This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/0663DADAEEF511F0AEB0B1D83B6F56BC.roa
File:                     0663DADAEEF511F0AEB0B1D83B6F56BC.roa (raw, json)
Hash identifier:          7T0Y2/QuHAgII13KO6CuN5pvwsBXDuinAQW+Up6Wxuc=
Subject key identifier:   10:D8:AC:AE:F7:6E:2F:38:F0:12:1A:85:D4:0D:C6:00:DC:6E:27:5C
Certificate issuer:       /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
Certificate serial:       040C
Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/0663DADAEEF511F0AEB0B1D83B6F56BC.roa
Signing time:             Sun 11 Jan 2026 13:54:19 +0000
ROA not before:           Sun 11 Jan 2026 13:54:19 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     13335
IP address blocks:        103.163.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl
                          rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 23:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1036 (0x40c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
        Validity
            Not Before: Jan 11 13:54:19 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6963ab8b-b9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:38:61:5b:79:a4:ed:66:86:85:92:8d:34:
                    fd:52:4f:ff:5c:c7:dd:45:5e:9d:74:d3:68:58:f8:
                    95:74:a4:6c:34:1b:3e:d9:eb:11:1b:31:5b:fe:95:
                    82:2e:f6:56:33:21:5a:48:a8:cb:44:72:33:9f:a7:
                    74:de:a2:4d:ad:38:fc:82:47:66:c8:f4:af:3c:de:
                    33:dc:b8:c4:81:eb:72:72:7f:70:37:42:be:d4:44:
                    ec:db:f8:81:2d:e4:28:f4:89:9f:73:66:86:49:af:
                    69:4a:5a:42:04:b9:39:51:02:0c:cd:26:47:b0:96:
                    fd:76:f7:4b:5b:4c:8a:63:d9:58:27:51:c0:a1:81:
                    43:5d:a6:98:da:ea:39:d6:1f:ab:75:85:28:8f:e5:
                    d5:ae:bb:28:da:f6:7f:62:1a:b5:67:de:66:da:a3:
                    e3:19:ee:35:43:a4:77:bf:1a:31:7b:5a:6f:1d:33:
                    0e:91:6a:42:b3:6a:45:82:ad:48:6c:8b:78:00:8e:
                    69:7d:32:5b:29:bf:3b:a5:30:60:9c:cc:c5:3b:38:
                    5d:b5:3c:dc:9a:30:d7:05:6f:6a:e2:2e:0d:2e:e9:
                    94:89:4c:1b:02:10:22:41:6a:75:04:f7:5f:8a:33:
                    7d:3d:08:72:6f:d7:72:96:97:cc:5e:cd:d7:5a:9a:
                    10:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D8:AC:AE:F7:6E:2F:38:F0:12:1A:85:D4:0D:C6:00:DC:6E:27:5C
            X509v3 Authority Key Identifier:
                keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/0663DADAEEF511F0AEB0B1D83B6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:f0:42:ca:d4:7c:9f:f9:e0:13:f7:0b:17:82:21:7e:72:20:
         1a:bc:ac:15:b1:67:8f:9c:43:5a:e3:24:af:ad:d5:0f:47:6c:
         6a:3b:e4:10:95:c6:cf:48:ea:15:90:43:2a:c5:74:5c:2b:7d:
         6e:76:57:9e:77:ee:7c:f2:5e:ff:3d:10:82:66:43:59:5e:a8:
         93:b3:d1:d5:7b:a6:59:49:0a:4c:dd:f1:3b:70:a6:99:e3:0a:
         f4:9f:11:76:83:99:15:17:2c:5b:a2:af:34:60:d4:d2:95:1a:
         c2:d0:9e:7f:e3:31:e3:c7:14:0e:13:9b:02:ea:45:53:5f:ac:
         7a:99:0e:71:a2:b0:23:08:a8:4c:86:4a:86:61:3a:cf:a6:df:
         83:18:12:43:cb:88:0a:f0:7f:d7:db:9a:4e:54:59:36:d1:1d:
         d0:8d:a9:02:9b:a8:60:97:f6:ba:61:22:73:68:96:df:d1:34:
         83:74:70:6e:7b:ca:fd:a8:13:de:f4:58:18:8e:5f:54:d8:29:
         96:32:e9:0b:6f:3a:6f:95:d9:13:63:5d:bc:f1:28:2e:fa:61:
         07:e9:43:bf:1e:d2:ce:5c:cb:5e:ff:7a:f7:a3:14:0c:81:20:
         bb:af:1b:2b:71:98:2f:0e:c0:04:b6:c1:c2:67:aa:dc:52:e6:
         d3:10:a9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:15 2026 by rpki-client