This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/2A7A051EB54B11EA85EE266DC4F9AE02.roa
File:                     2A7A051EB54B11EA85EE266DC4F9AE02.roa (raw, json)
Hash identifier:          SnK2L/0TUegYVLh+r/cfO0UvnKyrUNoisZGqBcbOFAs=
Subject key identifier:   47:A3:3E:6D:E8:72:BD:C3:0E:7F:85:F4:20:AF:5C:7F:82:C9:C9:1D
Certificate issuer:       /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Certificate serial:       0939
Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/2A7A051EB54B11EA85EE266DC4F9AE02.roa
Signing time:             Fri 02 Jan 2026 20:17:05 +0000
ROA not before:           Fri 02 Jan 2026 20:17:05 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.149.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl
                          rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2361 (0x939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
        Validity
            Not Before: Jan  2 20:17:05 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=695827c0-c88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:21:63:26:a3:0f:58:76:bc:42:fc:f9:92:6c:
                    d0:ee:a6:3b:c2:c8:82:a1:b7:22:d1:66:3c:a9:7c:
                    66:92:6c:cd:36:b6:74:c1:a8:64:18:23:e8:fc:a8:
                    13:75:2e:1f:2f:95:2e:f5:40:7a:4c:9a:15:d8:fd:
                    be:0e:08:e2:a4:24:bf:64:62:d5:16:cb:65:83:2b:
                    d9:46:cd:49:68:68:b0:82:82:3a:f9:c8:79:93:7c:
                    fd:2a:8f:af:01:08:06:95:01:da:92:73:08:7d:30:
                    0b:ae:86:06:0f:db:5c:77:63:b2:19:66:c6:fe:ee:
                    73:e2:fa:11:c4:2e:1e:13:18:8a:8c:d9:ca:19:eb:
                    be:5e:80:6b:2b:3c:96:3c:2c:50:12:2d:30:73:c0:
                    ad:00:3f:c1:a8:18:d6:d1:d0:92:88:59:18:e9:a2:
                    6d:02:23:fe:0f:db:72:6f:cf:f8:7c:fc:47:41:b6:
                    d1:45:41:7f:6e:06:2e:ac:ae:63:d4:d0:15:77:7f:
                    37:76:17:0a:db:06:78:67:10:bf:e0:96:8c:9d:ba:
                    ee:e2:13:d0:70:84:4a:42:94:98:9b:d7:48:4e:84:
                    4c:28:1d:37:5e:46:a0:5b:c4:a1:33:68:15:fc:d0:
                    98:f2:e5:68:ec:73:8d:14:91:d3:42:54:81:48:91:
                    18:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A3:3E:6D:E8:72:BD:C3:0E:7F:85:F4:20:AF:5C:7F:82:C9:C9:1D
            X509v3 Authority Key Identifier:
                keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/2A7A051EB54B11EA85EE266DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:ea:40:39:1a:b3:d4:0b:0a:24:6c:be:1c:a5:fe:d6:0c:43:
         ee:e0:6a:24:93:87:55:b7:02:7f:d1:45:5f:17:f4:fd:4b:f6:
         5b:08:b5:f4:5b:ad:57:31:6d:2c:db:fd:3b:4d:8f:f4:09:c0:
         44:fc:01:13:49:74:e8:24:ea:52:4a:7b:fb:f6:f3:7a:84:48:
         dc:b0:7d:a2:a0:ee:ee:6d:93:27:20:b1:c6:09:d3:4d:f0:fc:
         96:91:fa:84:c4:d8:2c:c8:db:6f:e9:5b:25:1d:1a:a6:a3:43:
         85:ba:12:9f:96:99:8b:e2:b1:ae:46:c9:44:39:0e:35:33:d9:
         ff:7c:60:88:1d:c5:30:78:4c:0c:43:8e:30:b8:d9:9a:79:90:
         6f:bc:5b:e8:7a:96:e4:23:c7:ff:64:ea:c2:08:e5:44:a3:2b:
         4a:0b:29:16:43:0f:c4:5c:52:5c:f0:3c:55:99:29:f1:bb:f3:
         41:c4:07:04:0d:c2:55:a7:20:ee:63:4f:ad:f8:d8:75:6e:00:
         d8:a5:bc:73:1d:b5:16:ae:e9:ce:fc:52:b1:dd:e8:d6:64:d2:
         ab:28:68:0e:81:eb:11:e0:a9:95:e6:2c:69:df:e2:51:cc:60:
         5a:ac:fc:68:f2:e3:b8:72:7b:ba:b6:b4:c2:aa:bf:4b:3a:39:
         31:89:1f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:02:11 2026 by rpki-client