This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/39FBB4168B9811EE9C0BA252C4F9AE02.roa
File:                     39FBB4168B9811EE9C0BA252C4F9AE02.roa (raw, json)
Hash identifier:          iCAKLQ4eTuj1kP3cXcdL23JrD2dYkXjW+QD1Ju2Oxq0=
Subject key identifier:   25:99:9F:EB:79:3D:34:1C:52:DF:D6:90:7F:BB:B2:4A:D3:7E:B1:66
Certificate issuer:       /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial:       0811
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/39FBB4168B9811EE9C0BA252C4F9AE02.roa
Signing time:             Wed 31 Dec 2025 01:39:55 +0000
ROA not before:           Wed 31 Dec 2025 01:39:55 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     55799
IP address blocks:        103.42.212.0/24 maxlen: 24
                          116.193.157.0/24 maxlen: 24
                          183.78.168.0/22 maxlen: 22
                          183.78.168.0/24 maxlen: 24
                          183.78.169.0/24 maxlen: 24
                          183.78.170.0/24 maxlen: 24
                          183.78.171.0/24 maxlen: 24
                          2404:be00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
                          rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Feb 2026 20:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2065 (0x811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
        Validity
            Not Before: Dec 31 01:39:55 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69547eeb-d403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:05:63:00:30:a6:5e:bc:fc:77:88:81:6d:c8:
                    7e:94:08:d2:4d:d0:9d:67:de:bd:51:b4:e9:ea:97:
                    66:bb:7b:72:f8:e8:c4:18:1d:5d:7a:d3:12:1e:cf:
                    39:9d:0c:a3:4c:1a:89:9a:88:cb:25:20:d8:a8:9e:
                    51:e8:2c:18:8a:f1:7b:38:3d:48:25:28:3e:aa:56:
                    61:e2:7d:a1:f6:07:5a:5f:d6:b2:d7:9d:e1:d7:f0:
                    47:ae:77:3e:b1:49:7c:69:49:87:c7:45:84:9c:7f:
                    4d:69:0e:25:2c:13:e3:e1:b9:9b:d4:93:84:57:ee:
                    5b:20:82:4a:6b:b9:08:3a:f0:0b:4f:2c:ed:67:03:
                    91:fe:74:dc:96:95:bf:94:a0:fa:11:20:ae:f2:1c:
                    94:bf:6b:38:b1:ac:90:c2:d5:e5:ed:16:c1:8d:fd:
                    ec:80:92:fb:07:dd:87:4c:da:9c:e1:4a:b1:62:81:
                    da:09:5b:ce:de:a1:e5:58:e1:66:41:52:8e:1e:f9:
                    71:89:d7:56:98:51:d6:8e:71:aa:37:ba:fe:01:1d:
                    34:f1:3e:26:5f:e5:f8:b9:a9:f6:05:79:64:40:bf:
                    8d:78:8f:05:e9:97:35:47:5c:b5:2a:c6:25:49:4e:
                    06:3f:66:78:4f:ed:24:13:3b:5d:b0:6e:d4:1d:11:
                    07:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:99:9F:EB:79:3D:34:1C:52:DF:D6:90:7F:BB:B2:4A:D3:7E:B1:66
            X509v3 Authority Key Identifier:
                keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/39FBB4168B9811EE9C0BA252C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.212.0/24
                  116.193.157.0/24
                  183.78.168.0/22
                IPv6:
                  2404:be00::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:a8:0b:de:3e:0a:aa:37:89:8f:0d:a7:1d:46:47:bd:04:50:
         55:e5:a7:ce:09:1a:ca:16:3a:b1:f2:a6:57:8f:88:94:23:02:
         09:bb:81:c7:10:59:d5:7a:2e:52:9a:3c:f5:36:e2:7c:c4:c0:
         56:bb:f7:a8:03:30:d6:2e:b1:d4:9b:fa:c7:21:ad:3b:28:37:
         80:75:4d:67:b7:52:0d:86:c3:8c:ac:04:a8:92:8c:3c:4e:ed:
         1a:fa:31:a7:b9:fb:6e:9f:ae:0c:18:31:16:eb:9b:e8:42:63:
         10:cc:76:cf:cc:a7:bb:60:2b:ca:86:7c:0d:5b:33:24:a9:c7:
         88:c6:36:30:de:2f:61:1c:66:bf:e1:60:b0:cb:b3:2e:75:f7:
         d4:6d:fb:24:e3:b8:84:68:f8:78:38:cf:c5:c3:da:1c:4c:37:
         65:de:72:36:81:94:b9:b1:ff:ab:00:79:ed:ed:36:b6:c8:be:
         e1:f3:1f:69:b0:ce:75:1d:17:9f:1a:fa:45:fa:9d:76:80:f2:
         3b:07:c7:a8:c7:3d:3e:34:03:81:10:a9:04:4f:99:39:c8:0d:
         12:ba:26:0c:d3:b0:e9:cd:dd:99:cf:48:39:05:52:34:3b:2f:
         0c:b3:de:ae:fa:a4:c4:e9:67:8e:76:2a:82:01:e4:c4:1b:33:
         08:ba:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 00:07:46 2026 by rpki-client