This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/9816AE202ED111EF9B668069C4F9AE02.roa
File:                     9816AE202ED111EF9B668069C4F9AE02.roa (raw, json)
Hash identifier:          zcjpB7SNQhX4uL0jUZdktER4HaLwxs/1W9rKXnVNSZA=
Subject key identifier:   92:64:61:36:DD:90:97:6D:2D:03:A1:96:D0:83:D4:81:5A:4A:BD:01
Certificate issuer:       /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Certificate serial:       0217
Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/9816AE202ED111EF9B668069C4F9AE02.roa
Signing time:             Sat 27 Dec 2025 02:22:16 +0000
ROA not before:           Sat 27 Dec 2025 02:22:16 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     207083
IP address blocks:        103.219.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
                          rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
        Validity
            Not Before: Dec 27 02:22:16 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=694f42d8-bae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:a5:5c:48:2e:24:23:a3:88:a3:f1:5b:80:
                    a7:d8:fc:e0:f9:bf:b6:21:cc:63:be:41:17:d9:fa:
                    5e:98:6e:16:ea:98:fc:65:9f:38:ff:d1:da:65:8d:
                    71:14:19:c8:8b:a1:01:fc:42:36:2d:cf:a8:a9:6e:
                    d1:ad:0c:ca:fb:b7:27:30:30:fe:b6:23:f2:98:9d:
                    79:18:22:d2:2d:8a:27:7b:0d:57:ee:f6:df:d7:bf:
                    fd:f7:90:16:a5:0e:39:5f:77:b1:f9:43:a0:4d:59:
                    48:ed:13:65:8e:82:96:9b:e1:f0:9c:f3:6f:63:4d:
                    43:f3:fb:2e:13:d1:6e:5a:92:1d:19:91:ca:3f:fa:
                    6a:0f:9f:3a:08:a6:70:96:a0:ae:30:55:4b:3f:e0:
                    ce:a2:be:41:02:d3:cf:85:fd:54:22:4a:27:0c:92:
                    35:3a:6a:52:32:77:60:3f:d7:f6:8b:6a:8c:e9:85:
                    bd:5b:6f:89:06:ff:5a:98:c9:2c:5d:d8:70:e5:12:
                    89:eb:12:c9:70:22:90:c9:05:06:11:e8:1d:fa:63:
                    cb:90:62:03:90:d7:fe:f8:81:15:cd:31:4f:a4:fa:
                    90:36:49:c2:d8:fc:7e:ad:69:a8:71:75:f1:52:cc:
                    9d:12:cd:c5:b1:8b:28:3b:c2:fe:96:c0:42:7e:11:
                    76:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:64:61:36:DD:90:97:6D:2D:03:A1:96:D0:83:D4:81:5A:4A:BD:01
            X509v3 Authority Key Identifier:
                keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/9816AE202ED111EF9B668069C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:23:f4:6a:7f:cd:83:6c:e2:3e:17:f7:fe:0b:af:dc:ce:17:
         b3:c8:e9:c7:81:29:2e:6d:a3:54:e7:64:2f:86:84:b6:17:c9:
         b2:b2:20:38:5d:66:0d:ce:96:82:db:b3:c2:c5:4a:a1:de:c4:
         32:11:63:c7:e1:39:99:54:54:6d:32:71:83:61:17:0b:77:dd:
         73:80:27:2a:a9:0a:ae:4d:80:89:ee:ef:84:d6:01:d1:d6:07:
         a6:a9:d8:a3:47:4e:83:51:4d:15:51:2a:df:01:7d:52:03:c5:
         8d:01:a6:62:7d:50:d2:de:5d:3e:e8:21:c7:30:01:02:b9:c4:
         bd:6b:77:f2:9b:9f:5c:88:0d:00:f7:5b:f3:29:a1:be:49:b7:
         69:40:20:a9:17:08:ea:88:02:0f:3f:7e:29:5c:84:c7:28:58:
         cd:85:91:22:0e:85:bf:c1:56:8c:d9:ad:2c:cf:8f:ca:d7:36:
         a0:93:a2:75:b0:25:f2:fb:85:4a:31:f9:67:df:c8:81:16:ce:
         0c:1c:cc:1c:fd:60:21:7d:5d:01:ae:f8:5c:79:16:16:50:cc:
         1e:35:87:8c:87:84:69:69:b4:2d:35:f8:20:0d:3b:98:9a:d4:
         e5:f1:e3:45:bf:ca:a9:c0:78:44:52:bf:63:0d:af:28:43:09:
         ce:a7:18:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:05 2026 by rpki-client