This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/D59574D2E34511F085C5E9F9726F56BC.roa
File:                     D59574D2E34511F085C5E9F9726F56BC.roa (raw, json)
Hash identifier:          uEdg9lNKFCorHQu1WzXM+G6ebXlVY3hzn4ZhkimJXfw=
Subject key identifier:   65:22:2E:73:08:30:DE:CA:18:6F:79:FD:CF:B5:A2:D7:4E:A9:D4:AC
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3A30
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/D59574D2E34511F085C5E9F9726F56BC.roa
Signing time:             Sat 27 Dec 2025 17:02:32 +0000
ROA not before:           Sat 27 Dec 2025 17:02:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     55414
IP address blocks:        115.186.14.0/23 maxlen: 24
                          115.186.20.0/23 maxlen: 24
                          115.186.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14896 (0x3a30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Dec 27 17:02:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69501128-a7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5d:09:57:e4:86:b2:5b:9b:20:da:a3:11:d4:
                    a5:cc:be:87:a2:a9:fd:85:98:7a:ac:db:4a:ea:ca:
                    14:fb:41:08:b2:c8:64:1e:80:e0:2d:e0:81:dc:7d:
                    12:45:fc:50:11:1d:a4:a2:dd:67:7d:fc:c1:98:67:
                    ad:de:37:f6:19:ba:75:ac:59:39:7f:0e:3e:ef:a0:
                    10:d8:31:8f:a6:7b:e9:0d:3f:a9:04:51:8c:98:d3:
                    01:7c:30:ab:6f:35:23:eb:3b:ff:0d:ad:1b:df:e0:
                    21:fe:74:91:88:ab:63:0b:60:b3:c9:80:e5:f7:e2:
                    e3:2c:ba:e9:4e:e7:27:7f:95:0e:d6:ce:f5:3c:c2:
                    47:a2:41:b6:7d:7c:2c:03:d4:ca:96:42:c3:fc:a0:
                    67:a1:d4:1c:2e:e4:a7:dc:7e:11:8c:92:15:d3:b0:
                    3a:29:4f:e2:89:51:6d:3d:78:ba:e5:77:03:d9:96:
                    f0:9c:1c:dc:b7:23:dc:07:a8:27:35:13:12:36:e6:
                    d2:87:b1:b5:00:31:ca:42:3c:26:ba:4b:f1:c1:8d:
                    e8:3e:5e:09:1a:34:76:c1:47:db:96:16:e9:a0:72:
                    b9:3b:5a:17:d4:c4:1e:d5:6d:4e:cc:0b:37:9b:7b:
                    04:85:bc:db:0f:22:ec:ad:e5:7f:7c:dc:0e:cd:4f:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:22:2E:73:08:30:DE:CA:18:6F:79:FD:CF:B5:A2:D7:4E:A9:D4:AC
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/D59574D2E34511F085C5E9F9726F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.186.14.0/23
                  115.186.20.0/23
                  115.186.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:fd:40:b0:8a:3b:5d:e7:e4:b2:ef:8b:4a:bd:b5:2b:e0:28:
         66:85:70:fc:ca:17:ad:89:fd:08:3d:8a:3f:65:ff:90:fb:e2:
         3b:02:9f:00:45:c5:7f:ad:6b:94:d9:bf:d2:8d:42:d5:c9:db:
         0c:9f:a1:d1:fe:3f:73:32:72:5c:32:36:bf:ee:08:a7:e1:46:
         d0:b2:3f:5d:84:c9:2e:0b:b3:e2:72:31:49:db:8c:03:91:19:
         c4:98:e2:71:0d:8c:a4:c7:0b:26:9d:e1:82:63:7c:7c:38:c1:
         5c:8f:b7:e0:02:fa:70:20:ca:a1:e4:ca:f2:0f:ee:42:9b:9c:
         ea:37:19:9c:88:c3:63:cf:a7:8d:e3:6f:23:a2:8b:52:3b:16:
         fd:fb:1f:85:70:df:9c:5f:76:ac:05:07:09:44:27:75:9c:2c:
         44:7c:9c:54:f3:6c:83:f2:30:dc:4e:b7:89:2e:e4:a6:76:10:
         7a:b5:2a:0f:0b:f6:2a:8f:2d:1a:9a:fb:bf:0a:cb:41:73:f6:
         8f:14:61:85:46:5f:66:e4:3c:fd:67:13:24:60:1f:cc:c6:28:
         31:d5:06:76:f1:ef:bc:50:4e:45:7f:6a:39:16:7b:38:b9:3e:
         7c:43:4e:80:f5:41:13:44:49:fb:57:15:69:bb:b6:48:7b:0c:
         54:42:e0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:24:23 2026 by rpki-client