This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/FD10505CC75011EFBA3D195BC4F9AE02.roa
File:                     FD10505CC75011EFBA3D195BC4F9AE02.roa (raw, json)
Hash identifier:          RFXFLbfPMswavWrUDead3dZJrNbmMrDVn5BBss+224o=
Subject key identifier:   91:8A:53:74:20:45:E4:0D:8C:C8:F8:E4:85:C5:A6:6B:A7:47:D1:5B
Certificate issuer:       /CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Certificate serial:       0853
Authority key identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/FD10505CC75011EFBA3D195BC4F9AE02.roa
Signing time:             Sat 10 Jan 2026 20:17:16 +0000
ROA not before:           Sat 10 Jan 2026 20:17:16 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     55933
IP address blocks:        103.145.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl
                          rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2131 (0x853)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179EE2, serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
        Validity
            Not Before: Jan 10 20:17:16 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6962b3cc-7409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:78:89:62:10:4f:55:9d:9c:99:d5:bb:26:
                    cc:9b:d4:20:bb:05:8c:81:ec:af:ed:ff:4f:d1:13:
                    e7:49:e6:7a:30:55:f6:ff:cd:bc:55:7d:3b:f2:aa:
                    49:56:96:8c:49:70:e5:89:9e:25:c2:e5:93:65:e0:
                    80:de:4d:3d:e2:e5:1f:e9:c0:9c:a1:df:a5:8a:df:
                    52:e3:9f:a5:ec:be:6c:e4:1a:31:61:a0:b0:03:30:
                    b0:bc:18:cf:e4:c7:13:6f:f7:36:a7:ca:d5:6c:1a:
                    ab:34:70:d3:d1:f3:7b:23:a3:c5:bb:e0:a7:e8:56:
                    13:27:6c:1e:8c:ef:b7:ed:42:8c:b2:24:3e:d7:90:
                    f5:6e:62:f8:01:5c:36:20:61:3d:85:2c:53:2f:56:
                    00:fc:70:2c:cb:8a:a2:bd:76:91:c1:98:0a:7f:d1:
                    98:00:de:53:2f:f2:df:2e:f3:34:2a:98:af:0a:f6:
                    5e:2d:f9:00:c0:7b:53:80:8b:a2:71:bd:3e:19:e0:
                    1e:08:13:b8:3b:63:f2:c3:31:fb:a9:2a:a2:04:61:
                    4c:7d:ce:30:2a:31:63:a3:dd:3e:eb:d6:3b:2c:18:
                    ba:86:c8:e8:1b:85:48:02:1e:21:9e:17:b7:01:44:
                    51:f3:48:4e:5c:9c:c1:9b:21:47:45:76:f3:92:21:
                    d1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8A:53:74:20:45:E4:0D:8C:C8:F8:E4:85:C5:A6:6B:A7:47:D1:5B
            X509v3 Authority Key Identifier:
                keyid:82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/FD10505CC75011EFBA3D195BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:96:24:3f:87:46:a5:a3:11:67:fe:aa:6e:04:4d:b6:a8:5e:
         a3:0b:2c:23:0c:17:04:c9:f2:20:77:ab:8d:ce:eb:75:a2:eb:
         e6:68:8f:33:63:a6:47:67:9e:47:20:7f:2f:fa:04:a6:e5:90:
         9c:6d:53:f3:3a:85:cb:aa:bc:36:01:71:90:e7:86:a2:34:47:
         8a:22:13:95:2a:4a:f4:c0:ec:b9:72:0d:95:d1:b1:33:c3:c3:
         f8:86:50:25:bc:17:f3:84:00:78:ef:aa:e6:96:d9:d9:e0:e5:
         46:ab:54:82:7b:27:2f:88:c5:09:e3:ae:06:70:de:3f:d5:45:
         ea:8f:73:70:57:94:c4:7d:92:b3:b0:70:4e:ee:7c:16:fa:7b:
         e1:af:ca:8b:a6:76:21:dd:6c:25:eb:e1:b6:ca:25:a1:0c:af:
         30:f7:3c:d7:eb:c1:a5:96:3c:22:dc:10:da:c8:73:8d:9b:cf:
         e2:e1:be:a7:22:8c:06:9c:d0:c7:23:54:51:4f:32:71:3a:0f:
         c1:f5:32:7a:05:37:5e:de:21:d3:3a:48:f7:61:83:05:98:2f:
         bc:2b:43:ea:bd:78:1e:e0:5f:ad:bc:20:d7:7a:a7:a1:6b:b0:
         2f:99:9b:b2:84:ac:ae:12:a8:9f:d8:82:76:25:91:7f:75:d6:
         8e:bf:01:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:35 2026 by rpki-client