This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/0C1D4BF8038F11EA82150D4AC4F9AE02.roa
File:                     0C1D4BF8038F11EA82150D4AC4F9AE02.roa (raw, json)
Hash identifier:          wAuAiXUS4UGi4W921WWjTF0DUuwpdozfz9mWVXTfnck=
Subject key identifier:   87:1E:50:55:B3:14:84:A0:4E:88:42:6F:3A:AD:17:B8:72:60:1A:79
Certificate issuer:       /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
Certificate serial:       0CC2
Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/0C1D4BF8038F11EA82150D4AC4F9AE02.roa
Signing time:             Wed 24 Dec 2025 18:15:36 +0000
ROA not before:           Wed 24 Dec 2025 18:15:35 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     134841
IP address blocks:        103.203.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl
                          rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3266 (0xcc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
        Validity
            Not Before: Dec 24 18:15:35 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=694c2dc7-4519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d1:0c:5b:f3:30:ce:cf:9f:10:d4:5c:77:25:
                    cd:07:7b:89:2f:95:e4:eb:6f:56:84:4d:4f:2e:9a:
                    11:cf:bc:f5:ba:49:e8:a5:22:b5:60:ca:25:9b:a0:
                    7e:76:5a:54:83:dc:d6:a4:5c:12:11:b1:6d:83:67:
                    a2:f9:d8:43:26:15:c4:ed:a7:67:89:77:6e:44:4f:
                    a9:f5:07:6c:d6:01:b7:c3:08:d8:dc:52:c0:63:0e:
                    c0:0d:30:64:9f:e0:c9:85:dd:f2:26:04:c1:3a:7d:
                    a2:22:5e:ee:74:6e:8e:98:9d:e0:fa:52:6e:b1:b3:
                    c8:19:0c:cd:3a:2f:38:99:f4:20:b2:b3:f7:42:76:
                    13:49:cc:e8:a7:26:e0:00:de:50:cf:b2:c6:de:32:
                    c7:78:0e:a6:df:e7:55:6c:a2:24:95:b4:b0:06:99:
                    7a:5f:92:c7:4d:b9:e0:3e:9f:04:41:d2:ce:5d:2f:
                    e9:08:0e:fd:53:1a:9b:86:82:21:b2:7d:56:8c:6f:
                    b1:e5:80:5b:5e:47:f1:b3:34:88:da:30:35:d6:a5:
                    f7:bc:ac:5e:a4:1b:eb:77:37:5e:e4:83:3d:71:49:
                    8c:a2:d9:6b:bb:5e:06:bc:37:09:5d:88:e3:9d:61:
                    b0:b3:30:7f:d3:d9:0b:b2:5e:df:74:b1:f4:6f:37:
                    2e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1E:50:55:B3:14:84:A0:4E:88:42:6F:3A:AD:17:B8:72:60:1A:79
            X509v3 Authority Key Identifier:
                keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/0C1D4BF8038F11EA82150D4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:ef:48:bd:be:74:82:a8:1f:fe:15:23:b4:75:d0:f2:ba:e9:
         40:d6:2e:35:62:e3:2f:bb:73:14:59:b4:4a:1f:f6:98:00:91:
         bd:84:fc:44:2a:8a:17:de:4b:be:03:7f:65:f0:83:08:4a:21:
         c2:75:5f:ac:a2:cb:67:fb:d2:38:2d:27:eb:da:8e:9e:2b:5e:
         be:09:ca:f3:1f:fd:d9:82:9d:b1:1e:ae:1e:32:07:51:bf:81:
         d2:49:ea:ca:91:af:d7:3d:64:85:0c:3f:e5:9f:cb:e7:9c:cc:
         5d:b7:a3:9d:ed:ce:41:89:c0:9f:af:03:36:38:da:8a:4c:9a:
         8a:a2:8c:45:38:9d:f8:c8:52:79:db:fa:7e:c5:1e:38:13:2f:
         fc:db:42:8e:8d:ad:5f:08:44:5b:83:66:61:81:0f:6f:1d:93:
         4f:d1:b2:67:e3:c1:ff:ec:35:c1:a6:d9:4a:c3:bd:a9:32:13:
         b6:5f:0a:43:6d:2f:55:7c:ab:b6:00:11:6d:ef:ef:b9:85:83:
         64:58:db:40:9b:c4:de:4f:5d:4e:a9:3b:5f:82:3c:87:4c:24:
         35:e5:5b:f2:6e:ee:c9:66:71:07:7d:2d:30:5c:cb:b3:de:82:
         d1:62:14:54:08:dd:3c:01:93:8c:e1:98:0a:7c:1c:d1:40:06:
         7e:88:e5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:43 2026 by rpki-client