This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/48811D22EBB411F0A3585372626F56BC.roa
File:                     48811D22EBB411F0A3585372626F56BC.roa (raw, json)
Hash identifier:          gn8vnKaXW6ZC2B6o+QxRxKZcAtoDn7RGJ7G1J2ZxsAQ=
Subject key identifier:   7F:95:F1:B1:36:59:EA:FE:AF:84:AD:2E:18:2F:37:AE:6B:E6:BE:F3
Certificate issuer:       /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial:       05E3
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/48811D22EBB411F0A3585372626F56BC.roa
Signing time:             Wed 07 Jan 2026 10:33:19 +0000
ROA not before:           Wed 07 Jan 2026 10:33:19 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     212890
IP address blocks:        103.46.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
                          rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 22:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1507 (0x5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
        Validity
            Not Before: Jan  7 10:33:19 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=695e366f-d4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:71:30:7e:d5:84:09:c3:b0:f1:86:6f:3a:
                    1f:f9:79:f1:5c:2d:fc:50:61:65:60:54:5b:01:6e:
                    21:79:76:33:53:a4:e1:03:84:e7:48:23:0e:df:a2:
                    8c:42:53:6a:5e:76:55:8a:1d:74:cb:7d:4c:6f:6c:
                    1b:bd:6a:73:54:99:94:ea:68:3e:a5:d2:c7:1b:c5:
                    09:08:15:1e:36:ee:77:01:31:34:b0:ba:1c:e0:b1:
                    45:b5:2d:b0:38:88:95:4e:4f:a0:1e:54:3b:4d:af:
                    f5:0d:40:54:f6:be:58:3a:f2:af:76:f3:9e:17:7e:
                    59:0f:89:3b:21:da:8f:94:09:94:e9:4e:25:10:a5:
                    fa:f0:94:8b:a3:6d:d1:64:25:29:21:04:ef:ea:7b:
                    20:f3:a0:c0:66:d7:94:f0:42:e9:7a:e7:88:cb:c1:
                    ac:22:a7:02:52:19:89:8d:93:eb:c9:b2:1e:ec:b8:
                    b4:a1:55:a2:c0:a9:21:a6:db:2f:6b:da:79:21:58:
                    a1:e2:55:50:f9:1a:43:56:d3:a8:a6:2f:21:43:24:
                    5c:16:7e:72:21:6c:77:40:28:14:2e:9d:ff:36:05:
                    7d:00:fd:fc:1e:ae:71:39:5e:87:8c:93:65:ad:22:
                    4f:34:aa:1c:81:93:80:b8:f1:fc:1d:44:13:d7:7a:
                    ad:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:95:F1:B1:36:59:EA:FE:AF:84:AD:2E:18:2F:37:AE:6B:E6:BE:F3
            X509v3 Authority Key Identifier:
                keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/48811D22EBB411F0A3585372626F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:9b:34:36:d4:f3:c9:7e:c1:b1:80:52:d4:49:13:c9:7e:bb:
         db:31:88:cb:56:10:84:2e:26:78:ba:3f:b6:d4:d7:fa:80:ac:
         e9:bf:04:57:c5:46:39:85:b9:39:95:39:c8:b3:41:88:68:c5:
         30:3b:bf:ee:48:9a:14:87:16:de:8e:a5:a1:4e:dd:be:1b:f1:
         57:54:f8:61:7d:4c:b3:c1:6d:6d:2c:e4:66:47:b4:50:7b:9e:
         34:72:a3:4d:a6:2e:42:96:19:9c:47:a9:50:d7:90:09:c2:4a:
         fe:7b:e7:79:58:36:60:f8:fe:8b:12:23:36:b2:f8:37:81:89:
         27:2b:53:fc:3a:51:f5:d5:81:b3:2b:9b:41:47:6a:5d:aa:c8:
         b6:a7:a3:f1:ee:85:fd:c2:00:ce:8c:ce:c6:12:ce:59:bb:dc:
         85:0b:ea:5b:3d:87:f7:f1:6d:27:05:4e:25:2e:80:aa:9e:65:
         07:80:92:e5:dd:10:a6:ef:3c:ae:16:f3:02:3e:89:00:8e:8b:
         32:f1:2d:a7:88:17:31:f7:2c:4c:a5:36:ee:93:bf:4f:6d:f3:
         4b:53:a8:06:c7:d6:38:01:a6:dc:47:72:22:b4:aa:c4:eb:05:
         df:fe:4f:60:56:2f:ad:6b:9c:be:27:b8:63:45:3f:cb:0d:fc:
         2d:19:db:a8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0
NERCMjZFOTEwHhcNMjYwMTA3MTAzMzE5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTVlMzY2Zi1kNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnttxMH7VhAnDsPGGbzof+XnxXC38UGFlYFRbAW4heXYzU6ThA4TnSCMO36KM
QlNqXnZVih10y31Mb2wbvWpzVJmU6mg+pdLHG8UJCBUeNu53ATE0sLoc4LFFtS2w
OIiVTk+gHlQ7Ta/1DUBU9r5YOvKvdvOeF35ZD4k7IdqPlAmU6U4lEKX68JSLo23R
ZCUpIQTv6nsg86DAZteU8ELpeueIy8GsIqcCUhmJjZPrybIe7Li0oVWiwKkhptsv
a9p5IVih4lVQ+RpDVtOopi8hQyRcFn5yIWx3QCgULp3/NgV9AP38Hq5xOV6HjJNl
rSJPNKocgZOAuPH8HUQT13qtqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFH+V8bE2
Wer+r4StLhgvN65r5r7zMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx
NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDhCRkEvMDRBMjRDMzQxMTQzMTFFQzk3MzY5RjczQzRGOUFFMDIvNDg4MTFEMjJF
QkI0MTFGMEEzNTg1MzcyNjI2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnLo4wDQYJKoZIhvcNAQELBQADggEBAE+bNDbU88l+wbGA
UtRJE8l+u9sxiMtWEIQuJni6P7bU1/qArOm/BFfFRjmFuTmVOcizQYhoxTA7v+5I
mhSHFt6OpaFO3b4b8VdU+GF9TLPBbW0s5GZHtFB7njRyo02mLkKWGZxHqVDXkAnC
Sv5753lYNmD4/osSIzay+DeBiScrU/w6UfXVgbMrm0FHal2qyLano/Huhf3CAM6M
zsYSzlm73IUL6ls9h/fxbScFTiUugKqeZQeAkuXdEKbvPK4W8wI+iQCOizLxLaeI
FzH3LEylNu6Tv09t80tTqAbH1jgBptxHciK0qsTrBd/+T2BWL61rnL4nuGNFP8sN
/C0Z26g=
-----END CERTIFICATE-----
Generated at Wed Jan 21 07:35:34 2026 by rpki-client