This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/CC389424E71D11F0959F3B7B706F56BC.roa
File:                     CC389424E71D11F0959F3B7B706F56BC.roa (raw, json)
Hash identifier:          XrkvDZl305JjEZHdxRpAIZsUCABh+4O4F2uA7YcPSEo=
Subject key identifier:   02:80:27:79:75:E6:BE:E8:BA:F3:E7:70:04:27:0B:D8:86:FC:44:49
Certificate issuer:       /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
Certificate serial:       0193
Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/CC389424E71D11F0959F3B7B706F56BC.roa
Signing time:             Thu 01 Jan 2026 14:26:01 +0000
ROA not before:           Thu 01 Jan 2026 14:26:01 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136030
IP address blocks:        103.101.232.0/24 maxlen: 24
                          103.165.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl
                          rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
        Validity
            Not Before: Jan  1 14:26:01 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=695683f9-4743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:b4:d9:c7:b9:fa:5e:fa:2b:81:78:96:13:
                    12:f3:15:df:7e:a9:4c:21:e3:5d:ac:0f:b7:7e:79:
                    d1:2c:a5:b0:28:03:a0:42:ac:36:ce:5c:4d:80:76:
                    6a:e9:79:89:25:c2:df:a3:00:a3:8c:aa:94:89:00:
                    25:30:7c:3f:f4:46:3d:24:90:cc:b9:3a:b7:d6:c5:
                    b6:0a:9e:ea:74:5a:a7:3b:6c:86:28:e5:d5:86:8e:
                    92:0a:a7:2e:11:ff:83:20:37:67:4b:43:bd:04:04:
                    c7:f2:15:ed:05:e9:a1:50:d0:62:6b:ae:ca:df:e0:
                    08:47:9c:a7:44:57:4b:8e:29:3d:24:bf:ad:90:60:
                    c5:0c:fb:4b:bf:a8:6c:3c:57:38:c3:2d:22:38:45:
                    5d:0c:25:98:86:8d:f7:be:45:e3:1f:23:ec:e1:38:
                    ba:85:94:ce:e2:fe:dd:5b:be:93:07:1d:2a:ef:aa:
                    c6:66:bc:aa:4d:21:b2:50:d6:4d:ad:53:bd:85:14:
                    3e:6c:dd:49:2b:b1:e3:0d:30:8d:c4:84:49:11:7a:
                    fa:a7:ef:40:c4:49:71:b5:f3:cb:e0:e1:42:63:8f:
                    67:07:aa:24:e0:7e:8c:9c:b3:08:49:b2:12:ff:21:
                    aa:34:cd:6d:7b:88:d5:5f:ba:bf:63:f9:a3:50:d5:
                    21:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:80:27:79:75:E6:BE:E8:BA:F3:E7:70:04:27:0B:D8:86:FC:44:49
            X509v3 Authority Key Identifier:
                keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/CC389424E71D11F0959F3B7B706F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.232.0/24
                  103.165.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:e6:b1:1d:35:d7:1b:2f:0d:0f:d4:31:7a:4d:1a:6b:41:b7:
         cb:b2:0c:6b:35:73:22:41:a8:19:65:68:5d:04:08:9b:e9:4a:
         ed:8a:43:93:c9:22:c4:57:ff:98:6b:4e:aa:d0:67:33:5b:f9:
         0e:17:ac:6a:15:7d:9e:58:97:35:b8:55:d7:a9:e8:af:5e:85:
         7f:4a:39:e0:19:97:7d:b6:3c:05:16:e2:a3:a5:7a:ae:5a:99:
         6a:74:ad:91:e2:94:ab:0a:7a:3d:cb:46:14:39:d3:a3:7f:de:
         1b:9a:3d:53:e5:8b:18:71:b7:af:23:29:c5:c3:bf:93:f7:05:
         18:f9:92:f5:80:be:40:61:8a:36:8f:d0:d5:a9:5f:87:dd:31:
         1b:0c:85:c1:70:aa:07:25:fe:c8:2c:de:8d:7f:e9:8f:8e:70:
         4b:7f:e0:2a:67:cf:ad:40:b3:80:95:4b:e0:5a:97:a3:81:de:
         ea:c8:59:d2:31:d0:7a:13:94:1a:6d:8e:89:46:c1:51:6f:f0:
         21:ba:c3:42:ce:14:0a:ea:a5:7c:4e:c3:46:8c:12:14:54:14:
         21:da:7d:e5:b8:05:55:f1:39:6e:3e:24:d6:90:ad:cb:de:61:
         ca:f8:32:13:22:e8:1a:cd:74:64:13:77:86:79:69:08:9f:2b:
         83:07:9b:5f
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0FDQTgxMTAvBgNVBAUTKENFNjM3MDk5N0RCRDEzRDIwRTVFQzYxNjVCNUE5RUUz
QTI4MkE2QjAwHhcNMjYwMTAxMTQyNjAxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU2ODNmOS00NzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvzW02ce5+l76K4F4lhMS8xXffqlMIeNdrA+3fnnRLKWwKAOgQqw2zlxNgHZq
6XmJJcLfowCjjKqUiQAlMHw/9EY9JJDMuTq31sW2Cp7qdFqnO2yGKOXVho6SCqcu
Ef+DIDdnS0O9BATH8hXtBemhUNBia67K3+AIR5ynRFdLjik9JL+tkGDFDPtLv6hs
PFc4wy0iOEVdDCWYho33vkXjHyPs4Ti6hZTO4v7dW76TBx0q76rGZryqTSGyUNZN
rVO9hRQ+bN1JK7HjDTCNxIRJEXr6p+9AxElxtfPL4OFCY49nB6ok4H6MnLMISbIS
/yGqNM1te4jVX7q/Y/mjUNUhhQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAKAJ3l1
5r7ouvPncAQnC9iG/ERJMB8GA1UdIwQYMBaAFM5jcJl9vRPSDl7GFltanuOigqaw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNBOC9GOTcxNEFFNkFB
RkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5SU9Yc1lXVzFxZTQ2S0Nw
ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ptTndtWDI5RTlJT1hzWVdXMXFlNDZLQ3ByQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0FDQTgvRjk3MTRBRTZBQUZBMTFFRUEyMjFFNzJFQzRGOUFFMDIvQ0MzODk0MjRF
NzFEMTFGMDk1OUYzQjdCNzA2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnZegDBABnpbAwDQYJKoZIhvcNAQELBQADggEBAEXmsR01
1xsvDQ/UMXpNGmtBt8uyDGs1cyJBqBllaF0ECJvpSu2KQ5PJIsRX/5hrTqrQZzNb
+Q4XrGoVfZ5YlzW4Vdep6K9ehX9KOeAZl322PAUW4qOleq5amWp0rZHilKsKej3L
RhQ506N/3huaPVPlixhxt68jKcXDv5P3BRj5kvWAvkBhijaP0NWpX4fdMRsMhcFw
qgcl/sgs3o1/6Y+OcEt/4Cpnz61As4CVS+Bal6OB3urIWdIx0HoTlBptjolGwVFv
8CG6w0LOFArqpXxOw0aMEhRUFCHafeW4BVXxOW4+JNaQrcveYcr4MhMi6BrNdGQT
d4Z5aQifK4MHm18=
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:36:40 2026 by rpki-client