This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/D1DB990C1A3811EAB6F9C83DC4F9AE02.roa
File:                     D1DB990C1A3811EAB6F9C83DC4F9AE02.roa (raw, json)
Hash identifier:          T2cVM1R4V9dUlp0vRIyVCquOgDSMqUP1NVLLfsm5kJw=
Subject key identifier:   73:8A:E3:FC:3B:22:DC:83:13:B0:EB:5A:9C:13:23:07:D8:6B:78:07
Certificate issuer:       /CN=A919FD74/serialNumber=867A0714966A9D7D8B202DFB1DE2213C02C03627
Certificate serial:       0C58
Authority key identifier: 86:7A:07:14:96:6A:9D:7D:8B:20:2D:FB:1D:E2:21:3C:02:C0:36:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/D1DB990C1A3811EAB6F9C83DC4F9AE02.roa
Signing time:             Tue 20 Jan 2026 18:15:58 +0000
ROA not before:           Tue 20 Jan 2026 18:15:58 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139854
IP address blocks:        103.146.10.0/23 maxlen: 24
                          2001:df2:3980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.crl
                          rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3160 (0xc58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FD74, serialNumber=867A0714966A9D7D8B202DFB1DE2213C02C03627
        Validity
            Not Before: Jan 20 18:15:58 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=696fc65e-f71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1b:c0:ac:c5:e8:d2:56:16:a9:b1:00:ef:03:
                    fe:68:98:bb:c8:70:9b:ae:1e:cf:78:36:02:9b:05:
                    64:9d:70:71:93:11:70:b5:42:b1:a7:56:30:04:4d:
                    09:9a:81:db:b7:01:45:33:8d:89:eb:b6:f6:6c:35:
                    4a:19:ff:30:21:ce:9c:f9:3f:dc:65:5b:b8:8c:9c:
                    77:71:9f:bf:d8:8a:55:7e:94:c9:34:f5:a4:7e:a0:
                    8d:dc:f8:58:cd:b1:d4:61:24:1e:37:eb:f8:80:c5:
                    10:a5:0d:b4:0b:6e:8a:59:a9:18:54:c6:55:8f:e5:
                    80:4b:02:5c:61:1c:56:f3:2f:20:a4:9a:58:36:64:
                    6d:ff:43:31:7d:48:ec:9f:9d:df:33:ac:a4:b3:d7:
                    e2:3d:65:aa:dd:f6:73:7a:53:c6:25:30:64:2a:25:
                    96:b9:8d:7b:f7:d1:ff:35:59:a0:a2:6b:c5:93:ec:
                    5c:86:a2:9d:4c:b9:52:5d:e5:73:36:64:a3:b9:6d:
                    08:33:c9:bb:ab:c2:bf:2a:11:5b:7e:1b:fd:6d:d4:
                    97:ea:b8:f2:e6:3f:70:a8:eb:f1:ce:6c:d6:ea:12:
                    fb:a2:59:9e:39:32:31:1d:f6:47:40:a8:d0:84:8c:
                    c6:2c:da:a0:6c:e8:e9:21:80:08:8c:a8:e1:ff:84:
                    20:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8A:E3:FC:3B:22:DC:83:13:B0:EB:5A:9C:13:23:07:D8:6B:78:07
            X509v3 Authority Key Identifier:
                keyid:86:7A:07:14:96:6A:9D:7D:8B:20:2D:FB:1D:E2:21:3C:02:C0:36:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/D1DB990C1A3811EAB6F9C83DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.10.0/23
                IPv6:
                  2001:df2:3980::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:a6:5c:5a:26:25:f9:28:c0:31:8b:3c:76:7f:72:dc:00:5c:
         21:7a:54:61:23:60:b2:63:82:3f:99:aa:e3:7a:c7:aa:89:c6:
         9c:55:ce:f1:ed:8d:ea:59:94:0d:d3:03:ed:c9:4d:fd:0e:2b:
         cf:a2:8c:dc:4b:8a:cd:8d:ef:af:e1:d8:23:60:02:07:5f:e2:
         5c:2e:7b:7f:23:6f:ea:a7:86:20:a4:83:46:c3:93:36:d0:ab:
         2c:cf:bb:e3:a2:ce:c6:12:e2:2c:2b:1a:c4:e5:c6:e3:cb:29:
         71:5f:39:ea:9e:61:2a:83:64:6b:c5:7a:a6:67:75:fd:9e:fb:
         30:29:16:3d:c1:d8:b9:a8:50:e3:c3:03:56:b5:e0:85:48:ec:
         45:40:f0:c7:4c:a0:e3:8b:18:52:0e:48:01:2b:b6:9f:f8:b0:
         1b:25:70:11:cc:d9:57:cf:de:98:17:90:f1:4b:b5:be:18:ed:
         bf:0c:23:26:60:b2:3e:47:5f:37:d8:2b:72:a2:aa:a2:d1:57:
         f0:77:5f:8d:3b:02:cd:ee:bf:f9:17:e9:71:25:66:f2:96:2d:
         ae:33:cd:17:52:c2:17:53:3f:f2:5f:be:1f:61:99:fa:5f:aa:
         1e:35:26:d4:fe:45:20:fe:39:5a:04:45:4a:1c:21:41:35:73:
         63:7c:50:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:32:46 2026 by rpki-client