This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/C4C5449EABD111F0A9879016C4F9AE02.roa
File:                     C4C5449EABD111F0A9879016C4F9AE02.roa (raw, json)
Hash identifier:          tHpW6Fq0voetw0xXCzxHGjycN1RKU58zOFe2Q4666zw=
Subject key identifier:   4D:58:9B:67:1E:D0:F8:1D:A1:6A:AA:4D:1B:A8:45:83:45:9D:A9:E4
Certificate issuer:       /CN=A917928F/serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
Certificate serial:       0118
Authority key identifier: 55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/C4C5449EABD111F0A9879016C4F9AE02.roa
Signing time:             Thu 15 Jan 2026 05:24:07 +0000
ROA not before:           Thu 15 Jan 2026 05:24:07 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     26658
IP address blocks:        103.205.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl
                          rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917928F, serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
        Validity
            Not Before: Jan 15 05:24:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696879f7-c452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ae:09:7b:63:fe:fb:4e:06:fb:cd:45:d9:61:
                    82:12:23:3c:ae:d0:4d:a6:96:57:04:b1:37:ec:b6:
                    cc:3c:f2:b9:32:df:0f:f5:77:b6:fc:48:7a:73:a4:
                    01:99:75:72:db:b5:78:ff:b0:94:31:25:aa:68:bd:
                    28:a5:60:c6:4d:69:2b:1e:b9:bb:cb:ba:47:67:17:
                    52:80:4d:4a:70:9d:f1:f5:1d:10:2c:4b:17:f1:42:
                    f4:7b:0f:9f:bb:7e:a1:c4:fb:f8:9f:2a:f2:22:31:
                    31:71:31:62:4c:3a:39:83:5e:03:9f:a6:a3:b7:74:
                    80:c7:28:b1:6a:0d:38:c5:c3:81:4b:7c:62:d1:4f:
                    53:c0:4b:e5:4c:50:aa:20:0f:06:09:e6:db:d0:3f:
                    8c:36:7d:06:cc:d0:dc:23:ed:a8:fb:2b:ff:e3:d1:
                    7f:d4:ab:d1:1d:95:e8:db:c8:8c:b1:93:ae:9e:5c:
                    91:f8:55:0c:39:20:a9:11:b4:1c:a6:6f:99:34:cf:
                    2e:9e:b8:23:68:db:b8:c7:b2:12:75:38:52:c1:a8:
                    ef:94:37:54:9a:64:ac:2f:ad:d3:33:11:64:7a:ff:
                    8f:df:e9:7d:8f:62:c0:4a:7f:a5:34:ee:e1:fc:5c:
                    1d:06:dc:37:9e:60:1d:98:e8:fb:77:82:20:1f:bf:
                    53:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:58:9B:67:1E:D0:F8:1D:A1:6A:AA:4D:1B:A8:45:83:45:9D:A9:E4
            X509v3 Authority Key Identifier:
                keyid:55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/C4C5449EABD111F0A9879016C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:e0:1b:77:86:6e:9e:4b:36:40:26:66:b0:0e:b6:18:d9:3a:
         b3:9b:87:61:ac:b6:f8:de:c8:46:01:be:a9:ef:20:89:c4:c0:
         16:e9:25:12:9c:3c:16:ff:8a:3c:ec:4e:dc:c4:da:df:7b:22:
         d5:88:1b:3e:31:63:8b:1e:53:d1:f0:3a:30:0a:65:d7:11:6c:
         f9:83:69:fb:fb:33:a9:57:59:b0:93:3b:38:a5:10:cb:d2:c1:
         14:55:cf:b2:d0:95:af:09:5f:4c:bf:a0:1f:00:48:8b:7f:a8:
         9d:e5:57:0d:6b:3b:05:c8:e4:29:5e:d1:dd:d8:cd:03:a3:53:
         80:1c:82:ee:49:9c:a7:4a:c3:15:e1:83:20:b4:f8:05:5b:0e:
         e2:e1:aa:ca:8f:0d:f1:db:85:91:04:6a:0b:73:d1:55:69:df:
         c9:8e:cb:4c:71:3c:cd:47:27:4e:29:9a:ce:d0:9a:ff:ae:36:
         22:cc:25:0a:36:a8:1d:95:58:e4:1a:61:b3:47:4d:d0:2d:98:
         8e:c8:31:47:6a:f2:aa:ed:53:c2:3c:d5:b2:e1:d9:d6:1a:33:
         45:46:6e:eb:52:bf:69:b9:b6:9f:e1:a5:c7:94:de:b0:65:28:
         3e:a5:c1:f5:f4:9a:2e:32:5c:93:6c:bd:f4:99:1f:9e:ea:57:
         22:3a:10:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:56:58 2026 by rpki-client