73:16:cc:7a:35:b2:74:cd:36:50:4d:12:b4:03:f5:
                    3a:fb:b1:8d:81:7f:17:d3:75:22:f2:b9:a5:6a:93:
                    b1:b8:29:c1:37:59:c4:3c:cb:d1:83:0d:72:88:c9:
                    0c:38:f1:07:1a:6e:64:ca:bc:e5:99:79:70:e5:3b:
                    47:fa:d3:72:2e:36:73:d1:da:ed:70:24:18:28:9b:
                    ae:1a:ab:d8:08:91:c7:8f:68:17:0d:09:8e:99:40:
                    58:bd:7f:07:93:c9:a4:9c:d3:94:15:a3:bd:48:40:
                    8b:32:82:15:58:a4:0d:3a:aa:24:02:50:0d:8c:69:
                    e0:16:ee:76:a6:9f:d5:3c:44:b7:8d:45:eb:82:9e:
                    cd:e5:e4:fd:38:d8:76:4a:b0:44:2e:10:0f:7d:70:
                    d9:df:58:0f:8f:dd:5d:bc:ee:ee:c4:80:fe:16:6f:
                    76:dc:bc:f7:45:7e:a6:e0:1a:d5:c2:8c:a4:37:fc:
                    52:8e:15:77:60:47:a2:a7:bf:30:0a:f1:a1:c4:b9:
                    e2:68:c2:8b:6b:ab:0a:0e:ad:b5:94:92:9e:20:63:
                    77:5d:52:1e:3f:07:de:be:27:30:f8:c1:69:ac:74:
                    8a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A7:7D:6E:6B:63:A3:83:07:9B:53:23:26:F8:FA:10:B9:2C:55:67
            X509v3 Authority Key Identifier:
                keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.244.0/23
                IPv6:
                  2001:df2:a340::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:74:74:be:d5:97:b6:4f:a9:bc:39:d2:58:a4:f1:7a:20:b8:
         b5:bb:8f:8d:1b:18:82:82:4f:2e:b1:67:b6:db:6f:bd:91:47:
         dd:d3:f7:1a:b1:50:35:3f:c9:ed:fd:92:c4:66:78:8d:b4:89:
         fb:01:cc:51:24:b2:a5:b9:4b:d8:32:97:c4:9a:45:e0:9c:4b:
         dc:1d:be:39:a0:8f:1c:a0:75:80:81:38:01:b0:c3:97:09:7c:
         94:83:f5:59:0d:97:f6:b8:95:e5:11:fa:7c:5d:50:d1:ee:96:
         c1:0b:4a:89:1b:f0:07:38:3b:c4:6f:59:4c:b1:f6:fb:37:46:
         28:cd:57:4c:8c:a4:85:50:94:f3:89:df:36:f3:96:0c:69:3c:
         44:47:da:cc:2a:e5:3f:5f:28:76:14:56:80:3c:7a:4b:55:8e:
         ec:c3:99:4b:a2:61:e3:e9:f8:3d:b1:92:2e:6f:08:d9:9f:bb:
         6e:10:da:ff:3a:42:1f:34:23:26:dd:9b:44:e6:c5:cb:1a:e3:
         b8:a3:3d:4b:ca:6d:89:8e:17:c5:25:34:a7:f8:4b:4c:5b:bb:
         35:61:b3:66:07:55:d7:fb:e4:e2:af:f6:cc:89:5f:db:46:32:
         dc:66:ed:75:38:d7:ce:a0:99:4d:05:e1:ec:fe:c1:b0:d0:86:
         3f:d1:a4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:46:17 2026 by rpki-client