This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/F6DBFB92B3F311F0929DA35BC4F9AE02.roa
File:                     F6DBFB92B3F311F0929DA35BC4F9AE02.roa (raw, json)
Hash identifier:          +ZeOSIYk6Ly5nBeaHh56dm3TTkPs3P+Yl4siQcbERQk=
Subject key identifier:   45:DB:23:F2:1C:EA:AC:ED:4A:C1:1D:94:B4:6D:D6:E3:EF:C5:FA:3B
Certificate issuer:       /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial:       05D5
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/F6DBFB92B3F311F0929DA35BC4F9AE02.roa
Signing time:             Fri 02 Jan 2026 23:18:49 +0000
ROA not before:           Fri 02 Jan 2026 23:18:49 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     206264
IP address blocks:        103.46.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
                          rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 22:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493 (0x5d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
        Validity
            Not Before: Jan  2 23:18:49 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69585259-00e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5b:12:e6:4c:a8:fe:46:cd:4e:69:af:41:4e:
                    1c:75:62:77:ea:39:d4:20:74:a3:32:48:63:a1:c0:
                    e4:df:d5:09:73:59:fe:8b:e1:cb:6e:cf:9d:59:89:
                    56:8f:a4:99:db:eb:b7:ff:0d:0b:e7:75:58:b9:2a:
                    98:b3:e3:59:eb:3a:63:c0:b8:ca:f4:0c:b2:5a:84:
                    e0:a6:cb:10:56:fc:66:59:d1:9a:8b:01:b1:a2:c9:
                    55:a7:4f:72:69:d6:b0:8d:03:aa:7f:63:fd:4e:af:
                    9a:2a:1d:51:ea:96:43:52:88:4b:40:4b:71:33:a0:
                    92:8a:49:32:e8:4f:a6:d9:f3:76:66:8d:f9:35:b1:
                    98:31:3c:0f:68:d6:3f:ff:49:02:7d:ef:af:f5:6c:
                    f7:b6:8c:6a:30:e3:c9:1a:68:11:22:f2:b9:7e:69:
                    46:a6:3e:30:64:ef:ea:8e:ae:22:04:d5:c8:44:6f:
                    70:11:3c:40:ea:d3:84:8e:a7:84:42:0f:8c:12:df:
                    38:60:ba:0e:0a:f6:96:a7:51:37:dc:86:78:fd:7a:
                    16:55:ee:84:27:2c:20:12:be:ef:37:23:a7:f0:92:
                    a4:61:47:21:27:00:79:ba:30:5c:13:9d:32:c5:68:
                    63:98:c9:91:58:62:4c:74:25:9f:2c:3e:59:bc:7c:
                    71:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DB:23:F2:1C:EA:AC:ED:4A:C1:1D:94:B4:6D:D6:E3:EF:C5:FA:3B
            X509v3 Authority Key Identifier:
                keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/F6DBFB92B3F311F0929DA35BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:11:29:dc:51:63:ce:c8:4f:01:bc:b7:0f:d3:9d:7c:92:d0:
         4c:03:73:e3:dd:12:c6:e3:f7:96:41:de:7a:a5:92:74:8a:8b:
         76:74:25:cc:87:a3:eb:eb:45:b1:c1:30:f3:a1:b9:89:14:e9:
         7b:f9:5e:dc:8c:23:23:5f:39:3b:bb:72:40:90:c4:2f:90:2d:
         8d:0e:71:54:0f:c9:f0:b0:7a:f1:00:ad:eb:0a:cf:49:1e:1a:
         e1:93:ea:3c:d8:19:69:ff:81:64:0a:ab:da:31:20:99:bb:58:
         ba:69:9f:06:20:aa:66:3e:7d:3b:a5:d5:57:2c:3e:fe:87:15:
         be:ff:0a:5f:13:fa:59:ab:d2:65:6c:ee:48:9b:fe:b1:f5:9a:
         3f:5e:ba:0e:58:d3:95:90:b2:21:6d:bc:95:da:1f:57:c3:13:
         28:90:d4:df:0a:ad:b1:ec:81:0c:4b:66:2b:b9:bd:ab:01:e8:
         e8:06:bc:33:43:03:5d:7f:cc:d9:bb:47:95:2c:ae:5a:f5:cf:
         e0:ef:b3:c3:e1:8a:89:55:63:65:e8:3d:52:cc:99:23:33:a2:
         83:4f:f0:6f:df:d5:7a:b1:81:af:90:3e:c3:9b:1a:f2:3f:95:
         13:7f:cf:cd:40:38:48:6a:5c:5a:df:5b:c9:a3:cc:88:6f:e7:
         98:59:b5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:48:38 2026 by rpki-client