This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/D2861480EF7111F083B369325B6F56BC.roa
File:                     D2861480EF7111F083B369325B6F56BC.roa (raw, json)
Hash identifier:          B0Lue4k5q/P8x3NWtKnj+hjinQYT4sflDVirfe7rdZs=
Subject key identifier:   30:A4:D3:B1:8D:60:61:B8:8B:18:95:4A:5B:CA:DC:F9:C8:38:88:2D
Certificate issuer:       /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial:       0334
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/D2861480EF7111F083B369325B6F56BC.roa
Signing time:             Mon 12 Jan 2026 04:47:39 +0000
ROA not before:           Mon 12 Jan 2026 04:47:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152179
IP address blocks:        103.227.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
                          rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 00:12:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
        Validity
            Not Before: Jan 12 04:47:39 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69647ceb-ee20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:f9:1c:4c:b9:49:13:4c:98:a1:2a:ae:cf:
                    97:14:ce:91:32:7c:5d:fd:53:bb:45:96:d7:24:79:
                    35:92:c6:2f:4c:49:8e:a2:24:94:6e:17:26:14:9a:
                    89:bb:8c:4e:ef:05:3d:6b:ef:fb:8e:7e:eb:2b:93:
                    a8:31:34:72:ad:ab:4d:6e:f7:f5:1b:b2:cb:73:66:
                    6d:35:67:67:eb:55:85:5d:b6:6e:34:f8:47:5b:29:
                    6b:0f:5d:87:41:1c:06:6d:df:86:74:31:73:d3:68:
                    ca:7f:72:52:91:45:7d:c7:27:f2:74:6b:84:ef:e7:
                    98:d3:d3:b5:a4:12:fc:43:f2:1e:f9:3a:71:bb:e5:
                    a3:89:c2:f7:fc:d1:56:c6:50:d1:74:f1:66:90:af:
                    3b:51:5b:bb:4a:f4:94:91:e1:65:b7:14:d9:fb:e3:
                    ed:2d:1e:68:9c:74:0c:6b:f1:eb:da:cf:0f:32:78:
                    47:ae:a1:1d:23:00:d4:08:38:cf:11:64:bc:7c:67:
                    75:6f:03:5f:50:83:14:ec:f3:9b:f5:b8:3d:c2:05:
                    0a:9a:11:d0:fa:29:71:92:cc:27:9a:ec:d3:1f:07:
                    e7:7c:ad:12:5d:ff:e5:57:15:87:80:73:dd:1b:2a:
                    3a:ca:90:3d:81:13:21:55:55:91:99:d0:b5:1d:b9:
                    70:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A4:D3:B1:8D:60:61:B8:8B:18:95:4A:5B:CA:DC:F9:C8:38:88:2D
            X509v3 Authority Key Identifier:
                keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/D2861480EF7111F083B369325B6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:69:2e:32:80:a8:f1:a8:6d:03:39:6e:31:3e:b1:01:e3:37:
         25:23:6d:ad:4b:f1:f7:c4:18:70:82:f7:0e:7d:50:bd:bb:0c:
         13:8d:41:cb:a5:5d:34:93:55:a8:a4:8b:f5:19:39:9b:6b:00:
         bf:2f:54:32:48:be:97:06:70:81:79:e1:65:1f:06:7b:6b:4e:
         4e:98:bb:42:67:14:36:67:f0:65:de:66:9d:50:78:80:8d:66:
         7a:bd:cf:44:9d:18:9e:5e:19:72:ea:d5:f7:b2:f6:bb:f0:c5:
         a7:37:07:fc:03:e6:a2:42:a9:64:61:d8:c8:43:d2:3d:f4:9a:
         db:65:b8:6f:6f:5e:16:ec:a8:5d:34:9f:fe:ec:e2:b5:e4:41:
         eb:4a:ec:a9:6c:24:33:43:ff:75:07:51:68:c2:c5:9f:10:de:
         18:ea:35:b9:95:71:e4:53:c9:ec:84:cb:bd:26:32:27:4d:5f:
         f9:40:d0:cb:be:d4:ad:8a:2f:a1:8e:33:fe:21:3b:14:c1:4b:
         b6:3c:83:b6:0f:c6:0b:0b:06:99:98:f3:3b:3a:08:17:c2:70:
         13:bb:69:40:d0:38:7c:6e:da:bb:d9:30:4d:1b:16:b5:15:dc:
         3a:67:05:7f:81:d7:cf:5e:07:81:a7:02:58:e8:ac:8a:92:bb:
         62:04:21:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:17:15 2026 by rpki-client