This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/73261D50DBF311F0B2CAB720556F56BC.roa
File:                     73261D50DBF311F0B2CAB720556F56BC.roa (raw, json)
Hash identifier:          2Qqcf3SGgXIdVZ7SqnyO/wFjkho8IcV4+bxLqjAPzwU=
Subject key identifier:   7A:38:14:F7:AE:35:60:7C:96:54:8B:6A:7B:36:45:90:80:58:D6:F6
Certificate issuer:       /CN=A918C425/serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Certificate serial:       1E
Authority key identifier: 3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/73261D50DBF311F0B2CAB720556F56BC.roa
Signing time:             Wed 21 Jan 2026 07:29:09 +0000
ROA not before:           Wed 21 Jan 2026 07:29:09 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     24409
IP address blocks:        103.245.23.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
                          rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C425, serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
        Validity
            Not Before: Jan 21 07:29:09 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69708045-8c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:d8:39:60:e6:aa:f9:24:ac:0a:d2:50:b4:
                    5f:d8:73:d9:7d:b2:16:7a:b5:57:c4:03:d5:1b:a3:
                    8b:92:de:7b:24:47:7a:db:93:bf:0f:fa:6e:3f:e5:
                    40:3d:fe:79:7a:f0:98:d6:a2:65:fd:4b:0b:a4:ea:
                    c4:a0:32:70:f6:13:b1:5f:23:85:a8:52:ad:99:82:
                    73:e4:8c:30:8b:a1:80:45:6e:2d:f3:72:50:94:2a:
                    d4:6b:c8:79:35:78:ca:50:52:53:d7:d6:db:59:d0:
                    66:4a:d5:f4:8a:33:4b:cd:67:f0:81:ec:27:76:b4:
                    e4:dc:a0:3e:af:f4:c7:64:6c:6a:25:16:28:f3:24:
                    2a:50:9d:d0:18:34:8e:59:c4:d8:6c:2d:8f:f6:05:
                    21:25:9a:b5:5f:7b:d5:44:08:ff:4b:92:e8:8b:c9:
                    df:ca:7a:5a:7d:9b:35:a1:65:04:92:69:f3:07:aa:
                    b5:53:15:8c:20:76:6d:06:bc:62:ce:8c:60:7e:b8:
                    9b:cc:d2:b8:e7:93:45:b5:a1:c8:5d:38:11:d0:f4:
                    86:75:6d:da:d4:66:cf:91:df:99:bf:1b:e4:11:58:
                    67:2d:77:21:d7:9a:05:18:a5:4f:a5:ab:a7:71:95:
                    d9:6c:35:9c:03:96:67:24:aa:9a:6f:94:e3:a4:2c:
                    b0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:38:14:F7:AE:35:60:7C:96:54:8B:6A:7B:36:45:90:80:58:D6:F6
            X509v3 Authority Key Identifier:
                keyid:3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/73261D50DBF311F0B2CAB720556F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:21:4e:04:61:27:1d:76:cd:e3:7c:da:b8:13:16:ab:24:8c:
         cb:0d:1c:7a:02:1e:eb:16:3e:02:2e:37:e5:b1:17:17:b0:04:
         cc:6d:eb:9f:0a:f2:b4:1b:81:c1:b7:00:86:e7:9a:38:78:6b:
         99:2a:73:45:e5:69:51:cc:49:68:f4:50:6b:1e:18:15:01:d7:
         f1:9f:27:3b:ad:f6:cc:07:00:f2:f3:cd:b9:3e:f2:44:d4:80:
         52:60:95:05:27:85:21:30:71:5e:83:64:bc:70:86:fc:23:35:
         e1:af:61:de:71:f4:b7:a7:2f:1e:3d:19:1a:54:f1:64:49:1f:
         fd:8c:52:09:3d:6b:79:24:40:eb:0b:46:df:18:00:f4:ae:fe:
         a8:8b:e0:34:d7:31:5d:c1:56:a4:0f:56:9a:50:b1:07:f6:50:
         5c:ec:c9:47:8e:c8:55:ed:e6:6b:73:74:47:b8:aa:88:94:48:
         65:a7:24:d8:d4:aa:c4:d5:fb:06:15:53:f1:48:b5:a3:31:2b:
         02:e1:d3:f5:b3:5e:c4:cd:13:5b:49:95:48:96:b5:2f:25:a4:
         7c:79:80:67:cc:df:ac:ea:4a:2d:2c:0c:a3:16:a5:ae:d1:de:
         33:a1:06:f0:84:e3:48:45:43:bb:da:5c:f1:96:4e:6a:3a:bd:
         6b:a7:40:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:13:09 2026 by rpki-client