This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/E6182CCEF5EB11F099667DBA4F6F56BC.roa
File:                     E6182CCEF5EB11F099667DBA4F6F56BC.roa (raw, json)
Hash identifier:          /0D2LkB+ox8QggPlvJCpOG4DYd7eVAO16thY4GL/ogs=
Subject key identifier:   06:57:54:7C:C8:5A:37:97:8C:88:7E:01:03:DB:0B:E2:B5:8D:79:86
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       3586
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/E6182CCEF5EB11F099667DBA4F6F56BC.roa
Signing time:             Tue 20 Jan 2026 10:36:37 +0000
ROA not before:           Tue 20 Jan 2026 10:36:37 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.21.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
                          rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13702 (0x3586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
        Validity
            Not Before: Jan 20 10:36:37 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=696f5ab5-818b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:d4:a9:3a:0c:bf:ae:76:ed:67:c2:39:88:
                    66:05:76:65:17:38:ef:9a:0a:0f:4a:33:22:9b:33:
                    d8:dc:c0:0a:42:63:0a:41:6f:0b:cb:67:d7:a2:76:
                    97:5a:78:c7:6f:b5:70:c2:ae:ec:bb:f0:ce:e7:d5:
                    9b:c6:9a:a4:94:a3:b0:55:d7:50:1d:77:fb:2c:fe:
                    19:20:7e:30:db:6b:4f:5a:75:5d:5b:90:bd:7f:56:
                    84:33:04:2e:d3:dc:71:17:8c:9e:6f:5f:6b:dd:dc:
                    1d:39:e5:f6:61:c6:be:f3:9b:1a:41:1c:69:54:c0:
                    3c:ed:7d:c0:5c:2d:f5:99:24:aa:04:33:06:20:94:
                    3d:fe:54:d4:81:60:74:90:df:ce:5f:01:b7:86:70:
                    4d:85:92:8a:e0:de:d6:e3:a6:f5:38:a5:84:e3:06:
                    af:29:34:32:16:a7:5e:57:74:84:52:a9:1c:f4:2e:
                    29:2f:ae:d5:18:4a:71:eb:6f:0c:ed:db:b1:42:88:
                    8f:da:c9:70:fb:5b:35:57:29:df:31:cb:a7:41:6f:
                    96:43:54:05:0e:cf:69:a5:b1:cb:cf:0d:64:2a:18:
                    9d:90:16:b4:f0:15:c7:e1:8f:d2:34:33:1c:0a:c3:
                    db:bd:0b:ad:32:93:f5:96:ad:95:39:8d:5c:a0:9b:
                    b4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:57:54:7C:C8:5A:37:97:8C:88:7E:01:03:DB:0B:E2:B5:8D:79:86
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/E6182CCEF5EB11F099667DBA4F6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:d5:45:2e:17:c1:4d:dd:af:9b:2f:91:4b:07:91:43:06:fb:
         32:07:9d:82:28:67:25:7c:0f:2d:cc:fd:0c:39:6c:a6:cc:49:
         dd:97:bd:2e:7e:4e:e3:04:a5:29:41:31:1f:e3:98:73:19:3a:
         99:1d:bf:0c:8d:2e:7e:22:32:3d:0f:0b:e4:99:02:84:7e:74:
         0b:04:a9:55:15:eb:59:58:6e:16:61:2a:2b:18:21:bf:ba:f5:
         73:30:60:b9:e8:04:ad:9f:b8:f7:ad:1e:8a:55:de:da:8f:42:
         6a:8e:fd:86:21:fe:1d:15:d7:15:f3:d3:de:e1:9e:1f:e5:e5:
         56:77:bf:6a:b4:d6:3a:40:93:a3:e8:b3:c9:95:23:22:13:8a:
         6a:e5:b6:93:c8:ae:eb:43:58:15:8a:78:77:ef:97:12:04:7e:
         d7:f4:72:c2:80:55:ba:4c:4a:4c:3e:f1:9d:fb:54:74:d4:a7:
         57:e6:7d:c8:91:24:2a:0e:44:b8:21:12:9e:37:65:5f:4b:fa:
         21:24:9d:30:1a:c1:86:c8:bc:3d:6c:15:cb:61:8b:6b:17:82:
         2a:d0:37:a6:87:05:73:33:84:b9:17:75:90:ba:2b:63:53:1c:
         61:9c:f9:fd:9b:91:23:56:a1:95:d5:ce:c3:3f:9b:e7:e9:30:
         c2:77:79:3f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJGNzYxMTAvBgNVBAUTKDYzRUM0RTYzODBGQUFFQTUxMTA3RTlDNDBDMkYxMDU4
RTA4Rjg1NkUwHhcNMjYwMTIwMTAzNjM3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZmNWFiNS04MThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvtPUqToMv6527WfCOYhmBXZlFzjvmgoPSjMimzPY3MAKQmMKQW8Ly2fXonaX
WnjHb7Vwwq7su/DO59WbxpqklKOwVddQHXf7LP4ZIH4w22tPWnVdW5C9f1aEMwQu
09xxF4yeb19r3dwdOeX2Yca+85saQRxpVMA87X3AXC31mSSqBDMGIJQ9/lTUgWB0
kN/OXwG3hnBNhZKK4N7W46b1OKWE4wavKTQyFqdeV3SEUqkc9C4pL67VGEpx628M
7duxQoiP2slw+1s1VynfMcunQW+WQ1QFDs9ppbHLzw1kKhidkBa08BXH4Y/SNDMc
CsPbvQutMpP1lq2VOY1coJu0dwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAZXVHzI
WjeXjIh+AQPbC+K1jXmGMB8GA1UdIwQYMBaAFGPsTmOA+q6lEQfpxAwvEFjgj4Vu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY3Ni85NDRFMzg5MjFE
QUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJxVVJCLW5FREM4UVdPQ1Bo
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kteE9ZNEQ2cnFVUkItbkVEQzhRV09DUGhXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUJGNzYvOTQ0RTM4OTIxREFCMTFFMkJCMzBDQUE5MDhCMDJDRDIvRTYxODJDQ0VG
NUVCMTFGMDk5NjY3REJBNEY2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnFYkwDQYJKoZIhvcNAQELBQADggEBAJfVRS4XwU3dr5sv
kUsHkUMG+zIHnYIoZyV8Dy3M/Qw5bKbMSd2XvS5+TuMEpSlBMR/jmHMZOpkdvwyN
Ln4iMj0PC+SZAoR+dAsEqVUV61lYbhZhKisYIb+69XMwYLnoBK2fuPetHopV3tqP
QmqO/YYh/h0V1xXz097hnh/l5VZ3v2q01jpAk6Pos8mVIyITimrltpPIrutDWBWK
eHfvlxIEftf0csKAVbpMSkw+8Z37VHTUp1fmfciRJCoORLghEp43ZV9L+iEknTAa
wYbIvD1sFcthi2sXgirQN6aHBXMzhLkXdZC6K2NTHGGc+f2bkSNWoZXVzsM/m+fp
MMJ3eT8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:15:33 2026 by rpki-client