This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20F9ED1EF84E11F08DB18D23426F56BC.roa
File:                     20F9ED1EF84E11F08DB18D23426F56BC.roa (raw, json)
Hash identifier:          VdtKFwNW6Mv/flCKVMOp50rVfuvpZh9QVlZbRIPPN7g=
Subject key identifier:   3A:08:BB:8F:01:44:67:D2:3E:A2:2F:D5:87:65:DC:66:07:D0:27:B9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       CF65
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20F9ED1EF84E11F08DB18D23426F56BC.roa
Signing time:             Fri 23 Jan 2026 11:24:49 +0000
ROA not before:           Fri 23 Jan 2026 11:24:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154297
IP address blocks:        103.165.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53093 (0xcf65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jan 23 11:24:49 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69735a81-4698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:02:ea:7e:e2:db:7c:ff:7f:27:7c:91:39:ef:
                    90:8f:a2:7f:18:df:bf:f9:59:52:ea:ea:29:6f:69:
                    af:b9:e3:e6:f2:aa:6b:54:d5:2a:f5:c9:56:f1:68:
                    ee:2d:92:20:b1:82:bc:77:5f:b9:38:97:43:fe:e0:
                    5d:50:1e:b8:2a:4e:96:84:e4:63:71:f5:8b:ed:da:
                    e5:54:9e:2d:1d:4e:50:c3:dd:20:20:f2:64:50:b7:
                    60:e8:7e:7e:c1:9c:d4:7b:5d:d7:7e:70:b4:45:71:
                    2a:27:4e:65:5a:4f:8a:d2:fa:22:ea:ab:a1:cf:42:
                    97:ae:4f:2c:96:10:87:78:e9:48:98:97:c0:fa:f6:
                    cd:36:00:4b:af:3b:1a:df:cc:42:7e:db:2d:28:fd:
                    76:48:73:da:c5:53:f5:6f:1c:48:c6:41:89:73:dc:
                    a8:ed:02:96:0d:3e:86:4f:89:b5:dc:ab:7a:7c:33:
                    42:82:42:81:d1:9a:42:87:27:a9:23:e4:fd:da:f6:
                    de:31:24:f0:6f:2b:65:86:f6:37:9f:29:77:50:b3:
                    8f:22:2c:0c:e5:5b:71:ed:d5:a2:ae:57:66:16:87:
                    5b:6d:7d:b9:40:ad:95:12:ef:18:ee:eb:9c:3c:45:
                    5a:aa:35:be:d9:38:ef:fc:65:4d:fe:e5:77:3d:a7:
                    75:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:08:BB:8F:01:44:67:D2:3E:A2:2F:D5:87:65:DC:66:07:D0:27:B9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20F9ED1EF84E11F08DB18D23426F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:03:0d:fe:ef:97:14:10:43:10:a0:a6:51:be:78:ef:0c:f2:
         f5:6c:8f:d9:da:05:f9:26:eb:b4:24:e3:ff:01:ca:3a:14:b4:
         50:af:6e:1b:ff:4f:fc:5f:56:96:23:c4:a9:51:f6:3d:6c:3b:
         7e:0c:cc:28:87:ea:16:34:89:99:19:8c:fc:03:2b:ea:61:32:
         2c:d9:b5:46:2a:1a:2a:41:aa:9b:7c:a8:1b:44:ca:7d:9e:a4:
         c8:e0:0f:9c:19:22:49:cc:f4:92:1a:0c:71:ce:f9:c0:8f:76:
         13:ed:63:b8:a7:2c:f4:1f:71:cb:a3:10:78:15:e7:24:43:38:
         7e:8d:d9:1f:21:de:6e:d3:03:1f:9a:26:a7:23:0e:10:44:8c:
         ef:24:6e:07:c6:99:91:50:e0:ef:55:9c:58:c7:de:d4:db:b8:
         b4:4a:55:9a:72:72:d4:2f:24:f5:e7:45:35:76:cd:7b:05:f0:
         5c:ea:ff:2e:80:27:d5:f4:5d:68:15:71:9c:a1:63:ab:4c:2f:
         70:a2:73:30:ff:63:6d:5c:0e:5c:11:67:a7:bc:ad:7c:f2:3f:
         7b:1d:26:61:42:76:c6:18:a0:d5:e2:0a:05:52:77:fb:5e:e5:
         07:17:13:d9:ba:b3:1d:38:9e:32:71:e7:cc:3f:16:82:ea:1c:
         ce:c1:6e:94
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAM9lMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDEyMzExMjQ0OVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAwwNNjk3MzVhODEtNDY5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMwC6n7i23z/fyd8kTnvkI+ifxjfv/lZUurqKW9pr7nj5vKqa1TVKvXJVvFo
7i2SILGCvHdfuTiXQ/7gXVAeuCpOloTkY3H1i+3a5VSeLR1OUMPdICDyZFC3YOh+
fsGc1Htd135wtEVxKidOZVpPitL6Iuqroc9Cl65PLJYQh3jpSJiXwPr2zTYAS687
Gt/MQn7bLSj9dkhz2sVT9W8cSMZBiXPcqO0Clg0+hk+JtdyrenwzQoJCgdGaQocn
qSPk/dr23jEk8G8rZYb2N58pd1CzjyIsDOVbce3Voq5XZhaHW219uUCtlRLvGO7r
nDxFWqo1vtk47/xlTf7ldz2ndVMCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQ6CLuP
AURn0j6iL9WHZdxmB9AnuTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIwRjlFRDFF
Rjg0RTExRjA4REIxOEQyMzQyNkY1NkJDLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBZ6VOMA0GCSqGSIb3DQEBCwUAA4IBAQBxAw3+75cUEEMQ
oKZRvnjvDPL1bI/Z2gX5Juu0JOP/Aco6FLRQr24b/0/8X1aWI8SpUfY9bDt+DMwo
h+oWNImZGYz8AyvqYTIs2bVGKhoqQaqbfKgbRMp9nqTI4A+cGSJJzPSSGgxxzvnA
j3YT7WO4pyz0H3HLoxB4FeckQzh+jdkfId5u0wMfmianIw4QRIzvJG4HxpmRUODv
VZxYx97U27i0SlWacnLULyT150U1ds17BfBc6v8ugCfV9F1oFXGcoWOrTC9wonMw
/2NtXA5cEWenvK188j97HSZhQnbGGKDV4goFUnf7XuUHFxPZurMdOJ4ycefMPxaC
6hzOwW6U
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:23:58 2026 by rpki-client