This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/CD4CD0B654F311E7AC64ED3AC4F9AE02.roa
File:                     CD4CD0B654F311E7AC64ED3AC4F9AE02.roa (raw, json)
Hash identifier:          TafyutgqP+GGvKm/3RnLbcj/ds8Cr1TZJZmtDv46de0=
Subject key identifier:   7C:B1:CD:B2:EC:1D:5A:DC:1D:34:6E:79:1D:6D:1C:EF:DE:3D:58:F9
Certificate issuer:       /CN=A915E005/serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
Certificate serial:       227C
Authority key identifier: E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/CD4CD0B654F311E7AC64ED3AC4F9AE02.roa
Signing time:             Tue 20 Jan 2026 16:13:14 +0000
ROA not before:           Tue 20 Jan 2026 16:13:14 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     133923
IP address blocks:        103.48.88.0/24 maxlen: 24
                          103.212.64.0/23 maxlen: 24
                          2001:df2:1400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl
                          rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8828 (0x227c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E005, serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
        Validity
            Not Before: Jan 20 16:13:14 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696fa99a-a85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:d5:37:89:61:06:d1:dd:fc:12:5e:9f:14:
                    5f:ea:b6:a3:94:e4:ed:b4:17:0c:d4:62:6d:c2:8c:
                    37:8a:98:57:af:32:c6:53:c7:a5:30:4e:d1:a4:b9:
                    29:f3:ff:d1:dc:61:0d:38:96:de:f5:e8:d2:a7:b6:
                    8f:b0:4b:b1:18:5d:92:b4:5e:f3:d8:bf:9e:1b:8e:
                    60:d2:72:c3:c5:2f:29:58:5b:ea:b8:0d:2a:1d:19:
                    34:45:89:98:05:b1:ef:19:45:02:77:78:db:db:b5:
                    6e:1e:90:27:da:92:e1:1f:32:fd:b9:1b:e2:2d:5e:
                    c7:b1:8a:f2:ac:ae:4a:fe:6f:09:ac:bc:a9:8b:28:
                    67:21:ae:09:61:d3:cf:24:14:c5:63:dd:61:14:94:
                    3c:ce:cd:84:e5:bb:da:3e:5e:fa:61:81:b5:f3:06:
                    2c:7b:68:57:2b:74:f3:eb:2b:be:e3:bf:77:46:0e:
                    14:cd:44:c3:ce:ed:fe:2d:a8:60:c9:57:db:10:db:
                    e2:43:6a:69:44:2b:38:f9:7f:be:fc:bc:39:4b:7f:
                    98:f4:fe:ea:39:65:c4:a7:f3:e8:4c:f1:d2:d8:31:
                    f4:f9:e9:3e:f5:ac:5b:ab:ea:ba:54:59:37:b8:2e:
                    f6:32:53:d0:6a:5a:13:61:c0:8a:b3:b6:9d:8a:f4:
                    2b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B1:CD:B2:EC:1D:5A:DC:1D:34:6E:79:1D:6D:1C:EF:DE:3D:58:F9
            X509v3 Authority Key Identifier:
                keyid:E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/CD4CD0B654F311E7AC64ED3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.88.0/24
                  103.212.64.0/23
                IPv6:
                  2001:df2:1400::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:80:51:48:96:51:3b:25:cb:59:1b:f2:48:77:a1:49:f7:1e:
         11:af:c2:c8:d0:e4:b2:20:d2:a9:86:a1:2a:42:b1:48:ca:df:
         1b:e5:a9:2d:90:c0:4c:51:b2:cd:fa:ff:d6:0d:dc:03:32:74:
         dd:fd:bd:e1:57:bf:5f:80:81:5a:27:57:56:e5:90:c9:f6:cf:
         6c:d7:a9:c2:1f:d6:19:24:c8:dd:f6:bd:25:7a:6c:2c:29:41:
         47:cd:48:df:43:f7:02:fb:87:ab:72:b1:a4:b7:ec:6e:7e:09:
         13:9d:55:3e:db:c3:e0:53:ff:44:6d:7a:16:7d:71:e6:d4:47:
         bb:5f:82:81:10:a4:7e:41:f8:08:4f:c0:21:4d:20:26:46:7e:
         b2:2f:49:a4:19:74:a1:c5:ec:31:67:27:de:56:45:4a:62:d7:
         82:5b:16:68:04:99:f2:d9:2f:95:b9:d3:70:c3:99:46:c3:93:
         60:2e:0e:0c:e5:76:f1:5e:08:48:77:a3:20:60:27:b0:62:f8:
         14:b8:87:b9:94:80:c9:62:34:f3:35:f1:b2:b3:07:55:a5:14:
         54:de:0d:5b:4a:67:e8:93:d5:80:d6:13:8b:fe:92:f0:0d:48:
         5a:da:8d:9c:d8:64:99:a0:ab:d9:8d:6e:82:2f:7a:d2:4b:50:
         2c:09:5b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:52:06 2026 by rpki-client