This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa
File:                     7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (raw, json)
Hash identifier:          f+APvyzDOvcySR015hu7kLgvmSYPKiTNkC9AROsRa74=
Subject key identifier:   74:29:C2:FF:DE:2B:CC:73:4F:03:4B:BD:1A:53:1D:10:60:B3:46:40
Certificate issuer:       /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Certificate serial:       0B2E
Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa
Signing time:             Sat 10 Jan 2026 19:16:11 +0000
ROA not before:           Sat 10 Jan 2026 19:16:11 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136010
IP address blocks:        103.79.216.0/22 maxlen: 22
                          103.79.216.0/23 maxlen: 23
                          103.79.216.0/24 maxlen: 24
                          103.79.217.0/24 maxlen: 24
                          103.79.218.0/23 maxlen: 23
                          103.79.218.0/24 maxlen: 24
                          103.79.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
                          rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2862 (0xb2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A553, serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
        Validity
            Not Before: Jan 10 19:16:11 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6962a57b-2649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:82:2f:80:ba:6b:7d:db:e0:a6:fd:a0:82:87:
                    8b:11:b8:b7:11:c3:14:a9:7a:e8:d3:f2:ff:02:42:
                    85:ee:94:45:55:7f:55:d2:7c:fb:ad:96:00:11:61:
                    7c:04:52:e1:52:0c:fc:80:f5:59:bc:de:2d:a9:01:
                    a6:06:51:13:4e:c2:2f:d2:e7:8e:10:0e:ba:fe:7b:
                    d9:e8:be:08:2a:92:87:0c:4b:94:6a:2d:a3:13:a0:
                    43:ce:48:50:ed:ce:b9:7a:b3:92:ef:31:84:45:56:
                    5c:64:7e:02:74:59:b8:d4:91:14:d1:2c:e0:9d:0d:
                    36:78:d0:63:04:a8:c1:04:d3:11:9d:e2:57:81:70:
                    9a:c1:15:28:b7:b3:d3:0e:b7:38:84:9c:de:66:a9:
                    4b:e4:b3:0b:e5:a7:71:f2:af:99:b2:3a:db:fb:e8:
                    f3:4c:fc:aa:be:5a:06:f8:ff:43:27:ab:c9:c9:ff:
                    96:95:36:3e:70:f7:0e:35:39:10:bf:7b:a2:77:63:
                    61:2e:20:e0:7c:6b:62:51:84:45:1d:78:0d:46:1b:
                    a0:2b:bc:0b:ac:6f:00:34:5b:6a:bc:56:18:7c:66:
                    49:37:25:25:08:72:32:52:b2:a4:b1:41:d3:59:4f:
                    32:7f:bf:3e:ba:49:86:a6:37:fc:0b:3d:6b:b6:8e:
                    c9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:29:C2:FF:DE:2B:CC:73:4F:03:4B:BD:1A:53:1D:10:60:B3:46:40
            X509v3 Authority Key Identifier:
                keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:28:ed:57:bc:dc:5e:1d:ba:b6:ff:10:f2:75:74:b8:76:df:
         8e:5c:9b:99:19:7f:80:ec:41:eb:07:62:31:6a:c6:e5:eb:1e:
         42:d6:d1:eb:24:28:76:f4:ed:fd:5d:03:a4:3f:01:01:a2:15:
         0c:7b:00:14:bd:88:e0:e1:68:43:0d:75:96:e1:ab:15:54:e0:
         8f:8a:85:46:c2:43:8e:61:6f:31:10:95:9e:02:cc:bf:e7:76:
         07:73:0f:dc:85:79:16:b9:41:ec:c8:6b:b4:c4:24:51:de:14:
         24:a7:72:1d:4c:3d:67:b1:14:b3:a3:f8:9e:c9:86:6e:6e:e3:
         2e:02:ed:88:5c:c7:98:44:d7:d4:f1:86:26:85:b0:62:b6:9e:
         cc:4c:b8:4e:44:a8:93:b2:ad:87:50:9e:31:4b:19:12:d5:44:
         a9:d5:92:34:7b:d6:36:5d:80:60:b3:e1:b8:5e:b3:8d:e8:0e:
         b6:58:95:29:83:18:fe:d4:88:3e:7d:1b:fc:79:d6:ea:2b:64:
         5c:79:70:94:26:85:49:9a:65:e1:10:ba:69:20:6f:f5:21:c2:
         81:59:57:54:f9:1f:c5:e8:be:02:86:6b:ca:ca:e8:14:6b:05:
         66:b7:9e:a1:dd:ed:77:96:48:a8:9f:8d:92:fd:ae:19:5b:30:
         b2:af:9b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:53 2026 by rpki-client