This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/6A0C1182CA9D11F084B0E810C4F9AE02.roa
File:                     6A0C1182CA9D11F084B0E810C4F9AE02.roa (raw, json)
Hash identifier:          ZgibkZw6KFun5X8zhtn1GD/qxM6O7UKHr3rrMpoNNTw=
Subject key identifier:   00:A7:BA:FF:2C:91:10:0E:AB:B3:2A:BC:8D:2E:B7:2F:43:5A:D0:91
Certificate issuer:       /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479
Certificate serial:       01B1
Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/6A0C1182CA9D11F084B0E810C4F9AE02.roa
Signing time:             Thu 01 Jan 2026 03:22:12 +0000
ROA not before:           Thu 01 Jan 2026 03:22:12 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     151786
IP address blocks:        103.67.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl
                          rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479
        Validity
            Not Before: Jan  1 03:22:12 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6955e864-a3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f6:c6:7f:e6:fd:60:f1:df:97:69:74:72:91:
                    09:6f:e1:29:c8:19:cb:85:f2:3e:37:03:75:8f:54:
                    01:eb:67:0c:d3:52:a3:50:49:c8:7a:f8:f4:52:3d:
                    51:d7:58:88:e0:68:e8:0f:b2:44:44:72:96:a1:8b:
                    64:c6:d9:dc:4c:d4:93:e8:02:2c:a8:47:60:c6:ed:
                    e6:ef:35:67:80:03:9c:89:8d:45:73:4a:31:e6:1b:
                    5a:d6:47:cf:08:b7:09:1f:9b:33:3a:0e:15:91:a4:
                    ba:7a:21:02:f8:c2:e6:e9:9f:ed:f5:5c:b8:75:52:
                    36:ba:7e:99:ba:d5:f1:d6:96:1d:20:d4:b4:f2:57:
                    9b:e5:70:56:d4:f4:20:d3:ff:46:d9:2f:f7:f7:56:
                    8c:c2:30:9c:ae:38:30:e9:0f:2c:f0:6d:50:d2:e7:
                    fa:f7:3a:05:45:21:6b:cb:8f:fa:ed:ef:e8:31:87:
                    6f:c9:bd:9e:c9:47:4a:c2:3a:5d:b5:02:a6:2d:fd:
                    ed:ee:2b:8b:6d:3b:bc:e1:c8:ab:fe:2b:6a:c6:16:
                    d7:9d:a5:8f:3a:d3:d0:ca:d0:21:b9:32:77:19:21:
                    3d:c3:b8:2f:c5:a9:2f:4a:42:a7:d0:26:df:cf:1e:
                    17:35:20:6b:70:cb:d5:8a:37:8c:46:25:b2:05:cf:
                    8e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A7:BA:FF:2C:91:10:0E:AB:B3:2A:BC:8D:2E:B7:2F:43:5A:D0:91
            X509v3 Authority Key Identifier:
                keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/6A0C1182CA9D11F084B0E810C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:32:d5:88:d0:f8:c1:35:2f:81:b0:92:8e:8d:7a:ed:2a:30:
         f9:55:f9:cf:ec:28:78:c6:03:71:79:e3:ce:30:8a:37:c2:99:
         d2:a5:d8:cf:73:6d:55:26:b7:c2:6a:9e:6f:7b:73:55:de:1c:
         f7:0a:50:c7:6e:9f:58:b6:de:67:9e:bc:8d:c5:77:e4:b7:8f:
         b9:2e:81:37:1e:c2:52:20:0a:9b:f7:40:69:76:e0:bd:74:fb:
         84:ba:65:03:b1:ae:f9:4d:40:de:56:ef:d3:9b:5b:d2:c5:98:
         b0:29:77:aa:f9:12:81:7e:27:d7:a7:1e:b2:bd:3f:38:14:48:
         5f:85:39:1f:5b:08:80:b5:93:55:a5:bd:a2:7c:cb:e4:5a:16:
         ac:e7:91:fc:1c:f1:1b:67:07:32:97:64:0f:65:90:29:b4:83:
         01:d3:16:01:d1:08:b4:96:90:b5:a2:3f:5b:fc:8d:92:e4:b7:
         9d:0a:4e:c1:8f:3c:d7:65:74:0d:c0:d6:bf:c4:6b:3b:f3:80:
         6b:c2:28:ae:99:a3:30:51:69:3e:b4:7e:8e:35:d2:5f:ea:c4:
         a4:f9:ec:d2:5b:20:80:c7:11:08:80:1c:ac:7a:34:70:3e:45:
         69:f1:b0:fe:d3:38:d6:7c:af:75:15:5f:f5:48:2e:ee:a2:8b:
         c5:0e:65:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:30 2026 by rpki-client