This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/6C0C85D0A43011ECA230771BC4F9AE02.roa
File:                     6C0C85D0A43011ECA230771BC4F9AE02.roa (raw, json)
Hash identifier:          LITexHYBGQfDHaFNmDEvh2QlPnF2urSCL7j/a8BM0Co=
Subject key identifier:   CF:AF:1B:73:DF:E0:89:E3:62:12:04:90:53:0D:06:69:C5:CD:AC:2F
Certificate issuer:       /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial:       3568
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/6C0C85D0A43011ECA230771BC4F9AE02.roa
Signing time:             Thu 08 Jan 2026 15:10:57 +0000
ROA not before:           Thu 08 Jan 2026 15:10:57 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     58470
IP address blocks:        103.65.248.0/23 maxlen: 24
                          119.160.62.0/24 maxlen: 24
                          119.160.63.0/24 maxlen: 24
                          119.160.90.0/24 maxlen: 24
                          119.160.105.0/24 maxlen: 24
                          119.160.107.0/24 maxlen: 24
                          119.160.109.0/24 maxlen: 24
                          119.160.122.0/24 maxlen: 24
                          2404:3100:a::/48 maxlen: 48
                          2404:3100:b::/48 maxlen: 48
                          2404:3100:c::/48 maxlen: 48
                          2404:3100:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
                          rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13672 (0x3568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
        Validity
            Not Before: Jan  8 15:10:57 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=695fc901-2482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:c9:7f:2b:aa:bd:99:07:b1:f3:e1:53:f3:
                    f2:3c:3c:fc:fc:bb:5b:a6:98:94:fd:57:40:05:78:
                    50:c3:cc:50:b1:2a:4f:6e:fb:10:ea:ed:c4:58:3c:
                    0c:fa:0f:25:3c:dc:fd:b2:9b:1d:82:bc:b4:15:fa:
                    a2:f8:0e:69:0f:9c:ba:eb:a5:cb:fc:3a:fd:d2:18:
                    a4:44:bb:77:97:ac:af:11:95:7c:55:13:ac:c2:9c:
                    7f:cc:b6:59:b6:3a:f1:0e:2b:d5:e4:60:3a:ef:4c:
                    d0:05:c7:cc:72:f1:dc:37:91:07:cd:11:93:bb:6e:
                    ef:33:e8:9f:cd:bb:4d:87:09:1b:15:e0:f0:30:c4:
                    c1:5a:41:40:7c:65:cc:10:30:7f:f7:3a:60:99:85:
                    8f:9a:73:da:8f:7d:42:5b:96:a2:63:f4:7a:06:a0:
                    a6:28:42:88:70:c4:b5:53:52:ab:24:ee:9f:f4:85:
                    78:57:74:6e:66:14:4b:a6:46:dd:54:8b:8d:eb:29:
                    0b:7d:9c:be:6d:de:61:20:a3:bc:f7:53:1c:d3:d9:
                    67:5a:9b:ed:09:3e:fc:47:71:99:ad:13:06:a4:df:
                    bf:34:fd:67:6c:b8:08:45:cb:ec:59:22:bd:04:6b:
                    20:1f:87:ae:93:d2:93:68:a7:d0:81:19:5a:b8:64:
                    bf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AF:1B:73:DF:E0:89:E3:62:12:04:90:53:0D:06:69:C5:CD:AC:2F
            X509v3 Authority Key Identifier:
                keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/6C0C85D0A43011ECA230771BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.248.0/23
                  119.160.62.0/23
                  119.160.90.0/24
                  119.160.105.0/24
                  119.160.107.0/24
                  119.160.109.0/24
                  119.160.122.0/24
                IPv6:
                  2404:3100:a::-2404:3100:d:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         04:0a:b0:13:7a:83:a9:e4:82:c5:b3:07:a1:99:22:f8:d5:e6:
         71:eb:c5:71:4f:48:7b:93:17:ff:2a:5f:46:34:f7:6f:43:da:
         19:44:81:06:c2:85:71:a8:be:04:d5:bc:8c:72:54:34:98:01:
         56:fc:3f:a4:d3:12:10:ac:2c:3b:40:c4:bc:11:ea:d1:2e:b5:
         0f:b7:f8:2e:19:c5:fa:83:cb:48:d1:a2:21:78:3f:3d:ab:a0:
         ba:95:c2:83:b0:7d:b7:b1:f7:30:c6:7f:08:54:2a:8b:d9:7e:
         50:8b:7f:ad:72:48:61:a6:ce:b3:7a:f5:86:91:18:cd:c4:78:
         78:c4:09:96:74:f5:2c:fc:04:ab:19:2f:fb:a0:80:1b:0b:e5:
         87:55:a8:d4:fa:01:7b:6b:63:7c:00:5e:9e:b7:a7:7a:68:08:
         b6:1c:24:2d:59:13:f9:4b:b7:29:85:8c:14:19:70:2c:6c:f1:
         b8:85:9d:ea:1d:75:2c:55:26:2b:69:c4:b0:42:54:16:18:d7:
         38:b2:c6:80:88:b4:d7:c6:4f:3a:b0:0e:d9:c5:ce:db:d6:c4:
         b9:05:11:68:c6:93:54:40:6e:d4:ba:e7:1f:fa:4e:43:4d:95:
         07:87:05:d4:68:69:bc:f6:31:67:b2:ff:0f:ac:0e:6a:6c:64:
         6d:48:a3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:19:39 2026 by rpki-client