This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/8D2B367E00B811F19583FFF36B6F56BC.roa
File:                     8D2B367E00B811F19583FFF36B6F56BC.roa (raw, json)
Hash identifier:          VTS2ogSGJpXM0Ui6yE+lhjxVMG9zzZUiuGFz6KUR6eE=
Subject key identifier:   DC:1C:3D:7F:EB:C3:F1:B8:E1:C4:F3:1A:B9:2F:38:6F:D8:40:50:5E
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3BA9
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/8D2B367E00B811F19583FFF36B6F56BC.roa
Signing time:             Wed 04 Feb 2026 00:55:30 +0000
ROA not before:           Wed 04 Feb 2026 00:55:30 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     9457
IP address blocks:        103.12.252.0/22 maxlen: 22
                          210.181.0.0/22 maxlen: 22
                          210.181.4.0/22 maxlen: 22
                          210.181.12.0/22 maxlen: 22
                          211.242.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 14:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15273 (0x3ba9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Feb  4 00:55:30 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69829902-1be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:94:9f:0c:b3:b0:16:c9:c8:d4:f5:3e:12:
                    18:63:f7:ca:7f:48:3d:3a:f0:d6:56:50:0e:6f:3e:
                    52:1c:8a:b4:90:6c:2e:24:98:7c:40:e8:8f:21:dc:
                    01:1c:66:bb:14:b1:4c:03:3f:b8:95:63:db:1e:0c:
                    de:94:63:cd:a9:27:0c:d0:7f:cb:65:f9:64:5c:d5:
                    d3:b9:00:0a:9c:49:bd:c7:6e:65:b3:fd:a2:69:0d:
                    5a:d9:69:f1:fa:e4:71:60:cf:08:ec:06:ef:c4:77:
                    46:bd:a2:89:35:51:3d:62:52:6b:b3:61:cb:e5:17:
                    63:cf:45:75:0d:b2:51:c3:48:59:de:2c:55:20:15:
                    51:c8:41:e4:36:5d:89:9f:4d:34:c4:03:54:d5:73:
                    b7:8d:6c:5f:29:87:4a:58:a8:54:ac:d6:7b:d9:b8:
                    29:70:dc:79:e5:d1:69:a8:a8:5a:19:c4:40:9a:5a:
                    97:c9:56:11:74:84:49:6a:1e:65:50:34:63:bf:fe:
                    c7:23:d3:4f:26:61:f0:e1:bd:9c:34:2a:a9:54:38:
                    f6:f1:c9:3b:d5:ae:09:c5:3d:c2:43:25:a6:34:b7:
                    4c:59:0f:93:cd:76:d3:49:f4:08:8e:02:31:5d:ae:
                    a4:ab:a3:a9:25:dd:a6:b1:fa:7d:12:da:91:b0:2a:
                    78:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1C:3D:7F:EB:C3:F1:B8:E1:C4:F3:1A:B9:2F:38:6F:D8:40:50:5E
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/8D2B367E00B811F19583FFF36B6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.252.0/22
                  210.181.0.0/21
                  210.181.12.0/22
                  211.242.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9f:9e:96:3e:4b:3d:e1:c3:45:d7:fb:68:65:e9:0c:d2:86:e0:
         b9:9d:7f:3d:18:d8:24:5a:f7:2a:2a:b5:69:3e:0a:b5:c9:0d:
         8a:4f:e7:a1:d3:e3:d0:82:4a:a2:8f:9e:87:ab:1e:c3:7e:5b:
         15:93:b4:11:69:c9:73:f2:49:ee:60:ac:32:b1:46:3a:15:53:
         00:7b:95:16:76:ba:80:b2:2a:37:91:9d:83:d0:9e:54:34:4d:
         19:37:5c:85:f2:15:71:8a:aa:ea:1c:43:be:b1:d3:93:e1:19:
         99:d2:98:79:ca:87:e8:9a:32:4e:ee:69:d9:dc:f0:34:c0:2f:
         fe:df:11:82:39:5b:c8:9e:f9:0c:d4:56:fb:ca:18:a9:3a:b4:
         8a:dd:79:52:11:cb:74:bc:85:6e:b0:3d:9c:04:4c:5f:24:03:
         65:69:a6:3f:3b:03:62:a2:00:3a:43:59:0d:f7:c5:8d:64:39:
         48:9b:b2:a0:ed:ed:e1:12:c9:6b:07:92:8f:e7:1c:73:b3:b2:
         bb:9e:6a:8f:59:a1:17:1b:55:47:29:bb:2a:62:8f:76:1c:18:
         9f:5e:10:f7:66:eb:db:90:f7:c6:15:d7:56:1d:b6:dd:37:a9:
         10:ac:7f:46:85:de:e4:4c:35:fc:4b:02:3b:e4:09:3e:cb:04:
         70:a7:d7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 12:58:53 2026 by rpki-client