This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/819150603F3411EF85BAC749C4F9AE02.roa
File:                     819150603F3411EF85BAC749C4F9AE02.roa (raw, json)
Hash identifier:          C+O2ANlEUmIIPVx1+2EgMlHonRRh//QmAeYkKbPRWUs=
Subject key identifier:   61:6D:0C:7A:C1:AA:4F:79:A5:CC:06:DC:13:87:E1:A2:A6:E1:B6:69
Certificate issuer:       /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
Certificate serial:       0456
Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/819150603F3411EF85BAC749C4F9AE02.roa
Signing time:             Mon 17 Nov 2025 10:34:15 +0000
ROA not before:           Mon 17 Nov 2025 10:34:14 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     149483
IP address blocks:        103.180.203.0/24 maxlen: 24
                          2001:df0:5f40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl
                          rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1110 (0x456)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
        Validity
            Not Before: Nov 17 10:34:14 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=691afa26-4aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:f0:a3:7c:3f:9f:6b:f6:23:98:47:9d:45:
                    e2:22:44:e3:52:2d:62:65:31:c0:7c:39:d4:12:cb:
                    1b:0f:63:59:ab:2b:50:a8:f7:f3:d2:39:2e:9b:84:
                    e9:b0:10:b2:da:aa:33:b4:b6:1a:b9:b9:52:f8:f5:
                    4a:4d:3c:bd:b4:62:7c:bc:a0:96:9b:c1:cb:d9:6a:
                    75:3e:02:91:c4:a5:fd:19:3e:d9:39:e5:ca:e3:41:
                    0f:a5:82:5c:77:f8:eb:9f:6e:f2:60:d5:4f:ae:01:
                    d9:50:5f:e1:54:2d:3f:c9:33:c1:77:59:9d:83:75:
                    75:60:ba:74:91:14:ad:c8:b3:89:02:61:c2:6c:3e:
                    0f:f5:14:33:78:ae:d1:a6:eb:26:87:3d:04:1b:e6:
                    d3:8f:aa:f4:8c:76:3d:de:c8:d3:03:64:42:b7:f5:
                    9b:19:ed:3d:dd:d5:70:a7:76:24:48:57:83:ea:77:
                    50:ef:72:b4:85:a9:04:f3:08:40:50:2d:df:3e:1e:
                    3f:ec:7f:da:b7:4e:f7:08:de:7a:12:33:4c:82:cd:
                    72:04:56:ce:78:a0:4f:2f:b0:06:f3:e7:87:1e:d9:
                    48:e9:8b:22:1b:ca:83:1b:07:4e:91:2e:bb:a7:d3:
                    a8:2e:0d:07:b2:2a:18:13:d8:ef:81:02:b8:6e:b9:
                    c0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6D:0C:7A:C1:AA:4F:79:A5:CC:06:DC:13:87:E1:A2:A6:E1:B6:69
            X509v3 Authority Key Identifier:
                keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/819150603F3411EF85BAC749C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.203.0/24
                IPv6:
                  2001:df0:5f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:4d:9a:ae:d2:c5:23:9a:a8:ec:a5:28:b6:ce:ca:5d:89:40:
         b2:c1:07:67:a9:bc:99:e3:63:b7:8e:7e:7a:c8:ef:b7:de:1f:
         ba:e7:7b:39:a6:93:36:d0:f1:23:f6:a8:1b:7f:24:0d:94:18:
         c0:7e:4c:86:d8:4e:1d:b9:c3:4a:1a:18:08:15:e6:b6:0e:df:
         3a:be:4a:2c:d7:e9:1d:cf:78:47:a8:cc:4f:29:a8:a0:24:b2:
         cb:23:68:7f:d8:9c:df:1f:07:82:92:06:26:3d:3c:32:da:b1:
         02:a9:6b:fc:5b:14:4a:92:fb:bf:fa:3e:7c:50:ff:38:a0:c1:
         a8:25:5d:65:85:ea:d8:60:df:a5:59:25:e9:36:51:ed:fa:70:
         a0:b9:bc:42:d8:8e:32:34:ff:25:0b:e1:25:ca:38:de:d7:3a:
         c1:d7:d0:41:17:a7:49:a3:53:bf:b7:4a:63:36:a9:48:ba:1a:
         5b:11:ca:3b:51:cc:38:ab:dc:62:68:0a:a1:8d:19:47:f1:ca:
         6c:40:e7:2b:84:a9:7f:5a:e2:9b:b1:0c:1b:50:e4:75:7b:49:
         b8:1e:cc:28:02:36:b3:7d:5d:ef:5f:bb:65:14:3a:23:27:ac:
         37:3e:49:fd:b8:da:ef:b3:cb:67:f5:78:f9:0f:a9:bd:23:08:
         c4:3e:64:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:22:48 2025 by rpki-client