This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/26C5F4148FC111EF84928A68C4F9AE02.roa
File:                     26C5F4148FC111EF84928A68C4F9AE02.roa (raw, json)
Hash identifier:          oAqC82kEWq2BnUC7wyI1OnAbQ4JABjG40uWiB/vTfHk=
Subject key identifier:   F2:B1:F4:FD:69:E9:C9:14:8D:0E:1D:55:88:58:45:8B:1E:B2:7B:80
Certificate issuer:       /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
Certificate serial:       0687
Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/26C5F4148FC111EF84928A68C4F9AE02.roa
Signing time:             Fri 12 Dec 2025 21:58:36 +0000
ROA not before:           Fri 12 Dec 2025 21:58:36 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     141434
IP address blocks:        103.159.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl
                          rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1671 (0x687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116B5E, serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
        Validity
            Not Before: Dec 12 21:58:36 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=693c900c-b922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:e3:ce:5f:97:7d:92:6f:19:53:dc:af:2a:
                    eb:33:0a:06:be:ad:52:6c:4f:ee:ef:be:00:23:37:
                    81:a8:61:9c:25:33:6c:76:39:d7:32:47:56:3d:43:
                    88:b8:30:cc:48:1f:62:2a:fa:9b:60:0b:21:f0:9f:
                    66:1e:33:74:32:9a:fc:0d:f0:45:ac:b2:32:88:c0:
                    64:c5:c6:9d:fa:97:42:b5:01:d1:5e:3b:73:74:8f:
                    e5:4a:e3:b2:5a:d5:59:8e:1b:ab:f7:f9:a9:9a:1d:
                    f7:5d:a7:7c:33:5b:eb:d1:a4:ff:da:0c:61:b1:97:
                    20:9f:b3:bb:92:96:eb:e6:8d:6e:ff:07:94:c2:74:
                    3e:e6:ac:00:ac:ae:ce:a6:d3:73:31:40:8e:c3:f0:
                    ca:fd:24:8b:a4:4e:cc:6b:27:89:9f:f3:46:39:47:
                    12:0b:b0:32:a8:d6:08:ea:ea:94:df:a5:a0:d7:41:
                    8f:97:fd:d8:58:ae:86:ec:99:40:2a:05:b5:78:cf:
                    d8:67:7e:80:81:51:7a:12:17:4c:49:df:8b:cd:d7:
                    bf:8d:a2:7e:19:d5:b7:dc:23:c2:fe:0b:24:f7:6b:
                    b0:66:58:56:f7:8d:25:85:24:78:a9:31:d9:c3:30:
                    f4:d6:e9:ad:a9:88:60:20:bc:19:2a:9e:b3:64:fa:
                    5d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B1:F4:FD:69:E9:C9:14:8D:0E:1D:55:88:58:45:8B:1E:B2:7B:80
            X509v3 Authority Key Identifier:
                keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/26C5F4148FC111EF84928A68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:de:2d:ea:30:d5:9e:a3:a2:70:31:51:43:90:59:ae:1d:8f:
         83:75:b0:a3:d1:83:38:fb:5e:70:e3:52:84:12:ce:c2:d7:3f:
         a1:0c:67:ad:3b:3b:3c:ab:b8:dc:f7:96:48:4e:c0:12:df:27:
         ae:20:d8:46:71:5f:16:1b:b9:09:2d:db:fc:e5:9c:c7:89:43:
         01:78:76:f7:e1:81:28:30:ee:14:f3:63:78:56:16:bd:4a:8a:
         72:2d:a1:63:94:ed:fa:12:69:6f:91:4b:9b:a5:e3:21:b8:2b:
         2a:f2:30:e1:44:d5:08:a0:6a:8b:f3:dc:0e:21:6f:2e:d0:a6:
         96:32:80:e6:f9:22:c3:dd:0c:01:3d:79:b4:aa:c8:4e:6c:7a:
         ba:12:5a:7a:84:de:b4:86:3b:db:db:87:8f:53:3b:13:01:22:
         00:f8:bf:3c:94:48:16:3c:47:f8:71:46:eb:87:32:2e:44:9e:
         ec:51:9a:12:a6:85:fa:bd:be:3d:bc:60:bf:db:01:3c:07:e9:
         8e:72:97:f3:8a:95:3f:45:3a:c1:6c:4d:00:d1:c8:76:96:42:
         22:77:24:23:60:b0:6b:47:da:44:09:b6:2b:8e:b1:1b:b0:18:
         39:f0:d0:39:85:dd:4b:8c:87:64:7d:71:07:c7:d3:2b:eb:0f:
         e9:9e:25:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 22:33:14 2025 by rpki-client