This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E88EE726E93611EF9E3FF729C4F9AE02.roa
File:                     E88EE726E93611EF9E3FF729C4F9AE02.roa (raw, json)
Hash identifier:          N+eEbYkVD1rQLJftLU9dJg7J3BbreENHu+CqmvU/UaM=
Subject key identifier:   EC:07:1B:2F:77:02:49:9E:48:33:4F:FF:04:E8:5E:48:7C:0E:8D:A4
Certificate issuer:       /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial:       06AC
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E88EE726E93611EF9E3FF729C4F9AE02.roa
Signing time:             Tue 30 Dec 2025 22:18:41 +0000
ROA not before:           Tue 30 Dec 2025 22:18:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138453
IP address blocks:        103.79.17.0/24 maxlen: 24
                          122.50.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
                          rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708 (0x6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
        Validity
            Not Before: Dec 30 22:18:40 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69544fc0-663f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:09:fb:0b:37:b3:de:47:da:20:73:99:0c:d5:
                    60:84:d5:27:c3:52:b3:b8:33:52:9e:1e:1c:a9:25:
                    53:63:68:15:1b:17:ef:04:2e:b7:34:06:83:f3:2e:
                    39:93:86:1c:d9:b8:92:1e:59:63:f3:27:8a:5f:4f:
                    49:8f:61:34:08:4b:71:04:f3:36:32:cf:93:66:74:
                    a3:4f:18:83:09:de:34:d6:5c:bf:6f:cc:51:1f:a8:
                    f3:3b:b9:38:e2:dc:90:27:86:d5:3f:43:89:5c:ae:
                    fb:16:18:68:45:37:18:f1:3f:79:02:90:7f:c4:ae:
                    89:af:d3:81:8d:e4:f0:a3:87:ff:8a:2b:62:e0:92:
                    ef:35:33:ff:a8:68:9e:59:68:19:2f:d9:62:18:c5:
                    b5:05:ad:14:93:dc:ae:f8:40:a8:7b:b2:32:e6:36:
                    26:1f:50:74:62:bc:25:f9:37:98:49:40:ea:82:f6:
                    2f:04:b2:e1:48:77:bf:62:ce:1e:be:ad:d5:ed:8a:
                    39:7a:77:f4:99:d1:42:ba:f9:a5:9f:4b:a3:60:fa:
                    d9:17:59:0a:21:ae:6c:50:fa:1d:34:0c:c5:5f:77:
                    e6:19:2e:c7:ce:93:06:c6:32:61:f3:d6:e7:86:29:
                    48:07:c9:2e:16:59:bd:c3:7d:8c:cc:08:56:bd:11:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:07:1B:2F:77:02:49:9E:48:33:4F:FF:04:E8:5E:48:7C:0E:8D:A4
            X509v3 Authority Key Identifier:
                keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E88EE726E93611EF9E3FF729C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.17.0/24
                  122.50.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:35:53:c5:b2:bc:59:95:1c:e3:c4:ca:64:59:96:c3:5c:a6:
         22:88:de:d8:7e:e5:6c:91:57:1e:fb:0a:34:95:21:d7:b2:a4:
         83:fa:b5:6f:73:86:a6:c7:16:15:07:aa:b7:3c:7c:28:fb:fd:
         9e:64:6d:4e:ba:26:7c:39:37:7e:c2:86:b1:47:8e:7b:2a:e1:
         a2:da:33:74:16:8d:21:ef:db:df:6a:28:a8:5c:3a:a7:07:75:
         05:ae:a0:31:75:d7:85:87:ff:ed:56:a7:16:00:ac:52:44:ff:
         d5:b9:59:78:52:8c:56:f8:72:ec:37:83:8b:d3:a4:0b:37:90:
         88:8b:a1:2c:e9:0a:b9:17:72:5c:19:c1:15:fb:f3:d1:bc:2b:
         4c:8f:23:1b:1e:3c:03:4a:ff:09:82:cf:fe:d1:b0:62:b3:4b:
         61:c3:63:b0:86:96:be:f0:87:ad:a6:fd:97:ba:48:d1:e7:11:
         98:97:1c:bd:51:3a:42:ec:d5:1c:28:46:4b:41:4a:81:22:ef:
         d5:49:46:5f:c3:38:11:5d:cc:4f:82:8a:eb:35:53:14:22:6c:
         66:a0:ba:61:16:3d:2f:98:10:3e:f9:5b:92:00:1f:99:31:e0:
         61:bf:0c:aa:fe:22:f0:59:a3:81:7b:22:53:e4:91:e1:ba:f3:
         28:ab:7f:ac
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC
NTc3MzQ1NkIwHhcNMjUxMjMwMjIxODQwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU0NGZjMC02NjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjQn7Czez3kfaIHOZDNVghNUnw1KzuDNSnh4cqSVTY2gVGxfvBC63NAaD8y45
k4Yc2biSHllj8yeKX09Jj2E0CEtxBPM2Ms+TZnSjTxiDCd401ly/b8xRH6jzO7k4
4tyQJ4bVP0OJXK77FhhoRTcY8T95ApB/xK6Jr9OBjeTwo4f/iiti4JLvNTP/qGie
WWgZL9liGMW1Ba0Uk9yu+ECoe7Iy5jYmH1B0Yrwl+TeYSUDqgvYvBLLhSHe/Ys4e
vq3V7Yo5enf0mdFCuvmln0ujYPrZF1kKIa5sUPodNAzFX3fmGS7HzpMGxjJh89bn
hilIB8kuFlm9w32MzAhWvRGBbQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOwHGy93
AkmeSDNP/wToXkh8Do2kMB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4
RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQ4RDkvNTQ4M0JGQjZDOEZCMTFFQkJBNUJBRTUxQzRGOUFFMDIvRTg4RUU3MjZF
OTM2MTFFRjlFM0ZGNzI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnTxEDBAB6MgMwDQYJKoZIhvcNAQELBQADggEBAEI1U8Wy
vFmVHOPEymRZlsNcpiKI3th+5WyRVx77CjSVIdeypIP6tW9zhqbHFhUHqrc8fCj7
/Z5kbU66Jnw5N37ChrFHjnsq4aLaM3QWjSHv299qKKhcOqcHdQWuoDF114WH/+1W
pxYArFJE/9W5WXhSjFb4cuw3g4vTpAs3kIiLoSzpCrkXclwZwRX789G8K0yPIxse
PANK/wmCz/7RsGKzS2HDY7CGlr7wh62m/Ze6SNHnEZiXHL1ROkLs1RwoRktBSoEi
79VJRl/DOBFdzE+Cius1UxQibGagumEWPS+YED75W5IAH5kx4GG/DKr+IvBZo4F7
IlPkkeG68yirf6w=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:12 2026 by rpki-client