This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/332F710683A611F0948BAE55C4F9AE02.roa
File:                     332F710683A611F0948BAE55C4F9AE02.roa (raw, json)
Hash identifier:          SLl8ut8dKkVj7i1Wum62dEM4Jjt8VAcfXUqLS9wtmUI=
Subject key identifier:   FF:0A:3A:C1:01:6A:40:AC:BB:2D:D1:D6:8B:CD:81:FE:0B:E0:31:11
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3B5E
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/332F710683A611F0948BAE55C4F9AE02.roa
Signing time:             Mon 29 Dec 2025 00:21:30 +0000
ROA not before:           Mon 29 Dec 2025 00:21:30 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     202736
IP address blocks:        61.251.182.0/24 maxlen: 24
                          101.53.73.0/24 maxlen: 24
                          175.176.130.0/24 maxlen: 24
                          203.173.98.0/24 maxlen: 24
                          203.173.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 14:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15198 (0x3b5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Dec 29 00:21:30 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6951c98a-02db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:93:4f:c3:17:7c:c3:2d:80:ae:81:13:b3:
                    73:b3:75:e6:7c:3f:f5:04:91:fd:94:58:e0:b7:84:
                    5a:2b:fe:4d:3d:0c:6a:bb:86:13:c0:5d:40:af:5a:
                    27:be:c4:67:12:11:db:c3:18:c2:0f:08:75:9d:da:
                    16:de:17:14:ac:8a:cb:e1:b1:1d:2a:f1:73:b6:a5:
                    67:d7:eb:19:67:04:30:0a:76:2c:4f:81:1f:c8:77:
                    c7:69:a3:18:17:61:65:da:1a:48:c8:8d:36:01:2a:
                    44:da:26:84:50:e3:99:63:47:e8:88:44:28:22:17:
                    3a:ed:6f:37:03:fe:4d:b0:2c:8e:cd:36:b5:2e:bd:
                    88:a5:10:22:6e:27:aa:1b:c4:7f:dc:12:ec:b1:42:
                    4d:9d:8e:78:46:43:85:26:03:47:90:50:2f:13:e9:
                    3d:88:f6:ff:68:07:f0:64:8e:3c:51:58:4a:c9:a2:
                    49:a1:af:2f:26:b0:53:ee:e0:43:15:97:1e:ad:10:
                    10:78:b9:da:32:11:41:fc:5f:1b:f0:e8:86:16:8a:
                    ec:52:f0:6f:f8:0d:ec:76:ee:28:7b:c7:97:fa:e1:
                    f4:13:5b:f9:b1:d8:a8:be:fc:88:7c:85:b5:50:ef:
                    de:99:6f:c9:a9:ae:e0:f0:1f:bf:6b:c1:f7:7e:c1:
                    7c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0A:3A:C1:01:6A:40:AC:BB:2D:D1:D6:8B:CD:81:FE:0B:E0:31:11
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/332F710683A611F0948BAE55C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.251.182.0/24
                  101.53.73.0/24
                  175.176.130.0/24
                  203.173.98.0/24
                  203.173.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e2:3a:e5:06:df:98:5f:5f:bb:d0:a3:08:c3:3e:73:4d:a6:7b:
         34:4c:da:5c:2f:47:f9:a1:99:83:55:f3:34:ba:4f:54:58:d8:
         f5:a2:be:25:c4:8c:fa:89:9a:60:a4:1f:78:24:27:0e:d7:20:
         3e:ba:f2:b5:9f:4c:60:ae:9c:06:98:3b:5f:2f:ba:78:b1:cc:
         8e:fb:03:5a:54:15:86:a6:3a:e1:9d:4c:21:de:50:15:18:ef:
         ae:03:7a:49:8d:53:13:26:14:5c:a2:df:12:4a:73:6e:5f:27:
         37:7f:af:2f:f0:b1:ca:ad:17:e8:38:08:11:82:82:1c:38:5b:
         a4:e2:bd:50:57:fa:86:f4:1a:a7:b2:01:11:a8:55:8a:c1:e9:
         4c:2b:62:54:bb:24:de:d3:f8:76:c1:6b:1a:51:ae:30:10:bd:
         b5:2b:ae:ff:79:e1:3e:07:9d:4f:78:b9:f4:43:0c:aa:b5:1e:
         39:f7:0d:12:09:de:ff:a5:9d:f7:4b:dc:e0:48:3e:54:03:af:
         55:2c:b8:44:32:d7:0a:78:84:ee:60:8a:fb:7d:3e:9d:a2:ea:
         f4:05:34:6d:a3:49:68:69:82:97:62:4f:12:9d:2e:4e:38:49:
         63:9a:dd:e6:01:2e:e1:dd:cc:03:26:fc:1d:96:cf:71:c3:fc:
         ed:a7:2c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 07:33:12 2026 by rpki-client