This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/450DDD84EA0A11F09D7A92E76F6F56BC.roa
File:                     450DDD84EA0A11F09D7A92E76F6F56BC.roa (raw, json)
Hash identifier:          w45iGAzsISE47aog1uFFJX4+rEB5j6vRimUuDrpZBjM=
Subject key identifier:   41:76:D6:BD:6C:97:00:F0:80:3E:60:EE:21:BF:5D:EE:B9:41:0C:42
Certificate issuer:       /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial:       0BA0
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/450DDD84EA0A11F09D7A92E76F6F56BC.roa
Signing time:             Mon 05 Jan 2026 07:47:47 +0000
ROA not before:           Mon 05 Jan 2026 07:47:47 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     202736
IP address blocks:        103.6.20.0/24 maxlen: 24
                          103.6.21.0/24 maxlen: 24
                          103.6.22.0/24 maxlen: 24
                          103.6.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
                          rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 18:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2976 (0xba0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
        Validity
            Not Before: Jan  5 07:47:47 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=695b6ca3-f616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:37:82:53:39:f3:a4:cb:aa:62:b0:1e:94:
                    be:59:ba:de:87:2b:09:d2:af:64:99:4f:d7:ec:11:
                    86:04:d6:33:01:2c:11:91:8f:59:0e:57:76:7c:70:
                    c2:d2:74:62:4f:98:31:51:30:1c:97:dd:78:eb:2b:
                    b6:c5:3a:5d:82:e6:09:24:ce:f6:6d:a2:bb:ee:51:
                    6b:63:9d:0d:b4:90:0e:4f:51:79:ed:cc:82:11:59:
                    62:42:d9:c6:cf:97:ba:d6:40:55:a7:88:15:db:73:
                    65:04:71:b8:28:25:54:4b:e7:f6:61:0a:40:24:e3:
                    23:76:93:50:d6:7a:2f:37:ba:ec:51:ae:11:89:a1:
                    f2:c4:84:56:3a:7b:0c:2c:b6:9d:8e:dd:78:cc:d1:
                    24:04:ef:7d:93:ca:b3:92:c6:2b:eb:c0:f3:ca:6e:
                    5c:2e:65:5b:0b:63:db:6d:23:dc:f1:26:4d:d8:c8:
                    14:72:25:6c:55:f3:fc:9a:18:17:ca:f9:bf:db:84:
                    11:1b:9d:68:6b:dc:06:89:c3:b1:77:e2:58:3d:1f:
                    42:c6:a3:0c:ac:66:e1:49:35:87:77:e1:2e:29:c6:
                    94:a6:73:ba:ea:e8:84:a7:41:82:c6:c1:c5:56:c8:
                    fb:13:a7:1f:52:d1:5a:33:d7:a2:6b:e1:68:ac:03:
                    72:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:76:D6:BD:6C:97:00:F0:80:3E:60:EE:21:BF:5D:EE:B9:41:0C:42
            X509v3 Authority Key Identifier:
                keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/450DDD84EA0A11F09D7A92E76F6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ea:1f:c3:7b:ee:31:de:a3:d8:de:69:60:8d:3d:7a:62:df:7d:
         ab:2c:b8:9b:29:8b:56:42:3f:3b:f8:fb:64:70:b4:7f:6f:3e:
         5c:ca:1c:5d:e8:e1:a2:ec:72:92:a8:af:a9:88:bb:d1:8e:e7:
         4f:f0:11:b2:3f:5d:d5:90:5f:cf:ee:3b:1e:4b:02:44:15:ed:
         1b:32:07:48:9d:b7:2a:1d:11:62:c8:3d:a9:79:53:84:24:48:
         9d:f9:1d:0d:bc:bd:0a:31:f3:a1:52:5e:d7:92:fe:14:fb:c4:
         db:05:75:8b:2a:15:a6:2f:60:8f:06:c5:49:ea:4d:48:00:67:
         d1:3a:67:1b:d9:52:38:ed:7b:e1:17:13:0a:95:b0:b8:62:3c:
         f1:0d:b2:ab:42:57:08:d1:b4:83:a0:29:3e:85:ce:4d:6e:10:
         dd:62:11:80:a5:47:05:11:e3:d0:f9:a3:d4:d8:18:71:72:18:
         0d:2a:0c:84:e5:97:f4:ec:3f:ea:b6:fc:94:be:8e:97:3e:62:
         ab:52:38:5a:8c:21:d2:fa:af:98:c7:d4:9e:28:e0:b5:72:e6:
         7d:15:47:51:1c:2c:1a:03:f9:a8:38:93:a0:65:4e:d4:19:65:
         d6:ff:1d:9a:99:a4:9b:71:b6:9f:ae:6f:79:99:e8:90:00:79:
         77:5b:68:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 07:31:23 2026 by rpki-client