This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/074A1CE2F1FD11F0BDA01C59486F56BC.roa
File:                     074A1CE2F1FD11F0BDA01C59486F56BC.roa (raw, json)
Hash identifier:          eLq+O9W8S1dlLtDBHI7ZDknLWVsMhOc+XeKIC2YtBbg=
Subject key identifier:   FF:66:3C:BD:7A:75:9B:16:36:4B:F4:83:36:A7:B6:AB:D7:37:92:48
Certificate issuer:       /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
Certificate serial:       3534
Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/074A1CE2F1FD11F0BDA01C59486F56BC.roa
Signing time:             Thu 15 Jan 2026 10:29:10 +0000
ROA not before:           Thu 15 Jan 2026 10:29:10 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     136030
IP address blocks:        103.255.150.0/24 maxlen: 24
                          180.149.214.0/24 maxlen: 24
                          180.149.215.0/24 maxlen: 24
                          180.149.216.0/24 maxlen: 24
                          180.149.217.0/24 maxlen: 24
                          180.149.218.0/24 maxlen: 24
                          180.149.219.0/24 maxlen: 24
                          180.149.220.0/24 maxlen: 24
                          180.149.221.0/24 maxlen: 24
                          180.149.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl
                          rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13620 (0x3534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
        Validity
            Not Before: Jan 15 10:29:10 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6968c176-bcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ef:57:e9:64:84:6c:30:e5:30:45:26:93:49:
                    06:a7:58:b0:4d:4c:bd:f6:e9:3e:45:01:b1:f8:87:
                    4e:07:2d:19:9e:b2:cc:7d:22:b1:e8:27:82:e1:5d:
                    32:c4:94:e3:40:56:f6:25:37:f1:e5:d0:33:75:6f:
                    69:08:5f:f9:77:63:41:95:d8:ef:07:47:33:ed:4a:
                    81:4f:ac:7f:e7:73:31:91:58:77:c5:31:50:b6:37:
                    e5:f9:92:26:87:ab:14:3e:2f:f1:43:6a:8f:b2:9f:
                    2a:4d:30:23:cb:12:ba:a0:99:88:34:39:a6:b7:aa:
                    da:5b:b2:64:9b:9e:6e:20:1a:75:49:45:ba:9f:9a:
                    f6:c2:4c:66:80:d5:55:8f:2a:8f:82:41:11:f7:b6:
                    a7:13:61:9f:0d:71:a6:e3:fa:10:f6:9b:01:24:57:
                    fd:57:2c:6b:28:3e:66:4c:29:df:bb:19:fa:89:3a:
                    47:7d:cf:64:94:9f:85:57:27:83:ce:82:f0:f8:dc:
                    44:af:93:9e:a8:52:60:5c:fb:95:2a:f9:b0:d5:a5:
                    df:b3:85:da:e3:6c:0f:de:38:c5:2c:33:b9:2b:2c:
                    47:a8:b8:0a:3e:10:3d:6f:4f:50:81:c0:c5:6b:a0:
                    22:fb:38:d9:fe:25:94:86:30:f3:2a:67:93:77:1f:
                    a2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:66:3C:BD:7A:75:9B:16:36:4B:F4:83:36:A7:B6:AB:D7:37:92:48
            X509v3 Authority Key Identifier:
                keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/074A1CE2F1FD11F0BDA01C59486F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.150.0/24
                  180.149.214.0-180.149.222.255

    Signature Algorithm: sha256WithRSAEncryption
         1b:64:bc:07:a0:0b:36:4f:04:c5:26:c0:86:44:a2:56:b8:9c:
         b1:cb:b5:91:4c:0d:b4:ed:e5:49:da:8f:0d:3a:c3:17:68:35:
         46:d3:ca:3f:53:ae:89:83:cb:d1:49:c1:98:39:54:5e:cc:b3:
         c8:f4:2b:b4:ef:c8:7e:0e:f6:42:0b:4b:f9:87:45:5d:6c:76:
         a9:53:30:2e:df:81:c6:95:f6:f8:d4:09:ca:e2:92:5e:38:56:
         b2:2e:7f:d5:a3:bc:06:dc:3b:e0:90:cd:f1:3e:3c:32:79:a5:
         82:89:47:b3:4e:22:fa:4f:54:d0:a5:fa:c7:01:cf:33:e6:ff:
         e3:94:16:89:4d:90:51:66:32:78:81:94:5f:51:b6:a1:19:fa:
         2e:cc:64:87:4d:6e:06:7f:88:b9:bb:75:9e:ad:9b:64:49:c3:
         2c:c3:d2:a7:8c:03:e3:88:5a:65:7a:5b:7b:31:0e:4c:7d:55:
         d5:78:a7:47:4e:5c:fc:52:26:e4:be:31:b2:61:d1:af:15:b8:
         84:a9:97:76:01:52:f5:e8:a8:f7:36:06:1e:79:f4:60:64:86:
         84:07:08:7e:40:d0:c0:f7:4c:05:99:2e:a4:c2:c0:e0:ee:c4:
         d0:5a:25:a4:ff:99:0c:e8:46:45:76:f0:b2:e4:86:15:4e:20:
         31:9d:21:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:37:02 2026 by rpki-client