This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/8B8DEE220F0911E9A8CC815EC4F9AE02.roa
File:                     8B8DEE220F0911E9A8CC815EC4F9AE02.roa (raw, json)
Hash identifier:          0hElKRS+OYHwLDbpoXW5RCxLyCAUkdnjPljGyi58yFw=
Subject key identifier:   F7:59:21:FC:83:23:9D:59:F9:F2:C5:67:7C:D5:FF:7B:C2:11:35:9C
Certificate issuer:       /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7
Certificate serial:       11A1
Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/8B8DEE220F0911E9A8CC815EC4F9AE02.roa
Signing time:             Mon 12 Jan 2026 17:14:41 +0000
ROA not before:           Mon 12 Jan 2026 17:14:41 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138528
IP address blocks:        103.132.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl
                          rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4513 (0x11a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7
        Validity
            Not Before: Jan 12 17:14:41 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69652c01-42cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d3:c5:df:1f:33:73:e3:29:74:ce:e4:d5:88:
                    e5:5c:d2:52:e9:f1:b6:f9:c6:fd:5b:41:78:15:b4:
                    df:90:a4:55:40:e2:31:be:9a:af:eb:bf:ae:73:c4:
                    07:e7:07:7a:45:e5:0e:51:43:89:86:52:9f:b7:bc:
                    0d:5e:fb:81:a8:e7:e8:81:e2:4a:81:ba:24:b1:7a:
                    83:50:d4:7d:6f:73:45:a2:d9:cc:94:29:53:44:eb:
                    84:8d:3f:0b:e6:3e:8b:12:f4:a5:12:8f:cc:78:25:
                    13:0c:a0:57:77:da:40:b3:f1:4b:12:e3:58:de:73:
                    8a:60:ec:e3:62:b6:4f:58:11:7b:b2:49:a6:fe:7f:
                    d0:c1:9f:f2:ab:dd:cd:50:52:86:04:24:d7:76:7b:
                    4d:4a:0a:e5:29:a1:4b:ad:dd:f9:44:93:c2:1e:61:
                    f5:69:c0:c2:7f:73:68:4c:96:da:b8:31:e0:62:1f:
                    15:5f:1e:95:f7:ff:ea:c5:31:3d:a6:19:8c:c9:da:
                    ce:45:6f:a7:1f:fd:2f:70:95:2f:a1:08:04:bf:49:
                    d4:be:21:13:38:3d:89:32:8e:ca:7f:21:91:ae:4b:
                    a3:bc:ce:3f:0f:2e:36:28:e9:e0:88:93:b2:14:30:
                    5d:87:83:f4:1a:75:f5:4e:49:73:e9:50:31:0d:2c:
                    d9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:59:21:FC:83:23:9D:59:F9:F2:C5:67:7C:D5:FF:7B:C2:11:35:9C
            X509v3 Authority Key Identifier:
                keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/8B8DEE220F0911E9A8CC815EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:b6:15:80:72:32:de:67:d1:36:2d:22:d0:97:fc:ea:7a:92:
         66:bb:b2:59:6a:85:41:39:08:b1:9b:be:b6:28:fa:91:e8:77:
         1f:ac:da:35:af:da:ea:a1:ed:ae:a9:06:97:67:73:d3:c3:da:
         d7:f8:24:8b:47:18:bf:26:7f:65:13:95:d7:e5:0e:14:b8:33:
         3f:1f:2d:a7:a1:96:6d:e8:d5:d7:4a:d9:86:1e:e8:91:79:88:
         9f:22:e7:f8:f0:8c:d2:35:f9:d6:a9:d6:91:f6:57:d2:8e:d6:
         c1:e9:d1:a3:7c:29:dc:c9:3f:c4:c2:5a:c6:18:24:ab:c8:1b:
         0c:6a:8e:1d:7e:8a:e3:4c:0e:34:28:95:3d:4b:74:0d:2c:13:
         19:24:1e:25:e4:d2:ca:bc:75:43:27:72:3d:92:9f:fc:4c:d9:
         93:5c:12:7a:8d:4b:d6:5c:b0:71:3c:e0:5d:f6:15:d7:7b:1d:
         47:a9:07:a0:a7:f8:86:4f:da:09:a2:a2:64:b7:8c:c1:57:c0:
         2b:06:4a:20:8c:93:7b:5a:8d:1f:74:b4:70:c4:9b:4d:43:10:
         28:2e:97:ff:26:6a:29:6e:5e:43:33:79:b6:ed:06:7c:94:0b:
         5f:f7:2b:a1:d3:ab:19:08:4a:53:ab:f5:f7:8e:28:3f:e3:56:
         e7:ac:fb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:33 2026 by rpki-client