This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/9BC8AC96555C11F0AF866966C4F9AE02.roa
File:                     9BC8AC96555C11F0AF866966C4F9AE02.roa (raw, json)
Hash identifier:          ktBWqYwJGn+fOJr07wOaX0WHMtmcG2JSCJbdyakvZ/M=
Subject key identifier:   45:B1:9D:46:39:C5:55:3B:90:0C:3D:C1:E5:3B:0D:CE:3A:B0:79:73
Certificate issuer:       /CN=A917C716/serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
Certificate serial:       66
Authority key identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/9BC8AC96555C11F0AF866966C4F9AE02.roa
Signing time:             Thu 01 Jan 2026 01:20:12 +0000
ROA not before:           Thu 01 Jan 2026 01:20:12 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     148976
IP address blocks:        103.175.34.0/23 maxlen: 24
                          2400:9de0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl
                          rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C716, serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910
        Validity
            Not Before: Jan  1 01:20:12 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6955cbcc-530e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:07:4d:dd:6f:84:48:ca:6f:75:25:a2:d1:
                    dc:e7:0a:e9:7d:85:7b:58:2a:15:98:d6:53:34:9c:
                    57:0c:8e:bd:23:34:f4:c0:51:98:70:4a:d8:9d:a6:
                    90:41:b9:80:f1:3a:f5:51:d9:bf:de:18:38:3b:52:
                    92:61:ae:44:50:d6:af:06:3e:b1:03:df:28:f7:ac:
                    72:97:27:dc:6e:b2:21:e2:02:a5:80:37:10:02:c9:
                    9c:0d:01:2e:a5:fc:12:40:46:fa:a6:20:71:17:e5:
                    e1:6b:76:83:49:3a:7c:40:8f:d6:19:96:a4:52:02:
                    ca:c2:62:3b:16:e4:8c:86:94:2c:c2:8e:14:2b:ba:
                    9f:52:b4:63:53:ee:f7:ed:dc:f4:e1:4c:47:62:3e:
                    86:f2:59:2e:24:9f:2c:b8:44:cc:00:07:9b:74:24:
                    53:7e:8e:34:56:b5:c2:85:d4:f6:11:60:f0:61:df:
                    c7:bc:51:fa:95:65:c1:e8:8e:a0:c6:59:5c:81:96:
                    5a:1f:09:c0:db:e9:11:8b:50:d0:1d:0d:5a:f5:3c:
                    09:e7:08:75:7c:b9:37:98:e1:e5:86:91:53:af:7d:
                    0d:8f:bf:0f:d0:67:e0:b7:9f:31:2d:8d:63:a8:23:
                    82:c9:b0:53:e7:84:e6:82:bb:9d:b6:4b:87:0d:34:
                    76:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B1:9D:46:39:C5:55:3B:90:0C:3D:C1:E5:3B:0D:CE:3A:B0:79:73
            X509v3 Authority Key Identifier:
                keyid:87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/9BC8AC96555C11F0AF866966C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.34.0/23
                IPv6:
                  2400:9de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:5d:ba:b7:bd:94:ee:5f:35:65:6f:8f:2c:8f:de:9a:9d:c7:
         94:28:66:75:ff:fe:d9:b5:fb:b4:2d:da:24:83:3a:c7:3d:a5:
         25:cb:c1:6b:0a:ef:18:f5:53:f3:eb:43:b0:b3:45:0f:a1:0b:
         d6:c7:d4:1d:aa:e7:bb:27:2e:0e:f5:ee:3d:89:e0:b3:be:32:
         ec:39:ca:30:be:e9:96:55:24:fd:ac:9d:94:01:32:42:4a:ea:
         d4:ba:0b:96:a1:d9:75:3e:79:e8:0e:02:1c:a9:e3:f4:8b:25:
         1f:1b:57:48:c4:f2:51:c6:f8:59:fb:f3:e2:1b:7a:4a:f2:e7:
         6b:b2:56:48:0b:19:f5:6c:5a:06:c0:ba:7d:09:85:1c:74:a2:
         ca:77:96:4d:1d:5e:99:a8:b1:85:8e:1a:0e:09:37:c6:a5:21:
         07:e1:b4:e4:bb:37:eb:0f:25:96:e0:50:3f:ca:96:3c:21:59:
         b0:e6:d3:07:fd:6f:0b:e7:bc:a5:d9:bf:c0:e4:4e:3b:7e:c4:
         7c:1d:34:9c:be:8c:6d:b7:7f:0a:a8:54:60:37:b6:78:75:d7:
         ee:eb:48:7e:47:47:d9:e2:5d:3a:79:14:2f:44:ed:10:07:13:
         63:9d:ac:7b:e9:20:36:4e:e7:d4:a5:1f:cf:fa:35:a4:2e:34:
         90:a6:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:00:14 2026 by rpki-client