This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/C17B1042AD7211EFBD28595FC4F9AE02.roa
File:                     C17B1042AD7211EFBD28595FC4F9AE02.roa (raw, json)
Hash identifier:          lOAse4BZ2HRMgeZZ5gGxdCqIuSQzYQ+V8jBNzs7bdNk=
Subject key identifier:   7E:B2:FD:2D:64:FC:0B:29:3C:AE:95:AB:42:E4:77:74:9E:97:40:71
Certificate issuer:       /CN=A915D9C1/serialNumber=A41504E66E3144348625190696E0E88FFB1F5270
Certificate serial:       D4
Authority key identifier: A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/C17B1042AD7211EFBD28595FC4F9AE02.roa
Signing time:             Sat 03 Jan 2026 05:24:12 +0000
ROA not before:           Sat 03 Jan 2026 05:24:12 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     9266
IP address blocks:        203.16.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl
                          rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D9C1, serialNumber=A41504E66E3144348625190696E0E88FFB1F5270
        Validity
            Not Before: Jan  3 05:24:12 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6958a7fc-e945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9c:bd:bd:ea:58:a2:4d:56:2f:be:a3:74:7b:
                    ed:1f:f3:e5:ee:a6:1e:14:a9:10:84:a7:da:92:30:
                    ae:07:cb:7e:97:39:53:d5:36:af:40:b0:89:59:46:
                    00:f5:8c:9b:e5:ae:b0:65:bc:d0:d9:33:f8:e3:31:
                    a1:7a:51:0b:ec:04:bd:ec:05:ab:27:e9:10:44:32:
                    a3:e4:f8:cd:08:68:48:c0:5e:93:61:8d:18:c6:12:
                    38:d0:00:e9:5f:d0:8b:8f:9e:cd:5d:0d:83:c1:e1:
                    d1:52:1a:5a:23:15:f6:e5:db:27:f2:f0:0b:d7:26:
                    ec:a9:ad:6e:da:72:77:d4:20:99:e5:eb:4f:a0:63:
                    47:9a:96:a7:e8:e6:64:86:85:f6:b3:00:06:1e:42:
                    86:18:ed:61:09:28:d7:fc:d0:b1:02:f2:bc:32:d0:
                    ec:87:ee:3c:d8:7e:be:27:60:f5:83:ef:e0:c1:c1:
                    b8:13:c7:c2:2b:9f:3c:bd:d3:2c:09:bf:37:24:de:
                    96:e7:87:ef:41:63:c9:49:fa:a9:9f:ce:c9:d0:fd:
                    51:7d:fd:01:44:be:62:9f:d8:e9:f6:4c:7a:bc:e0:
                    70:f1:1d:d0:3f:d3:06:10:6e:53:4e:bb:1e:25:b2:
                    03:93:cf:d6:c5:27:f3:a1:00:48:3a:bd:6e:89:d7:
                    7a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B2:FD:2D:64:FC:0B:29:3C:AE:95:AB:42:E4:77:74:9E:97:40:71
            X509v3 Authority Key Identifier:
                keyid:A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/C17B1042AD7211EFBD28595FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.16.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:55:ce:78:cf:aa:a1:c6:58:9b:50:80:9f:a3:8c:4a:57:ea:
         75:43:92:4a:56:e7:7f:cd:7a:52:b1:97:3d:1b:e4:b4:ec:56:
         97:8d:f2:69:43:ed:62:35:a6:bd:d2:01:bd:43:59:a6:32:7e:
         a4:1d:db:92:4d:95:0d:02:74:47:09:d5:ae:9f:e3:78:6a:0e:
         a3:bf:7a:61:11:39:41:cc:a5:73:1d:11:79:d7:e0:ec:5a:a2:
         91:c9:f2:72:3e:2e:0e:ee:29:78:fc:f5:9c:80:e8:00:7f:f5:
         64:61:55:cc:8f:a7:83:89:84:c4:6d:e7:17:0e:fd:4e:4d:23:
         85:4d:af:87:d1:4f:f5:02:89:5e:5e:77:8f:eb:e4:eb:63:f7:
         08:57:7b:8c:ea:f6:44:bc:20:d3:ed:74:74:72:9c:de:8b:64:
         87:7f:a0:3d:f7:49:9a:c7:ff:c9:37:23:88:91:38:ea:f3:42:
         e0:83:a5:54:f4:0a:5c:fb:2b:bd:ad:19:ea:09:de:d6:d1:1d:
         3e:69:96:da:f8:80:28:39:8d:b0:e8:11:5e:c3:46:f5:d6:c6:
         5a:7a:15:4b:b0:66:96:18:15:0a:7b:71:22:23:2a:2f:0a:ea:
         d6:62:66:ca:85:f1:c0:3f:11:9b:83:cd:cf:a6:41:c6:05:f4:
         e7:0d:a9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:11:05 2026 by rpki-client