This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/7E8114F414E611EB82C98471C4F9AE02.roa
File:                     7E8114F414E611EB82C98471C4F9AE02.roa (raw, json)
Hash identifier:          5irZrEFk8FHbNW4pjJl+pAv8i1MZscE1joryry7BH0g=
Subject key identifier:   C1:A4:7C:A9:CF:01:9E:78:E5:53:57:F8:9A:45:02:B6:8E:13:2B:47
Certificate issuer:       /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
Certificate serial:       0808
Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/7E8114F414E611EB82C98471C4F9AE02.roa
Signing time:             Mon 22 Dec 2025 21:17:02 +0000
ROA not before:           Mon 22 Dec 2025 21:17:02 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     55720
IP address blocks:        45.116.172.0/24 maxlen: 24
                          45.116.173.0/24 maxlen: 24
                          45.116.174.0/24 maxlen: 24
                          45.116.175.0/24 maxlen: 24
                          103.244.0.0/24 maxlen: 24
                          103.244.1.0/24 maxlen: 24
                          103.244.2.0/24 maxlen: 24
                          103.244.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl
                          rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 20:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2056 (0x808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
        Validity
            Not Before: Dec 22 21:17:02 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6949b54e-5efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:9e:a7:b3:c5:f1:c8:1c:57:54:1a:2e:64:
                    3f:5b:75:10:49:a6:b5:ab:2f:37:16:55:c8:77:ea:
                    f1:b3:45:b2:57:ea:7b:9e:79:89:2b:04:78:7a:12:
                    f3:d4:27:78:59:c1:65:45:86:0d:4b:07:1c:41:f2:
                    02:1f:e0:bb:6c:b2:36:cf:48:97:f6:d8:87:68:15:
                    dc:3b:63:dc:18:de:e6:dd:99:6f:37:04:8b:f4:19:
                    a7:8e:2e:6b:05:34:15:be:37:3d:d0:b7:11:27:34:
                    90:be:9b:d8:75:66:87:e9:80:4b:c4:0a:4f:16:c9:
                    ec:61:97:0c:fc:e6:06:c6:2d:e4:03:b0:23:dc:7f:
                    00:93:4c:a2:e5:41:7e:dc:91:92:23:f5:58:ed:3d:
                    86:8e:e7:fd:51:07:83:9e:d4:70:bd:ad:3d:0d:cf:
                    a9:1f:14:19:d5:ba:b8:2b:40:a8:8c:76:9a:bd:2f:
                    e8:8a:83:3c:04:26:f0:ce:09:05:ae:5d:7b:d6:eb:
                    e4:82:50:24:9c:20:17:ad:d6:6c:3b:96:e2:a6:60:
                    13:b7:57:cd:8f:a3:d7:90:42:fa:2d:52:36:db:d3:
                    70:10:2d:b7:f1:10:32:2a:5e:1f:a7:70:49:b4:7f:
                    07:63:97:d3:94:17:ab:a7:5c:19:29:0a:e1:42:6e:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A4:7C:A9:CF:01:9E:78:E5:53:57:F8:9A:45:02:B6:8E:13:2B:47
            X509v3 Authority Key Identifier:
                keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/7E8114F414E611EB82C98471C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.172.0/22
                  103.244.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:30:b5:0a:92:6a:9c:19:dd:8a:48:f6:08:63:a0:bd:5a:cc:
         db:aa:78:08:ad:3a:13:e9:e6:77:16:45:dc:5f:96:15:69:12:
         16:d6:65:26:31:54:d7:6d:15:11:f8:a9:68:83:e5:eb:05:9d:
         46:ae:1e:95:3a:75:39:34:94:e5:7a:99:f9:fc:78:2b:8f:14:
         72:37:39:02:97:96:96:35:92:ec:f3:04:dd:fb:17:fd:d1:78:
         fe:54:2e:89:8a:34:56:a6:83:c0:87:4d:f1:96:03:3b:09:ae:
         cf:28:ec:d7:61:04:1b:71:ef:b8:17:09:9d:47:15:f1:d4:84:
         2e:a3:0f:be:10:f1:81:bd:90:eb:3f:4e:e6:b8:9a:ae:48:dc:
         9c:17:f6:c8:cd:12:40:bb:b2:62:b5:fa:4e:2d:21:8f:24:d2:
         0e:f7:39:11:0c:31:c9:e3:d0:81:17:ab:6e:c6:12:ff:07:a5:
         0d:cd:8e:ac:83:aa:01:f2:8e:2e:47:14:96:c4:15:ac:6a:58:
         9d:4a:47:77:22:88:d5:82:d1:75:39:1a:e1:ac:e4:17:5a:8e:
         5f:58:03:01:cc:64:d0:f6:33:cf:7a:b3:ad:c0:92:f7:9d:f9:
         84:aa:b1:7d:44:3c:e6:4a:8d:0f:51:91:85:dc:32:06:f2:1b:
         bb:70:b7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:13:01 2026 by rpki-client