This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/9CB324BA273111EF9F5B0860C4F9AE02.roa
File:                     9CB324BA273111EF9F5B0860C4F9AE02.roa (raw, json)
Hash identifier:          CR7Vm6k10NdfaHEGJBzf3nqkUTJVkVp4uf4oPCLeUeU=
Subject key identifier:   46:E5:4C:25:47:7A:D4:0B:4A:4D:41:0F:AB:93:6F:54:22:08:30:7B
Certificate issuer:       /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Certificate serial:       05BF
Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/9CB324BA273111EF9F5B0860C4F9AE02.roa
Signing time:             Thu 15 Jan 2026 15:15:49 +0000
ROA not before:           Thu 15 Jan 2026 15:15:49 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     142647
IP address blocks:        103.173.6.0/24 maxlen: 24
                          103.173.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
                          rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1471 (0x5bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165362, serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
        Validity
            Not Before: Jan 15 15:15:49 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=696904a5-79cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:28:77:4b:ed:65:7b:56:67:1c:ac:b5:b8:9a:
                    4a:2b:67:46:5e:eb:18:54:2e:7c:b9:2f:7b:f9:ae:
                    da:56:2e:b2:dd:4a:c7:56:76:49:6c:83:15:2f:f2:
                    ae:77:e2:16:02:72:62:33:71:84:ec:ee:08:f3:26:
                    f2:d5:1d:64:ed:13:38:09:ba:d7:b4:b7:e5:a6:62:
                    ea:c2:a1:82:ab:55:cd:75:ba:f7:01:3a:9b:f5:c1:
                    69:78:c5:9b:46:fc:cc:c4:d8:c1:47:b1:4d:11:40:
                    81:99:33:ef:0c:a1:7d:2f:03:42:b4:60:f8:4c:34:
                    0d:83:ba:61:99:9b:99:3a:86:63:00:2e:51:33:89:
                    af:bf:76:8a:cb:70:46:2a:ce:3b:88:73:20:c2:46:
                    a5:23:72:8d:16:7a:b3:7e:53:fa:5e:1e:d2:1d:2d:
                    c5:eb:e8:97:7f:6e:c6:8d:c5:b4:b1:97:6d:e2:71:
                    1d:ea:0d:c0:3e:ee:9c:8f:6a:8a:b3:11:ec:47:47:
                    7f:64:fc:20:84:f4:a6:5f:f9:7e:c9:b7:a8:05:08:
                    1f:e8:3b:41:b7:78:40:92:af:b1:30:39:74:fb:42:
                    bb:58:d7:fc:62:c9:06:82:93:01:c7:64:be:1f:b1:
                    2d:09:c0:73:7d:7d:03:36:60:df:04:7e:8d:b7:91:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E5:4C:25:47:7A:D4:0B:4A:4D:41:0F:AB:93:6F:54:22:08:30:7B
            X509v3 Authority Key Identifier:
                keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/9CB324BA273111EF9F5B0860C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:05:3f:b6:51:bf:1d:af:46:8f:76:ce:e4:34:1e:52:71:a1:
         dd:e2:fc:8b:61:63:b8:6e:76:ab:db:5d:41:7c:5f:72:a0:0c:
         65:4c:04:bc:dc:45:29:78:7b:55:f2:63:7e:ef:48:ca:13:c0:
         99:fe:c6:b2:36:20:ab:f0:97:85:dc:6a:35:8e:bf:17:05:27:
         2f:08:63:1e:5e:3a:1b:ad:a4:50:c6:cf:86:6d:09:a8:1f:ba:
         3a:ba:8b:50:fc:82:1f:cd:71:4c:cc:79:be:c3:a1:24:62:f8:
         b9:1c:95:3b:f1:f6:ce:51:55:10:68:44:6c:70:7a:80:62:76:
         af:70:0e:e6:c0:d2:a3:1a:3c:a3:50:bb:7f:4e:ce:3d:d5:a9:
         ab:81:26:c8:0e:b7:6b:32:a2:08:e1:0c:ca:d1:c4:7f:a3:4a:
         8c:f5:95:17:d2:aa:08:b4:8f:84:a7:92:f3:41:ae:30:a3:d0:
         93:af:20:0f:69:37:b5:db:bf:20:6a:33:7a:d1:48:5d:4e:5a:
         31:af:5c:9f:0a:6a:0a:42:82:9b:e4:a3:af:f1:14:17:40:c4:
         e6:f3:ba:60:a1:00:73:a6:0b:f1:15:fc:81:57:26:3e:ab:cd:
         59:03:60:91:d6:da:07:70:07:31:36:e1:8a:84:da:5d:9a:b1:
         5e:a1:3a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:21 2026 by rpki-client