This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8D3981D8E27F11EEA6719536C4F9AE02.roa
File:                     8D3981D8E27F11EEA6719536C4F9AE02.roa (raw, json)
Hash identifier:          AYBJoruu5v5SkYQ+WlcrPrPDYrZMQWmAucPO9k3+Mbo=
Subject key identifier:   3A:F3:68:4F:70:A7:68:9C:DF:5F:43:E5:94:7F:08:93:E6:7B:01:A6
Certificate issuer:       /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial:       1D85
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8D3981D8E27F11EEA6719536C4F9AE02.roa
Signing time:             Fri 30 Jan 2026 16:14:24 +0000
ROA not before:           Fri 30 Jan 2026 16:14:24 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.81.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
                          rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 15:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7557 (0x1d85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
        Validity
            Not Before: Jan 30 16:14:24 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697cd8e0-714e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c3:45:4f:c2:76:9f:dc:19:e4:14:c1:f1:e3:
                    52:05:eb:62:ee:bd:ea:e5:4f:6f:b5:12:43:25:b6:
                    31:43:0f:ea:f3:ef:48:cd:9e:5e:33:b7:32:a4:04:
                    7d:16:b7:f0:23:1b:f4:06:e6:5f:a5:05:40:40:dc:
                    1d:2e:6e:61:b8:3f:a7:21:ca:cb:0b:63:12:65:e2:
                    1f:22:14:93:2e:8b:67:27:38:4d:46:4a:78:14:1b:
                    c7:fc:b8:b8:05:79:d7:53:d9:85:42:ac:28:e9:0f:
                    9b:49:b5:67:60:9e:6b:fc:a7:44:d7:89:f9:51:43:
                    3f:62:bf:5d:dd:00:87:8d:ea:53:2f:01:0b:df:b5:
                    ee:71:89:2e:16:ca:52:ac:1c:8f:25:a2:08:cf:c3:
                    3c:58:3c:da:e9:a4:5f:ac:4e:d5:dd:64:ac:25:72:
                    c9:7c:34:da:9f:b9:84:4a:29:ca:a1:90:20:b2:15:
                    02:5a:7c:54:81:8e:40:73:bc:f7:ce:20:e0:d3:ef:
                    25:52:75:1c:0b:eb:ae:5a:73:e1:8a:0d:c2:b3:3a:
                    27:63:01:db:fa:9b:82:2d:da:c1:16:eb:a4:21:8a:
                    2c:2a:98:49:1f:47:7d:79:ee:cc:f6:90:72:15:e7:
                    87:be:22:63:16:b2:43:2d:5e:1d:d6:1b:7b:b9:6b:
                    ae:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F3:68:4F:70:A7:68:9C:DF:5F:43:E5:94:7F:08:93:E6:7B:01:A6
            X509v3 Authority Key Identifier:
                keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8D3981D8E27F11EEA6719536C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:be:0d:f9:94:45:f3:c4:54:ea:c7:19:f0:ce:1d:5c:57:11:
         25:24:56:15:62:38:7b:cd:40:47:8f:0d:7b:ea:a7:5d:8e:f5:
         65:54:e0:ab:ec:9e:bc:ce:c9:06:0c:22:19:4b:dd:1b:a8:04:
         86:5d:53:39:b1:d4:d4:95:66:28:fc:e4:3b:c3:b4:b9:09:62:
         ad:e0:f8:51:c2:06:71:84:06:90:c6:b6:bb:fb:77:7a:38:a5:
         29:95:56:6d:cb:f1:f4:9e:b4:f2:86:5f:81:87:c0:ba:33:b3:
         21:49:b7:19:fa:ca:bb:d4:14:7a:df:69:c4:da:2d:0a:b7:3c:
         fc:f3:f6:70:7d:e8:39:c5:26:1a:7f:c0:06:c9:4d:5d:f3:f4:
         3a:64:c6:a8:e2:32:97:00:8d:08:18:00:30:a6:ba:3e:6b:a5:
         6a:01:33:50:0c:8a:8e:fe:74:ad:f0:7a:b3:2a:ea:7b:5a:ca:
         b7:87:a8:41:a1:21:95:2b:3a:41:5d:3d:f0:9d:2b:9e:ba:5d:
         3b:8a:38:96:61:15:d5:e1:76:8e:4c:5c:07:b4:8e:77:49:33:
         ba:68:19:d2:ac:64:34:7b:33:21:8b:32:35:1d:01:b2:8f:f6:
         05:c8:8a:38:84:d0:b1:46:0f:90:93:99:a5:a2:13:65:79:6c:
         8b:f2:3b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:11:00 2026 by rpki-client