This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/C2412F50EED211F08AE562A4736F56BC.roa
File:                     C2412F50EED211F08AE562A4736F56BC.roa (raw, json)
Hash identifier:          i2jqd73//NQms2Q20LyI4+TRfC5IrauRbePOlBJHtTc=
Subject key identifier:   51:6D:4B:65:12:28:37:4F:05:D1:22:C4:A2:87:42:71:EB:C2:43:6A
Certificate issuer:       /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial:       01FD
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/C2412F50EED211F08AE562A4736F56BC.roa
Signing time:             Sun 11 Jan 2026 09:49:02 +0000
ROA not before:           Sun 11 Jan 2026 09:49:02 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     131642
IP address blocks:        103.72.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
                          rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
        Validity
            Not Before: Jan 11 09:49:02 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6963720e-424b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6f:95:85:18:d9:df:c9:8b:7a:50:3c:d1:9d:
                    18:a8:51:84:05:21:26:79:c4:bc:42:11:8c:0e:88:
                    85:be:2a:fd:dd:04:99:ca:79:48:4d:6e:15:5f:51:
                    92:c3:19:58:06:aa:a4:a1:a3:21:b1:8f:73:27:8a:
                    a4:b8:e2:1e:d6:3f:64:aa:85:98:40:1b:b0:8d:e4:
                    f9:e1:05:78:b9:14:b4:61:e9:5b:aa:2c:8d:9d:18:
                    9c:cb:63:98:18:28:94:bb:bc:ac:eb:85:21:85:a4:
                    cf:a7:c0:b8:8b:98:89:5d:04:65:12:84:45:3a:35:
                    35:35:0a:07:26:4c:82:c7:63:3c:68:1e:0c:8c:24:
                    4c:07:13:1c:a5:12:cd:17:01:71:8c:c8:bb:d3:0d:
                    c2:d8:12:08:4e:d8:30:4a:ea:3b:dc:ad:40:31:43:
                    42:44:a6:fd:6a:e3:75:d1:ea:f7:0a:bf:65:0a:3b:
                    d8:57:95:c5:96:61:e8:8d:b3:ee:17:be:37:58:7d:
                    a4:de:9d:db:bb:82:05:83:76:c5:a0:2d:83:c0:6b:
                    89:b2:5d:4c:8f:dd:65:bb:b3:f6:c3:a0:4f:db:b3:
                    9a:4d:5a:c5:db:e5:3b:4b:96:a9:78:fc:37:95:2b:
                    39:50:85:56:0e:fb:e6:e1:e0:e2:3b:cf:35:a3:2d:
                    7b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6D:4B:65:12:28:37:4F:05:D1:22:C4:A2:87:42:71:EB:C2:43:6A
            X509v3 Authority Key Identifier:
                keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/C2412F50EED211F08AE562A4736F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d6:85:0a:c4:ce:dc:46:ea:a1:c1:0a:c3:f1:aa:06:0d:ce:
         d4:4d:bb:a7:18:69:6a:44:bd:c1:06:ff:6e:63:8c:4b:9f:ba:
         3a:62:b9:27:2e:b9:c5:fc:a8:77:79:f5:14:c4:1b:f0:d4:36:
         55:95:5b:5e:79:46:4e:9e:00:3a:1a:e5:9f:1d:c1:c8:0f:d4:
         42:7e:c4:9e:c5:f7:26:88:3a:83:80:82:0c:ec:bc:66:de:b8:
         16:63:c7:9f:f4:be:b8:25:89:ca:28:83:0f:1a:84:06:79:9c:
         53:3d:fe:68:0b:61:9a:8f:58:52:f1:c8:9a:83:f5:a5:17:22:
         8a:ac:2f:6e:a0:7a:7a:f7:fd:42:d0:0e:9c:ca:bb:3d:9e:c7:
         e1:18:ee:57:63:46:86:60:1f:44:99:44:af:b9:8a:8f:d5:fa:
         7c:1a:35:de:0d:5a:65:7a:00:45:82:bb:79:4a:6a:bc:ec:9d:
         0b:67:17:5c:e5:81:2d:c0:77:71:6a:0d:a6:10:91:d8:26:e4:
         ca:dd:13:3a:bb:71:b2:7b:cc:5d:e7:84:0a:b5:65:15:6c:9d:
         18:a6:27:ef:10:b9:84:2b:b2:c8:6b:e8:21:2c:32:c2:4a:67:
         f2:a6:11:e2:fb:1a:26:56:5d:1a:87:b2:1d:ce:76:70:19:02:
         2e:2e:2f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:56:10 2026 by rpki-client