This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/183DE570057A11EC822F230EC4F9AE02.roa
File:                     183DE570057A11EC822F230EC4F9AE02.roa (raw, json)
Hash identifier:          GXLgHDoiJJX9ZG6YHax+vfsHDqeC2/UtO4pFuqnfqF8=
Subject key identifier:   D3:2A:10:6A:F2:4E:62:9E:3C:2D:27:2D:84:54:BD:41:5D:BD:84:30
Certificate issuer:       /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
Certificate serial:       0CA3
Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/183DE570057A11EC822F230EC4F9AE02.roa
Signing time:             Wed 24 Dec 2025 18:16:04 +0000
ROA not before:           Wed 24 Dec 2025 18:16:04 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138197
IP address blocks:        103.126.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl
                          rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:09:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3235 (0xca3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CBF3, serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
        Validity
            Not Before: Dec 24 18:16:04 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=694c2de3-1722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:23:79:85:bb:a7:5c:5e:84:fa:69:bd:24:
                    f2:b4:ee:93:94:1b:4f:48:3d:ba:7e:e5:47:6f:15:
                    72:56:a5:41:b4:52:d6:1d:4e:11:e9:87:f1:e0:e1:
                    5d:9d:8e:48:89:94:ce:bb:bf:91:b5:ea:f9:e2:52:
                    e7:bf:fb:3c:c4:d5:50:5b:04:58:d0:59:43:71:0e:
                    45:5f:93:a1:0f:6e:5c:6f:74:f7:5c:e5:f9:bf:6c:
                    51:61:2b:52:4c:6d:40:f7:04:95:d3:dc:65:2d:61:
                    38:6e:04:07:f9:72:64:ab:0d:ee:76:d8:46:f9:38:
                    64:79:24:9c:90:7e:96:c6:0c:03:68:f6:1b:5b:96:
                    d2:49:d3:9e:4f:53:fe:90:46:8d:99:d8:7f:12:bd:
                    8c:21:d5:ac:39:5b:c2:ed:96:b8:bf:6d:a8:99:3c:
                    d4:04:31:b6:5c:e1:7a:2c:79:c8:4b:2d:3b:71:dd:
                    81:87:57:d4:ce:74:83:0d:70:70:83:0c:20:67:8b:
                    21:96:91:47:b0:8f:2a:31:e4:40:38:1f:63:26:80:
                    2a:d4:58:1f:61:8e:0b:7f:fd:ae:6b:24:15:97:8d:
                    de:8d:d8:07:41:5e:9a:bd:ee:5e:35:00:12:e9:6d:
                    b5:c7:b2:62:67:6f:b8:ee:35:ee:69:75:5c:7d:d4:
                    d8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2A:10:6A:F2:4E:62:9E:3C:2D:27:2D:84:54:BD:41:5D:BD:84:30
            X509v3 Authority Key Identifier:
                keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/183DE570057A11EC822F230EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:cd:a7:a3:06:ac:2b:d3:93:07:53:02:de:91:cb:a9:cd:6d:
         c8:56:95:3d:05:45:a4:a2:ab:a0:af:cb:66:bb:ac:e3:62:64:
         55:65:3f:bf:a6:3c:8d:36:3c:2e:96:f6:ef:0c:31:0e:bf:d9:
         63:2b:12:27:bc:71:fe:78:ff:dd:b9:37:84:f2:d1:07:d2:79:
         ae:d1:1f:8e:31:1d:82:5a:67:64:40:e6:30:cf:74:a8:b0:3e:
         e7:31:02:91:d0:3d:56:ce:ec:08:18:9a:46:87:75:5b:cf:b1:
         14:6c:e8:c1:dd:79:aa:90:a8:18:5d:13:81:3a:70:fe:71:66:
         1f:26:70:2c:95:96:2f:5e:f2:82:a8:a4:11:8d:8d:91:2f:06:
         d4:40:41:e5:21:3a:7d:e8:a8:ef:0b:53:87:41:84:1b:26:bf:
         27:4d:ea:cf:bd:6e:79:fe:65:f8:c5:f5:33:7c:45:01:af:0f:
         ea:d9:93:5a:57:f2:c0:d5:8b:16:e3:e5:a6:ea:12:87:b9:3a:
         b7:5c:55:79:dd:18:17:66:f2:95:a5:29:57:30:70:c8:b9:e9:
         5a:b8:f0:a5:dd:92:2b:6e:3d:db:d7:dd:0f:5a:3a:9d:00:ad:
         de:b1:84:64:bf:c1:51:17:9c:4d:59:01:1d:92:c7:b8:c2:c0:
         6a:11:f1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:09:07 2026 by rpki-client