This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/810804742B4011F092798182C4F9AE02.roa
File:                     810804742B4011F092798182C4F9AE02.roa (raw, json)
Hash identifier:          W1Jw/0/mBotIHjt+NBlj7sYgP6pK4AyXJRh9iPB8rXQ=
Subject key identifier:   EC:C9:F7:2C:A5:E4:F9:00:EF:D8:9A:3C:11:04:E5:3D:3B:89:E5:B4
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3777
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/810804742B4011F092798182C4F9AE02.roa
Signing time:             Fri 16 Jan 2026 16:13:17 +0000
ROA not before:           Fri 16 Jan 2026 16:13:17 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139970
IP address blocks:        103.147.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14199 (0x3777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 16 16:13:17 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=696a639d-4087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ce:c3:86:b4:bf:71:7d:e1:28:35:10:7b:52:
                    48:95:82:03:51:b2:17:50:07:4f:4a:3c:4e:03:3c:
                    18:2e:6e:54:b4:22:c5:c2:aa:41:94:99:41:ed:04:
                    c5:89:4d:ec:c8:81:36:24:da:84:4c:fc:63:45:1e:
                    a6:9f:69:ab:bc:69:bb:f9:2f:50:f9:8d:d7:66:1b:
                    17:74:3f:b3:3b:3a:68:a2:ab:63:cd:1b:dc:6e:40:
                    9e:64:2d:be:7d:32:e8:69:76:f1:3c:07:81:ab:35:
                    3c:b4:96:4e:54:0c:f7:e7:02:f7:fd:73:a6:9d:a3:
                    1b:9a:2b:c2:65:6e:c3:d2:1e:6d:6d:70:6c:73:34:
                    97:03:ca:3b:e1:37:00:1c:21:59:ef:c1:0d:d6:6a:
                    bf:3d:0b:13:72:e2:8c:75:77:8d:ce:7c:bc:92:5f:
                    24:3f:6d:c1:ec:91:d4:8b:c2:4e:3f:91:9c:92:81:
                    f6:ac:95:6b:9b:ce:0f:05:ae:78:d8:13:50:34:90:
                    86:a3:49:76:6d:0f:3e:2f:7d:a7:ef:90:58:9e:cc:
                    ef:e4:c3:6e:82:1b:5e:9c:d6:78:7b:09:1c:06:7d:
                    68:6a:7a:24:af:ce:7c:37:87:51:bb:7d:c2:fd:01:
                    12:38:5a:49:de:4a:1a:63:b9:63:6e:04:bb:7b:99:
                    3b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C9:F7:2C:A5:E4:F9:00:EF:D8:9A:3C:11:04:E5:3D:3B:89:E5:B4
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/810804742B4011F092798182C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:40:76:5f:43:55:55:39:17:ba:ec:b7:35:2f:f2:c5:89:a4:
         c3:73:b3:a3:ee:44:0b:26:b4:54:10:6c:ea:ce:0b:0d:3c:41:
         e3:2e:9c:c3:a0:52:75:f6:3c:fa:37:00:4b:e8:ce:74:92:da:
         94:43:e6:6a:ab:24:dc:72:ee:79:10:95:c1:78:59:71:0c:2f:
         b1:53:d2:33:6c:6a:5e:ad:4a:4c:db:a6:f1:54:7c:f9:50:48:
         cf:ed:a2:8e:ad:50:b4:ee:64:80:75:e6:de:d1:38:1e:80:a0:
         00:e7:de:96:5d:7f:c0:cf:44:e7:eb:15:cb:48:cc:c5:03:9a:
         02:73:08:d4:e3:13:45:50:9c:82:6a:8b:8d:53:93:4a:ad:3a:
         82:91:3e:6a:f6:b6:cb:25:da:ff:ad:0e:5f:2a:d6:a8:3f:49:
         9c:42:7f:c7:bf:f5:7c:44:08:7b:68:25:da:e6:37:9f:d2:43:
         51:2f:6d:0a:d8:27:74:2d:1c:2a:34:81:ab:b0:25:81:c5:01:
         f6:86:07:2e:48:72:89:8e:08:8c:04:03:43:0b:12:c0:a7:c9:
         39:ef:ad:84:7e:ca:f1:41:8e:77:da:6b:ed:19:c8:a3:7a:b2:
         30:f5:04:fc:57:d5:06:82:88:cb:de:da:e5:ae:fb:8c:2e:24:
         06:73:a5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:57:54 2026 by rpki-client