This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/900B7AF4EBA311F0BD47A0725D6F56BC.roa
File:                     900B7AF4EBA311F0BD47A0725D6F56BC.roa (raw, json)
Hash identifier:          EOrcZ9WVmh0VhpWFJWsgVaDn0D0AgK7t1HZ2gFjU5JU=
Subject key identifier:   FA:32:DA:77:9C:5D:ED:5F:A0:2A:D5:88:6E:6C:C2:6C:B5:50:9B:5B
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3A44
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/900B7AF4EBA311F0BD47A0725D6F56BC.roa
Signing time:             Wed 07 Jan 2026 08:33:38 +0000
ROA not before:           Wed 07 Jan 2026 08:33:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     140210
IP address blocks:        115.186.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14916 (0x3a44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Jan  7 08:33:38 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=695e1a62-99a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f6:bb:eb:aa:6a:99:3c:40:3a:67:e4:06:c6:
                    e7:df:50:c7:1e:02:9f:60:96:bb:a6:b8:b2:9b:09:
                    8b:4e:11:3a:3d:94:27:17:03:8d:4e:56:19:dc:48:
                    25:5c:ac:17:b8:82:bf:6c:5f:33:04:03:89:eb:1d:
                    bf:39:7f:9a:cd:4a:4f:29:d8:f6:c7:02:0a:9e:53:
                    a3:4a:a0:e2:ca:72:ef:a9:5f:05:d7:f6:82:d3:80:
                    ab:15:48:e0:16:ed:d7:f6:54:2d:ee:d5:ce:bb:2a:
                    f7:47:c0:2e:c5:7c:e4:e3:1b:8e:a0:5c:bb:30:db:
                    9d:07:5c:cb:39:a9:72:f1:4b:48:e4:ee:ba:55:cf:
                    3f:bb:94:2f:fe:c3:11:9e:51:8d:a2:0d:72:7f:33:
                    86:1c:2a:9a:5a:ad:bc:ae:83:c8:92:85:dc:67:eb:
                    66:6b:3a:c5:fc:0a:50:16:17:f1:46:32:5c:86:a3:
                    ef:f6:bc:b4:68:24:d4:fa:57:fc:65:36:42:7a:e0:
                    d6:57:c5:76:3c:66:a1:ee:96:cf:51:a6:89:3d:13:
                    fb:f3:82:6a:cf:4d:37:97:b9:7b:7b:b0:33:9c:69:
                    b8:f4:6e:29:af:f8:70:07:82:4b:17:19:6a:4d:f4:
                    0c:20:54:de:c2:16:d3:63:21:d2:e0:ed:ab:a3:8c:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:32:DA:77:9C:5D:ED:5F:A0:2A:D5:88:6E:6C:C2:6C:B5:50:9B:5B
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/900B7AF4EBA311F0BD47A0725D6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.186.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:70:3a:8d:fe:b7:59:73:a3:d0:f8:67:45:f0:80:48:6b:f6:
         d9:9e:bb:e8:f0:0c:d8:9c:9c:78:a4:a3:72:32:3c:ee:1b:eb:
         1f:f1:d4:5f:40:c2:ff:3d:e5:80:a1:e8:90:cc:b6:1d:14:5c:
         fe:3a:59:40:4b:e5:0c:9b:17:58:12:c0:4f:99:39:7a:e7:d6:
         09:d5:36:eb:c4:eb:a2:7d:32:29:6a:58:cc:c0:9a:c3:ef:6f:
         9e:b2:36:f5:28:47:b6:a3:58:c4:cb:4b:1e:6f:00:9c:1b:4d:
         ca:23:f0:cf:09:18:68:d4:91:80:c3:c8:44:f6:e6:91:09:db:
         7e:eb:a7:93:74:39:14:bb:46:a2:e8:a0:be:af:bc:aa:c2:8e:
         b6:ef:10:cd:8b:ce:09:b9:67:aa:4d:3e:67:02:87:f9:f3:be:
         e3:71:25:1d:61:f0:ca:74:5b:7f:f8:46:1d:0d:b8:36:2e:ee:
         1e:c2:d5:c0:16:0b:cf:c0:80:e5:66:6c:e0:10:cc:5f:5b:64:
         20:1c:aa:f6:d8:3f:3d:5f:37:dc:a7:e3:dc:a7:89:46:d3:02:
         a6:f4:23:e7:7e:e8:bc:95:62:c0:74:d8:0c:48:f9:3b:74:5f:
         5c:d9:d4:10:14:0f:b9:24:f4:ae:20:9c:4b:4b:af:f4:77:96:
         c7:df:3a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:23:50 2026 by rpki-client