This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/2A73A3403A0711F081048A4EC4F9AE02.roa
File:                     2A73A3403A0711F081048A4EC4F9AE02.roa (raw, json)
Hash identifier:          Q9FsVr4Yw7V8aGFlyUG59yrXi1olAITyZrt6BuH1uPI=
Subject key identifier:   3E:73:7C:2D:02:50:29:EE:10:CF:95:14:65:2B:09:AC:47:1F:A2:FF
Certificate issuer:       /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial:       3565
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/2A73A3403A0711F081048A4EC4F9AE02.roa
Signing time:             Thu 08 Jan 2026 15:10:53 +0000
ROA not before:           Thu 08 Jan 2026 15:10:53 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     13335
IP address blocks:        103.65.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
                          rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13669 (0x3565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
        Validity
            Not Before: Jan  8 15:10:53 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=695fc8fc-874e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:69:63:23:6a:eb:16:e5:a9:56:e4:a8:8b:18:
                    52:f5:3b:d6:29:e4:e3:1d:1a:70:39:ff:29:6a:e1:
                    50:f2:85:8a:86:77:2f:26:f0:02:c8:7d:5c:40:f4:
                    08:67:5e:d5:96:00:d0:41:b4:02:21:6d:33:d5:62:
                    d8:0c:14:4f:8f:a6:de:a8:11:cb:5f:5a:c1:d1:e4:
                    2b:a1:d0:ab:0f:01:f9:5a:be:77:d8:b6:e1:9d:14:
                    67:2c:2f:8a:11:e3:0b:5c:8e:85:56:c5:cd:43:43:
                    61:bf:cf:16:24:22:c1:44:c4:d3:86:f5:47:fb:ee:
                    f7:a6:1d:6e:c7:b5:07:2d:b7:67:23:72:a7:e7:9a:
                    3a:30:b8:61:2e:b6:86:6a:04:ea:fc:44:d7:43:a3:
                    70:4d:c7:ce:f0:9c:5a:e7:3d:85:b0:a4:83:10:64:
                    c6:3c:6a:1c:27:c1:57:09:35:48:d7:ef:32:18:a7:
                    7f:00:a2:3b:70:96:8f:91:0a:ea:8e:f0:89:3a:79:
                    98:b6:1a:e8:85:d7:cf:46:7a:f1:75:9a:31:8a:c5:
                    4e:30:de:3d:34:fb:d5:da:7d:e2:3c:3b:18:8f:3f:
                    4a:87:cf:f1:e3:f8:b5:91:89:b9:f6:78:09:b0:d0:
                    6b:4a:83:c7:d8:e7:2b:a0:fb:cc:e5:b9:bf:27:c0:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:73:7C:2D:02:50:29:EE:10:CF:95:14:65:2B:09:AC:47:1F:A2:FF
            X509v3 Authority Key Identifier:
                keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/2A73A3403A0711F081048A4EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:b7:5d:5a:06:80:7a:92:39:3a:77:eb:44:73:2d:eb:fc:9e:
         b9:49:8e:ea:1e:a4:8f:88:8f:e5:bd:be:5f:76:80:d3:8c:30:
         5d:0f:b4:5c:d1:63:9f:c0:d6:61:f5:2a:ce:b1:6c:2a:1e:26:
         28:24:fd:c2:af:27:2d:68:c5:6b:49:b3:f4:fe:b1:42:27:d6:
         b0:7a:40:c4:1b:b2:58:8d:6b:02:bb:20:2c:df:a8:09:e9:cb:
         91:8e:25:4b:cf:68:72:67:d1:5b:77:a2:f3:33:58:88:65:81:
         c4:bd:be:7a:c1:d8:3e:6b:46:ad:e2:4f:cb:cf:c1:75:98:42:
         a7:5e:47:a6:02:2a:e4:3e:38:f2:5d:92:2f:32:c0:b2:80:96:
         e9:ea:b9:52:64:32:47:c7:f0:79:68:2c:81:c3:e9:b1:7b:e3:
         a9:f7:86:cd:7e:81:66:24:42:d7:1f:91:f5:01:23:1d:ac:3d:
         29:f0:fb:43:1d:75:71:2b:c6:e4:e6:c1:b4:e1:66:a5:96:94:
         c8:c5:67:7e:fe:73:d2:75:ce:2c:29:1a:a9:3f:92:4e:8d:a3:
         a8:75:e1:01:dc:0a:af:14:01:bd:d7:55:4a:d2:d7:38:12:e8:
         4e:7c:99:60:f0:7a:5f:2b:3a:66:1f:e8:f1:c1:af:c3:62:54:
         fd:b4:1e:bd
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OEQ2QjcxMTAvBgNVBAUTKEVFQThBRTgwRDcxM0U2QjIyREIwRUM2MDkxNTdGMEM1
OUE1MkZEN0YwHhcNMjYwMTA4MTUxMDUzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTVmYzhmYy04NzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6mljI2rrFuWpVuSoixhS9TvWKeTjHRpwOf8pauFQ8oWKhncvJvACyH1cQPQI
Z17VlgDQQbQCIW0z1WLYDBRPj6beqBHLX1rB0eQrodCrDwH5Wr532LbhnRRnLC+K
EeMLXI6FVsXNQ0Nhv88WJCLBRMTThvVH++73ph1ux7UHLbdnI3Kn55o6MLhhLraG
agTq/ETXQ6NwTcfO8Jxa5z2FsKSDEGTGPGocJ8FXCTVI1+8yGKd/AKI7cJaPkQrq
jvCJOnmYthrohdfPRnrxdZoxisVOMN49NPvV2n3iPDsYjz9Kh8/x4/i1kYm59ngJ
sNBrSoPH2OcroPvM5bm/J8D49wIDAQABo4IClTCCApEwHQYDVR0OBBYEFD5zfC0C
UCnuEM+VFGUrCaxHH6L/MB8GA1UdIwQYMBaAFO6oroDXE+ayLbDsYJFX8MWaUv1/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCNy8xQzE2NjQxQzFE
OTcxMUUyOTZEMDMwODAwOEIwMkNEMi83cWl1Z05jVDVySXRzT3hna1Zmd3hacFNf
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdxaXVnTmNUNXJJdHNPeGdrVmZ3eFpwU19YOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEQ2QjcvMUMxNjY0MUMxRDk3MTFFMjk2RDAzMDgwMDhCMDJDRDIvMkE3M0EzNDAz
QTA3MTFGMDgxMDQ4QTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnQfgwDQYJKoZIhvcNAQELBQADggEBACe3XVoGgHqSOTp3
60RzLev8nrlJjuoepI+Ij+W9vl92gNOMMF0PtFzRY5/A1mH1Ks6xbCoeJigk/cKv
Jy1oxWtJs/T+sUIn1rB6QMQbsliNawK7ICzfqAnpy5GOJUvPaHJn0Vt3ovMzWIhl
gcS9vnrB2D5rRq3iT8vPwXWYQqdeR6YCKuQ+OPJdki8ywLKAlunquVJkMkfH8Hlo
LIHD6bF746n3hs1+gWYkQtcfkfUBIx2sPSnw+0MddXErxuTmwbThZqWWlMjFZ37+
c9J1ziwpGqk/kk6No6h14QHcCq8UAb3XVUrS1zgS6E58mWDwel8rOmYf6PHBr8Ni
VP20Hr0=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:33 2026 by rpki-client