This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/C320F64A2B3611F0BDD48B67C4F9AE02.roa
File:                     C320F64A2B3611F0BDD48B67C4F9AE02.roa (raw, json)
Hash identifier:          Ui7D8eAz9Cwu8F7hbB27OOe5EcSjOI83KFFlRJku/tU=
Subject key identifier:   EA:07:50:F6:BD:60:70:1F:D7:6C:39:FD:D4:09:73:89:4D:12:D4:9C
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       379B
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/C320F64A2B3611F0BDD48B67C4F9AE02.roa
Signing time:             Fri 16 Jan 2026 16:13:54 +0000
ROA not before:           Fri 16 Jan 2026 16:13:54 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     58821
IP address blocks:        103.26.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14235 (0x379b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 16 16:13:54 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=696a63c2-e792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:48:dd:10:35:71:c5:bc:b7:a4:55:0d:f5:f4:
                    45:71:79:da:bd:3e:7c:85:be:84:18:bb:c4:fe:24:
                    69:db:c4:74:39:19:d1:9f:c8:0f:68:d4:1e:48:a5:
                    d1:cc:a9:47:3f:75:d2:50:e8:df:3d:0a:a2:7f:81:
                    8f:3b:75:f6:6d:57:cb:1c:eb:c4:08:dd:d5:a1:24:
                    c3:bf:ab:d0:67:15:4f:9d:ec:fb:c0:46:7f:03:a6:
                    f2:18:82:6b:c9:78:e4:55:4f:19:6e:f6:9e:04:8e:
                    78:f9:e5:03:4b:c5:06:cc:bb:5b:19:64:2a:ff:ce:
                    d1:bb:8a:d4:1f:70:b8:00:67:ac:2a:0c:50:43:eb:
                    d4:71:19:10:1d:0c:2f:a3:f5:80:28:e8:ea:31:c5:
                    3c:c2:5a:00:f8:bf:3b:ce:18:2f:a3:63:79:ca:b4:
                    02:d7:c2:4b:67:96:b0:d8:26:0d:7c:8d:2c:25:ab:
                    c0:53:85:58:40:5c:f5:5f:fb:e1:60:8d:c2:28:81:
                    7c:f1:8c:ce:cf:a6:9e:c0:64:de:39:3a:04:71:c9:
                    3e:ce:c9:77:6a:5e:d7:2f:2f:37:5b:14:78:d4:4f:
                    aa:91:7b:ef:80:9b:be:f8:53:1d:f0:69:a3:df:20:
                    21:b4:44:af:d1:0a:5f:87:89:64:7f:8c:c8:53:46:
                    64:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:07:50:F6:BD:60:70:1F:D7:6C:39:FD:D4:09:73:89:4D:12:D4:9C
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/C320F64A2B3611F0BDD48B67C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:9c:14:5f:01:94:9b:9e:d9:ba:3b:b0:a3:2e:f1:ab:4b:da:
         1f:85:9d:5b:c8:07:fb:af:e5:8e:71:01:00:d6:be:01:57:61:
         e9:4b:22:88:09:ed:72:d3:ed:4d:67:b0:92:05:99:55:fb:a9:
         af:fe:e7:95:cf:78:07:f0:c4:bf:b5:1a:a1:b6:5d:20:12:39:
         be:86:40:c4:82:f3:2d:9b:a2:a3:3c:e1:c0:21:ab:f4:1e:a6:
         e8:86:77:08:50:5b:22:0e:f3:76:51:f0:a2:5f:3d:53:27:e5:
         f4:eb:0e:79:ef:7b:a4:be:5d:9f:96:46:97:fa:f0:9e:21:6f:
         67:a3:30:23:95:5a:ce:77:b1:db:ef:77:32:0f:d4:26:d1:66:
         da:d4:46:28:67:96:50:ab:bd:b7:e6:13:3a:b1:c9:83:56:dc:
         a1:de:d2:6a:39:48:c7:97:1c:be:8c:5b:23:55:eb:55:93:cc:
         da:93:c4:8c:63:b3:9f:01:1e:6c:fc:88:6a:23:2b:ce:de:57:
         a3:d9:eb:b7:af:53:71:bc:9a:f0:20:b4:4d:14:58:0e:52:f0:
         48:3f:c1:3f:02:02:ed:c7:23:36:4a:34:60:ca:f4:48:c2:4a:
         91:fa:b9:d7:73:ba:84:67:6b:79:91:28:00:3d:2b:a7:75:b8:
         ee:2b:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:55:07 2026 by rpki-client