This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
File:                     4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa (raw, json)
Hash identifier:          Hp72vclnCYzitFtqAewfgoiX/31mMQvEjdAO+jaS3uk=
Subject key identifier:   87:5E:19:B7:E6:D7:84:9C:6A:FD:FE:3B:69:37:8C:56:FA:B4:1C:CD
Certificate issuer:       /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial:       19EA
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
Signing time:             Tue 20 Jan 2026 16:13:54 +0000
ROA not before:           Tue 20 Jan 2026 16:13:54 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     135523
IP address blocks:        103.70.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
                          rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6634 (0x19ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
        Validity
            Not Before: Jan 20 16:13:54 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=696fa9c2-40f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:4b:94:d9:b9:76:b5:54:ea:5e:07:c7:52:
                    db:fa:60:fa:31:86:7b:db:7b:9e:4b:6e:d8:6d:53:
                    0a:5c:45:52:13:8c:59:0f:bb:19:c2:03:71:db:17:
                    34:c9:59:23:ae:ff:20:c5:5f:fe:06:de:13:55:0a:
                    ee:88:31:20:4a:62:5d:1e:37:a9:f4:16:47:2f:f1:
                    1a:c9:79:67:dc:56:f9:66:18:6f:c4:f2:1f:a8:8f:
                    79:25:f8:60:1c:1e:99:d4:a5:72:d1:96:ab:47:30:
                    b8:eb:1a:c3:d4:39:4b:95:b3:42:26:ac:1a:11:31:
                    3b:40:5c:81:a9:27:09:ae:23:59:c6:90:55:7d:2e:
                    4d:1e:73:92:90:4c:5f:96:45:36:c3:d4:0c:21:09:
                    b1:72:ad:c1:04:39:29:07:14:ca:7c:bf:9c:2e:25:
                    65:f0:c7:f1:a7:f0:e0:95:35:1a:5a:5a:bd:19:6c:
                    e4:29:9c:85:f2:75:cd:2c:ea:99:c0:c9:05:08:6e:
                    79:9d:df:76:44:34:e3:84:dc:fa:13:9d:0a:cc:1a:
                    53:75:08:f7:7a:f1:b0:fc:e3:af:eb:21:f3:ef:4b:
                    03:3b:e5:6d:00:ad:5c:3c:4d:ec:11:54:e3:96:0b:
                    2b:c5:11:3c:d7:1b:2a:dc:56:b4:82:0a:f8:24:f3:
                    ab:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5E:19:B7:E6:D7:84:9C:6A:FD:FE:3B:69:37:8C:56:FA:B4:1C:CD
            X509v3 Authority Key Identifier:
                keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e2:64:ef:83:90:b2:22:c5:3f:48:ef:62:e7:f4:55:17:7d:
         06:0b:35:52:bc:30:ab:b1:d1:0a:7d:92:55:ff:ab:bb:13:ab:
         d4:0c:d7:bd:2c:54:57:2f:05:61:e2:8b:dd:7b:9d:72:94:e2:
         92:45:8b:89:6f:07:7e:80:e9:cf:58:d0:5f:05:d4:7c:35:8b:
         cb:55:d5:ec:5e:3e:8c:67:19:b2:30:e6:4e:50:7f:c9:5c:b9:
         70:e3:42:16:e9:b6:5c:15:39:46:4b:e8:1e:2b:ca:83:00:29:
         5b:0b:18:3d:75:09:4b:db:8d:08:8e:ae:d4:37:3a:25:c6:2a:
         80:22:19:9b:82:a9:26:70:a2:a4:2a:d4:2d:30:0a:63:b9:97:
         32:69:cc:4a:9c:90:d3:e8:16:23:b5:1b:ab:2d:76:ab:59:64:
         87:e9:25:dc:6b:c7:51:a7:8a:f0:84:de:a8:de:da:d9:3e:a0:
         9c:81:9b:44:f5:4a:e0:9d:21:04:0d:eb:54:8d:b1:d9:69:c5:
         a5:c5:74:eb:e1:c7:76:d8:a8:fc:36:5b:ef:2b:d9:9a:47:9a:
         1c:eb:cf:0b:e2:c3:db:f8:d5:d9:6d:b2:9a:4b:25:c6:e2:ef:
         47:ae:a8:d0:b0:9f:16:25:24:f8:79:de:6b:c8:93:ce:1a:bc:
         21:72:57:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:29:51 2026 by rpki-client