This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/9A745DF6BDC611EE9C87EF29C4F9AE02.roa
File:                     9A745DF6BDC611EE9C87EF29C4F9AE02.roa (raw, json)
Hash identifier:          aznEv1ue4P4FRGApWtrIE4SCDK7fV07a0W+rY73Srwk=
Subject key identifier:   4A:C5:94:B9:1E:5C:6E:00:88:68:B5:13:23:DF:BD:BD:D2:4E:F6:8D
Certificate issuer:       /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
Certificate serial:       0226
Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/9A745DF6BDC611EE9C87EF29C4F9AE02.roa
Signing time:             Sat 03 Jan 2026 01:21:18 +0000
ROA not before:           Sat 03 Jan 2026 01:21:18 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137218
IP address blocks:        103.56.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl
                          rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155A79, serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
        Validity
            Not Before: Jan  3 01:21:18 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69586f0e-e1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:73:17:70:0c:e2:29:5c:af:98:df:5f:e0:60:
                    9b:ea:4d:6e:29:c1:6a:48:cf:5d:70:26:e5:9c:f4:
                    60:ac:d8:94:87:67:f3:75:0b:0d:d3:c0:ac:77:81:
                    37:7a:c7:21:52:f6:7b:ae:ce:e3:9e:c5:fc:5d:35:
                    b2:77:fa:e2:55:3b:88:ed:db:86:d1:c8:79:a3:59:
                    59:a2:68:23:d9:99:0f:b1:06:4a:48:6d:09:d1:8c:
                    18:88:65:e8:4f:64:86:09:fb:f7:be:38:c3:7b:53:
                    90:98:c1:0d:5c:b9:bf:32:6c:54:12:8c:5a:3f:40:
                    40:84:32:d5:19:24:7c:24:3a:9b:20:43:b8:38:2e:
                    11:ac:46:22:cf:58:ad:79:46:85:ac:a8:4a:c0:b8:
                    4b:84:b6:19:ec:3e:4a:1a:08:b8:2d:7d:0f:67:e5:
                    b2:f1:4d:12:67:cb:6e:36:a4:b5:8e:91:9d:cf:86:
                    0e:fa:ad:f2:f6:c6:f7:0d:30:61:01:7d:fe:e8:dc:
                    65:c6:2d:50:bb:28:7b:3f:62:5d:b3:fe:2f:18:9b:
                    c1:05:45:e6:98:04:d5:93:e5:b1:a6:a8:02:77:eb:
                    2d:c7:0b:26:a3:2e:ec:43:a1:e8:f1:aa:4e:3d:8d:
                    23:c9:69:bf:3d:c6:36:fa:c9:51:f0:72:8b:da:aa:
                    47:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C5:94:B9:1E:5C:6E:00:88:68:B5:13:23:DF:BD:BD:D2:4E:F6:8D
            X509v3 Authority Key Identifier:
                keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/9A745DF6BDC611EE9C87EF29C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:6e:c3:20:58:b7:2b:f4:d2:d8:33:aa:f9:dd:b8:b8:e3:c5:
         73:74:bc:8b:6e:be:70:96:2e:e8:85:6c:47:59:9e:8a:a0:e0:
         98:9a:29:84:9b:23:3c:d8:3b:c3:95:8c:3a:dc:58:a0:64:d6:
         10:db:16:34:76:1f:e1:fb:84:1e:0d:00:0b:d7:ec:c6:d3:a0:
         af:93:62:99:ee:b1:f6:da:f5:c1:6f:72:af:30:7d:8a:b0:f9:
         06:a0:af:49:35:bb:5e:66:24:5b:91:13:0e:38:f0:09:14:5f:
         1f:04:86:bc:f4:ec:37:3f:62:06:a0:84:f9:4a:0a:f3:c8:cb:
         60:7f:e5:11:bd:87:ba:a5:81:bb:aa:7a:12:52:e1:9c:13:c0:
         21:d9:46:61:a5:8a:cf:08:06:61:e8:4a:81:3e:d9:c1:e4:11:
         69:ee:c9:e7:aa:ba:7c:38:b7:59:a0:da:41:53:54:4c:73:46:
         5f:27:b1:2d:b3:ab:f1:e9:80:5d:88:d3:60:a5:95:98:c8:7b:
         24:bd:8b:07:b1:eb:3e:4e:c6:4b:97:fa:46:1e:94:20:ad:bb:
         7e:29:50:0b:5f:b2:91:87:17:76:20:9b:e1:9c:d5:b4:1f:4f:
         b1:52:8c:04:1b:cf:7f:7d:ba:b7:c6:61:6e:ac:21:a2:5e:96:
         d8:a4:ff:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:43:53 2026 by rpki-client