This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/33EEDAE8E5E711F09BCF2E4C5E6F56BC.roa
File:                     33EEDAE8E5E711F09BCF2E4C5E6F56BC.roa (raw, json)
Hash identifier:          9Org1Yp90cJX1JMdxmBYNLmcErmxdT0s7tIjIepxjhA=
Subject key identifier:   39:31:2B:56:18:09:0F:85:92:FA:A1:4E:5E:B1:77:8D:25:BA:87:9D
Certificate issuer:       /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
Certificate serial:       34F5
Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/33EEDAE8E5E711F09BCF2E4C5E6F56BC.roa
Signing time:             Fri 02 Jan 2026 08:16:27 +0000
ROA not before:           Fri 02 Jan 2026 08:16:27 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     17554
IP address blocks:        203.160.45.0/24 maxlen: 24
                          203.160.46.0/24 maxlen: 24
                          203.160.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl
                          rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13557 (0x34f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A813, serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
        Validity
            Not Before: Jan  2 08:16:27 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69577edb-47fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9c:21:ec:0a:5a:9d:6a:63:74:59:3f:f2:99:
                    83:91:5d:17:ce:21:35:64:f7:a9:ec:28:9c:71:e5:
                    c1:3e:50:e1:70:ee:43:30:6b:92:41:94:cd:98:3f:
                    46:d3:ce:d6:b6:f3:78:33:2c:56:2b:56:55:26:41:
                    91:b3:65:25:b9:1c:e2:21:34:5e:69:88:87:1b:66:
                    85:ad:ef:da:24:43:f4:93:7d:72:40:72:a2:27:c5:
                    e7:d6:c0:a7:62:45:2d:4c:64:48:0a:80:a7:1d:df:
                    b2:dd:b2:e4:f1:3e:b0:08:1e:b4:5c:7b:8d:a6:43:
                    20:8d:f3:ab:68:c7:b9:15:b0:b2:e3:7b:b2:8a:d0:
                    31:00:21:74:cf:dd:f7:04:82:18:93:ba:0e:7c:0f:
                    35:1b:43:e5:b0:23:f9:8a:ed:55:ab:e0:14:2c:6a:
                    22:df:c3:7d:08:60:2b:3b:15:6e:bc:dd:97:e8:f2:
                    3a:f8:b0:36:e2:28:f6:05:07:a6:ef:1b:bf:15:16:
                    cc:2f:ef:d7:4c:d4:78:b4:f7:e9:f6:19:d2:25:9e:
                    f4:ed:7f:1d:de:ce:c9:af:3e:98:61:34:9c:b2:ae:
                    3a:35:c6:4a:83:af:97:ba:87:39:65:12:73:95:6b:
                    3f:8e:3a:95:36:5e:c4:83:be:64:20:f6:75:44:b7:
                    8b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:31:2B:56:18:09:0F:85:92:FA:A1:4E:5E:B1:77:8D:25:BA:87:9D
            X509v3 Authority Key Identifier:
                keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/33EEDAE8E5E711F09BCF2E4C5E6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.160.45.0-203.160.47.255

    Signature Algorithm: sha256WithRSAEncryption
         89:ee:16:7f:9f:48:03:fc:13:94:c4:da:db:43:3c:cd:2b:b4:
         5d:e2:eb:95:ed:b3:11:a4:b6:f8:13:fc:e2:38:19:a8:94:7c:
         84:c5:fd:c3:31:c1:42:ea:dd:b2:d1:19:4a:d6:42:13:00:a1:
         60:a4:44:fb:df:ff:aa:d1:85:c5:8c:a1:1b:3a:44:3b:01:4a:
         af:60:96:d9:08:c8:c7:93:b0:1c:cd:c2:eb:72:05:2d:48:f7:
         25:a9:50:8d:5f:74:08:82:e0:b9:56:57:4d:27:c2:71:b5:f9:
         d4:ca:c8:f9:a2:e6:ba:fc:47:6b:3f:9e:f5:d9:82:ff:7c:e2:
         c0:20:cf:29:89:88:c2:99:ae:03:bc:b1:c5:e7:70:7c:66:f4:
         b1:f8:22:ce:01:95:7f:b8:c5:73:bc:1f:31:91:a3:03:42:7c:
         09:69:67:48:ea:70:53:9d:64:6e:86:eb:53:ce:98:e1:4f:71:
         e7:64:37:74:0e:4e:7b:60:1a:97:46:4d:87:a1:6f:3f:49:36:
         1c:85:06:20:43:5f:3f:3c:54:38:32:4b:ad:e0:39:cc:bf:e3:
         3c:62:85:93:64:f6:ce:91:a5:70:e0:36:2e:a0:1b:d3:87:da:
         ab:91:c6:0f:d7:61:91:53:f8:5d:cf:88:e7:fd:b4:98:03:d8:
         c3:1d:e8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:57:41 2026 by rpki-client