This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/EEFF812CED0B11F08C41E7DD3C6F56BC.roa
File:                     EEFF812CED0B11F08C41E7DD3C6F56BC.roa (raw, json)
Hash identifier:          mbO5u0N6LtTxGR6qoRHcyljiPFyMOz31bMtwVggmLdM=
Subject key identifier:   DF:CC:AC:91:29:9B:E1:B5:44:EC:5A:EF:57:AA:0C:52:1B:28:2A:5F
Certificate issuer:       /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Certificate serial:       088F
Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/EEFF812CED0B11F08C41E7DD3C6F56BC.roa
Signing time:             Fri 09 Jan 2026 03:33:16 +0000
ROA not before:           Fri 09 Jan 2026 03:33:16 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     137445
IP address blocks:        103.218.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl
                          rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2191 (0x88f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
        Validity
            Not Before: Jan  9 03:33:16 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=696076fc-ee29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:0f:2e:e6:4c:21:23:dc:35:50:f9:c4:d4:
                    db:dc:35:7b:d5:ea:6a:de:67:f2:80:51:b8:b4:31:
                    f0:93:85:1a:97:c0:c0:5b:fe:18:9f:71:23:c4:6e:
                    fc:f1:b5:2a:40:eb:7d:fe:ae:ee:bf:fb:9b:e3:f4:
                    55:bb:ea:50:b8:88:3d:30:e7:a0:b6:ec:28:ca:0a:
                    79:66:9f:f2:1f:09:1e:e4:7f:de:46:c4:58:4b:b7:
                    40:d1:c9:22:03:79:60:39:f8:74:9d:ef:d0:a5:b3:
                    18:bb:4f:d5:61:d9:76:4b:48:cb:e7:a9:c6:c2:9b:
                    20:a6:1b:07:b3:b1:72:e3:30:0f:3f:ef:0b:2b:7f:
                    5b:b1:ec:84:43:84:38:85:c7:5e:72:aa:25:58:dd:
                    9e:e9:57:ba:81:25:d6:87:51:15:f7:28:6d:6c:29:
                    16:31:26:30:12:bf:50:a7:a1:0e:0d:04:1f:72:dd:
                    fc:1a:f4:cd:98:d6:79:02:f4:11:26:48:3a:cb:71:
                    84:de:32:41:9e:51:49:d4:2a:19:82:ec:9c:24:e9:
                    53:87:4c:e5:a3:dd:68:8a:e4:e1:8c:e7:1d:ea:ac:
                    c2:fc:63:3d:10:2d:b8:73:4c:31:45:c7:83:c0:ba:
                    0c:1c:18:d6:ea:2e:f6:7d:fc:4c:5e:4a:0d:2a:4a:
                    b6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CC:AC:91:29:9B:E1:B5:44:EC:5A:EF:57:AA:0C:52:1B:28:2A:5F
            X509v3 Authority Key Identifier:
                keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/EEFF812CED0B11F08C41E7DD3C6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e8:97:a1:99:a6:53:7f:36:30:c9:2c:58:d5:07:a5:4a:15:81:
         44:1e:0a:c0:20:29:a9:b4:18:1d:a7:5d:3c:7a:0e:d7:e7:49:
         74:6d:23:18:20:09:70:27:b8:a2:4f:fb:d6:8f:e1:e4:40:e0:
         e0:c5:23:70:81:f6:3f:3e:1f:a7:70:b0:82:a4:85:77:66:96:
         10:e5:9a:a7:65:14:bd:eb:2e:12:46:72:5d:97:2c:28:42:dc:
         25:ba:97:e2:50:a4:a5:3b:7b:3d:91:04:bc:0a:06:02:a3:2a:
         15:cf:1a:de:57:d6:35:c7:b4:e0:4b:94:ca:2b:a9:0d:bc:8f:
         7b:e8:8d:6b:8d:1b:f7:25:9c:b8:d4:95:3b:a7:af:fe:14:9d:
         91:f0:30:3b:02:7b:f2:1f:6b:1b:25:a7:4c:aa:84:dd:fa:40:
         c9:04:80:74:8f:f1:43:a5:b3:fa:04:e9:da:c8:f4:a8:b9:65:
         76:1d:70:10:7f:c9:7f:38:a2:15:06:15:89:51:f0:9d:5a:6e:
         4f:3f:7e:94:d8:6c:49:db:48:2b:3e:55:cc:74:b5:e9:9a:91:
         b4:dd:b1:ca:c2:a4:12:b5:9e:81:30:37:5b:82:7e:1d:b9:fd:
         04:c3:3b:fa:9c:4d:6e:24:24:63:b7:00:02:35:89:17:0e:c4:
         8c:3d:37:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:52 2026 by rpki-client