This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/24D6C7C4F1FD11F0B766F66D486F56BC.roa
File:                     24D6C7C4F1FD11F0B766F66D486F56BC.roa (raw, json)
Hash identifier:          28n7H5WU9QZoT+p5wF3EMxVxiO9h8d98XuG9AYVm9e8=
Subject key identifier:   47:27:8E:8C:8E:B3:79:4C:E9:55:5E:0C:9A:35:A6:AF:C1:3F:40:BB
Certificate issuer:       /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
Certificate serial:       3536
Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/24D6C7C4F1FD11F0B766F66D486F56BC.roa
Signing time:             Thu 15 Jan 2026 10:29:59 +0000
ROA not before:           Thu 15 Jan 2026 10:29:59 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138985
IP address blocks:        103.255.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl
                          rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13622 (0x3536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
        Validity
            Not Before: Jan 15 10:29:59 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6968c1a7-6182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:25:4c:2c:24:4f:64:78:a9:2d:3a:05:8d:56:
                    d0:95:66:ec:ed:e6:8e:0c:2a:59:a1:ed:51:ae:de:
                    e8:46:25:ab:1e:f8:e5:5e:73:40:08:71:a5:ab:7f:
                    37:44:94:49:7b:e0:17:a3:bc:85:f8:e3:40:1a:44:
                    a7:09:3d:b4:a2:7b:9e:5c:3c:3c:1f:0b:65:41:9f:
                    04:9d:f8:e4:49:d5:77:c7:5b:3b:fb:73:60:a6:23:
                    c5:cf:4f:b5:ae:53:05:96:cc:8b:66:87:85:52:a1:
                    e6:e6:71:93:63:a6:e6:f5:de:06:11:78:1c:07:2e:
                    6c:52:8d:ed:ea:02:1b:65:47:2f:82:68:ff:3c:3e:
                    4d:44:a0:24:74:3c:ca:cd:3f:91:f6:2a:1e:bb:32:
                    a0:3d:85:98:51:3c:ce:c5:f8:9a:c1:1c:32:e3:5f:
                    5d:c5:2a:80:d3:83:77:0a:13:39:bd:b5:01:ad:75:
                    05:fa:a7:f0:0e:55:66:ce:1d:3a:fe:73:8c:04:69:
                    fc:ce:55:cf:80:3a:fd:75:9e:5c:4f:de:e2:7f:9a:
                    18:fe:49:0e:c2:92:9f:8d:8d:a5:c0:39:20:a1:b1:
                    c1:7a:48:47:6f:6b:2c:fa:6f:4c:aa:5e:8c:0a:2b:
                    9a:5b:f4:08:21:8a:9d:9e:21:aa:27:fd:9a:2e:ad:
                    ae:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:27:8E:8C:8E:B3:79:4C:E9:55:5E:0C:9A:35:A6:AF:C1:3F:40:BB
            X509v3 Authority Key Identifier:
                keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/24D6C7C4F1FD11F0B766F66D486F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:23:47:7d:34:4c:44:81:6e:3e:2d:70:04:90:28:c2:97:f1:
         9e:29:1d:44:b1:c5:53:76:22:fd:c0:66:da:f3:6c:99:36:d1:
         6b:13:01:25:b1:56:ee:ac:f3:13:5b:bc:0a:4a:f3:5d:6f:0a:
         fb:ec:e0:01:45:1c:6a:7e:1c:e5:8d:96:f2:18:e6:2a:f2:48:
         f8:18:3c:f6:d8:a3:5f:22:82:31:23:fe:ef:dd:ee:30:ff:7f:
         bb:30:67:2a:0f:31:d8:0f:7f:58:1f:ea:1f:95:38:85:8c:76:
         a8:f6:a0:5a:b0:af:43:98:7e:02:7a:63:81:11:dd:f0:2e:4e:
         b6:ea:cb:a5:7b:c1:0f:18:3c:10:b4:01:d6:aa:26:da:12:82:
         c7:4a:f5:ff:57:9a:cc:c6:bb:48:42:1b:0d:58:6c:13:ab:5d:
         c4:5a:da:ff:42:bf:f1:7b:f1:05:38:84:10:6a:52:74:27:22:
         3f:cc:18:71:38:d0:9a:84:79:dc:00:02:71:ef:51:1f:34:77:
         c4:ca:cb:3c:f6:7e:94:2a:83:57:28:cb:b8:2d:05:83:00:3f:
         20:46:8e:30:68:d2:f9:40:bf:7d:05:ae:4f:f9:53:bf:ce:9f:
         fc:01:d3:8c:3f:04:fb:42:b9:1f:14:71:16:9c:55:b0:61:61:
         5e:ac:ae:a6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB
QzJFMjJEMzcwHhcNMjYwMTE1MTAyOTU5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTY4YzFhNy02MTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9yVMLCRPZHipLToFjVbQlWbs7eaODCpZoe1Rrt7oRiWrHvjlXnNACHGlq383
RJRJe+AXo7yF+ONAGkSnCT20onueXDw8HwtlQZ8EnfjkSdV3x1s7+3NgpiPFz0+1
rlMFlsyLZoeFUqHm5nGTY6bm9d4GEXgcBy5sUo3t6gIbZUcvgmj/PD5NRKAkdDzK
zT+R9ioeuzKgPYWYUTzOxfiawRwy419dxSqA04N3ChM5vbUBrXUF+qfwDlVmzh06
/nOMBGn8zlXPgDr9dZ5cT97if5oY/kkOwpKfjY2lwDkgobHBekhHb2ss+m9Mql6M
CiuaW/QIIYqdniGqJ/2aLq2u+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFEcnjoyO
s3lM6VVeDJo1pq/BP0C7MB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE
NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM
VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUQ2NEQvRDkzMzNGRTQxRDZFMTFFMkE4NTA4MEIwMDhCMDJDRDIvMjRENkM3QzRG
MUZEMTFGMEI3NjZGNjZENDg2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn/5cwDQYJKoZIhvcNAQELBQADggEBAFMjR300TESBbj4t
cASQKMKX8Z4pHUSxxVN2Iv3AZtrzbJk20WsTASWxVu6s8xNbvApK811vCvvs4AFF
HGp+HOWNlvIY5irySPgYPPbYo18igjEj/u/d7jD/f7swZyoPMdgPf1gf6h+VOIWM
dqj2oFqwr0OYfgJ6Y4ER3fAuTrbqy6V7wQ8YPBC0AdaqJtoSgsdK9f9XmszGu0hC
Gw1YbBOrXcRa2v9Cv/F78QU4hBBqUnQnIj/MGHE40JqEedwAAnHvUR80d8TKyzz2
fpQqg1coy7gtBYMAPyBGjjBo0vlAv30Frk/5U7/On/wB04w/BPtCuR8UcRacVbBh
YV6srqY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:00:10 2026 by rpki-client