This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/69738B14E8AD11F09A679225586F56BC.roa
File:                     69738B14E8AD11F09A679225586F56BC.roa (raw, json)
Hash identifier:          PcMWgbTomfVmzOPfyw5PbMrfv3lqV9Tx72HMdZAnfm0=
Subject key identifier:   F5:AC:6F:C0:94:AF:EC:0E:F7:A0:31:C6:C2:17:43:84:13:6B:82:48
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       0487
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/69738B14E8AD11F09A679225586F56BC.roa
Signing time:             Sat 03 Jan 2026 14:06:34 +0000
ROA not before:           Sat 03 Jan 2026 14:06:34 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     203923
IP address blocks:        103.49.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
                          rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 23:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159 (0x487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
        Validity
            Not Before: Jan  3 14:06:34 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6959226a-d271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:67:61:44:f5:81:cc:ca:03:32:dc:44:59:
                    ad:80:79:4a:b2:fc:ea:5b:38:59:6d:fc:96:58:e4:
                    03:fb:91:fa:99:91:d7:1f:41:43:2f:e7:d4:67:e6:
                    92:a1:4f:3b:6d:9b:56:e8:81:c2:2a:d0:c0:a3:62:
                    4a:40:88:d0:a1:e6:ca:54:72:56:2f:c5:d4:5a:f3:
                    77:84:37:e6:38:2c:f5:42:72:b5:12:ac:bf:e0:eb:
                    17:6e:e2:eb:e0:51:96:eb:c1:df:9a:ec:dd:b6:a9:
                    60:4d:8c:04:b5:f2:54:6f:9c:c5:41:18:c9:5e:b9:
                    05:52:53:47:c1:98:9d:ae:a0:d4:0a:5a:b2:86:51:
                    a1:b0:cf:88:e6:74:c5:49:45:fe:be:d5:1a:04:5e:
                    9f:3e:3b:de:67:91:5c:85:f8:73:71:09:27:43:ce:
                    27:cd:af:ea:28:73:c3:15:a8:be:77:f4:07:08:c3:
                    94:e1:4a:6e:c2:db:21:a5:ce:a1:10:bf:93:4d:c1:
                    b4:b0:f0:1a:d2:ba:27:1e:6e:a5:55:c9:d1:32:9f:
                    83:ec:19:47:17:44:e2:57:62:8e:84:41:07:b4:30:
                    0f:61:ad:a0:7d:9b:a1:98:a1:06:8e:5e:49:ba:1e:
                    3c:3e:f5:39:03:06:06:7d:f7:4d:85:86:2f:56:ce:
                    8d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AC:6F:C0:94:AF:EC:0E:F7:A0:31:C6:C2:17:43:84:13:6B:82:48
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/69738B14E8AD11F09A679225586F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:7e:89:59:b0:2a:c0:bf:7b:bd:38:a4:8e:32:19:05:dd:e8:
         b3:58:9d:0f:81:c0:8e:1c:72:4f:b4:60:f6:b6:52:08:42:c8:
         fe:79:1c:a9:e1:b0:f6:5d:33:8c:7b:74:05:55:06:98:13:aa:
         bf:04:b6:ee:32:02:94:02:d5:b2:74:43:1f:44:08:01:3c:ab:
         20:e5:80:4a:3f:19:98:74:b4:21:4e:80:95:83:f3:a0:f0:56:
         f6:fe:e6:2f:d6:d8:b0:3b:5a:fa:29:d3:4c:cb:03:c3:9e:ac:
         64:5a:10:e1:9a:05:f8:44:3c:bf:36:ee:c1:6c:d9:bc:ff:c3:
         ee:60:ce:b7:be:cd:ea:f8:07:87:32:75:bc:65:d5:a0:3e:c7:
         e5:ff:16:20:fe:7a:37:58:19:c3:4e:b9:27:48:ba:6d:a1:fd:
         a7:8d:7b:5e:8f:64:9b:ff:3d:57:f2:79:7e:aa:3f:4c:87:a5:
         15:ef:0f:cd:a4:18:68:5a:d3:36:3c:c6:26:37:a8:bd:28:e4:
         43:3c:22:82:69:98:3e:12:59:9a:07:60:1a:e5:5b:b6:87:4b:
         9e:2f:37:b9:62:97:e4:f1:fe:a4:84:e2:8f:6a:43:b0:9c:e2:
         4f:1c:88:e2:97:98:f5:da:3c:55:80:b0:c7:36:09:9f:ee:ff:
         69:d3:9f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 12:27:02 2026 by rpki-client