This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/406D4EFEF82E11F0BC7D9928396F56BC.roa
File:                     406D4EFEF82E11F0BC7D9928396F56BC.roa (raw, json)
Hash identifier:          mzmeVG68cQxfXJ1uQwAAdYYB8/rqWbK/gyU4nLqLIgI=
Subject key identifier:   91:16:CB:9F:57:90:08:2F:F0:B1:24:41:00:56:68:46:D5:22:F2:67
Certificate issuer:       /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial:       0A12
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/406D4EFEF82E11F0BC7D9928396F56BC.roa
Signing time:             Fri 23 Jan 2026 07:36:38 +0000
ROA not before:           Fri 23 Jan 2026 07:36:38 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.142.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
                          rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2578 (0xa12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
        Validity
            Not Before: Jan 23 07:36:38 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69732506-1b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:6b:96:d1:03:7f:78:de:2e:96:8d:54:9e:
                    f5:d4:32:a7:24:29:ec:bd:70:f4:11:de:27:91:c1:
                    33:94:a4:bb:c8:5c:c8:49:db:3e:cd:83:03:90:93:
                    1c:43:f7:51:02:9c:e7:b9:0a:9d:91:fa:06:1b:54:
                    6f:70:21:8b:9e:e9:00:52:99:a0:af:c1:18:21:4e:
                    5c:7d:a1:46:f0:2d:57:13:7d:5c:46:31:c4:e4:da:
                    4d:9d:df:36:b5:5e:41:bc:97:1d:d3:00:5c:eb:ad:
                    3b:95:c4:16:31:db:04:d8:d2:a4:65:8b:f5:e7:1c:
                    77:fb:81:f9:db:9c:c1:bb:9d:95:31:7e:5a:f2:7b:
                    4a:d6:71:ed:18:bf:23:78:bd:0b:33:da:a5:68:5f:
                    3a:f0:48:49:92:62:c9:a7:12:f5:82:50:7b:db:d7:
                    bb:6e:6a:a8:69:15:f3:5a:54:87:00:df:ee:af:a0:
                    9a:0b:86:57:b7:f4:a2:ce:95:5d:6e:06:c9:80:32:
                    61:ff:b5:a8:79:fc:2a:c9:4f:c8:39:87:75:af:bf:
                    84:5a:fe:b2:b8:94:57:8f:39:60:b2:9f:e4:de:2c:
                    1f:d3:e8:4f:53:60:3a:02:52:75:71:a4:58:da:20:
                    a4:4f:bf:ca:36:9c:f9:a9:73:d4:55:6e:ef:76:89:
                    a9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:16:CB:9F:57:90:08:2F:F0:B1:24:41:00:56:68:46:D5:22:F2:67
            X509v3 Authority Key Identifier:
                keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/406D4EFEF82E11F0BC7D9928396F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:4b:1c:c0:bc:dc:ee:b5:e7:7f:21:14:06:59:45:8e:2f:03:
         b0:ac:6f:1f:c3:a4:59:01:6c:e3:ec:79:83:47:4a:01:7d:72:
         73:3e:97:92:9b:5a:e7:5f:74:01:61:9c:da:19:b8:9f:ec:ed:
         bd:58:7d:aa:2a:da:5d:86:5a:81:8e:f7:9e:39:09:cc:23:09:
         37:48:62:ab:77:e9:85:2c:6d:1a:94:99:e2:b3:1d:7d:c9:f7:
         44:df:06:aa:e9:61:17:d5:6d:90:7c:8a:04:59:b6:43:f7:93:
         51:30:f7:c1:68:d5:e6:da:41:6e:89:47:57:50:58:3c:4f:dc:
         19:b9:16:d3:3a:db:d8:ec:ca:a3:3e:01:6f:1c:a8:0f:75:50:
         0f:87:87:9f:cf:cb:22:c8:8b:f1:73:b2:05:62:a1:51:b6:72:
         f4:bf:1c:30:ff:0f:77:91:97:2e:1f:eb:0d:11:81:b5:80:3d:
         42:af:0a:79:84:bb:67:df:71:44:83:e9:12:ee:d9:5f:00:7b:
         4a:21:ca:2e:80:2e:eb:28:c4:ab:9f:7e:e7:a9:21:06:af:d9:
         34:5c:e5:1a:a6:70:fb:19:49:e9:b5:61:aa:f3:1b:ec:9a:dd:
         58:a0:88:c1:90:88:b5:14:9b:99:a4:d9:40:26:ee:ec:e2:ae:
         a6:f5:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:57:59 2026 by rpki-client