This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/A336FE62609111EFB751B771C4F9AE02.roa
File:                     A336FE62609111EFB751B771C4F9AE02.roa (raw, json)
Hash identifier:          MFUO2Vwggul03zb8VthB8JTwYiWWzEcIazSxBfoGylk=
Subject key identifier:   22:9B:66:7D:6D:F3:0F:53:35:05:8D:F1:A0:61:D5:69:49:F9:BF:A9
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       0475
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/A336FE62609111EFB751B771C4F9AE02.roa
Signing time:             Sun 21 Dec 2025 00:21:08 +0000
ROA not before:           Sun 21 Dec 2025 00:21:08 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     151338
IP address blocks:        103.49.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
                          rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 23:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1141 (0x475)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
        Validity
            Not Before: Dec 21 00:21:08 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69473d74-cb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:aa:b5:de:d8:c6:bf:ba:24:5e:c5:83:9a:dd:
                    40:61:c3:0b:7b:2c:b3:4a:c5:36:94:4a:ed:94:2d:
                    b9:bb:29:dd:1f:b1:14:1e:13:7a:1d:a4:ea:9a:7d:
                    3c:91:3f:1d:ef:4c:e4:b4:13:b8:6b:fa:da:59:ab:
                    0e:b7:d9:4b:a9:09:3b:7e:d1:4d:71:0c:6f:73:9a:
                    12:d0:09:97:b9:91:f6:e4:90:82:06:b4:2d:9c:5f:
                    ad:56:d2:3d:88:b3:1b:50:e8:6d:fa:0e:2b:2e:9f:
                    e7:97:b1:db:20:04:9f:df:40:d7:a6:ce:8f:43:2c:
                    32:a5:4d:d8:a9:9a:44:ae:4e:44:c4:77:9c:df:cb:
                    20:7f:a3:85:4c:fc:89:07:42:09:ad:91:82:91:5f:
                    7f:4e:0e:22:7c:33:a9:d9:0d:0d:fd:0a:ff:bd:41:
                    8a:da:e9:c5:7e:4f:85:50:5d:16:9a:e2:84:25:6e:
                    77:37:04:fe:b5:5f:3d:f4:93:62:fd:fd:f1:fa:1b:
                    5c:21:ed:0e:46:d5:59:3e:b3:a4:87:de:c0:f0:d3:
                    20:21:8f:73:20:00:6e:3b:02:6d:dd:4e:74:13:51:
                    61:29:c5:93:70:d7:5a:f0:0f:17:ac:dd:42:88:85:
                    1c:f3:76:27:6d:85:49:3f:d1:83:69:17:50:1c:ea:
                    1e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9B:66:7D:6D:F3:0F:53:35:05:8D:F1:A0:61:D5:69:49:F9:BF:A9
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/A336FE62609111EFB751B771C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:0e:34:c4:e4:4f:8b:7c:ba:1d:40:ad:05:f3:6f:1e:f8:1c:
         81:3d:cd:e6:4e:1b:a9:ab:2a:1e:d3:14:c8:da:28:3c:39:98:
         70:e3:bb:c4:3b:58:88:33:b2:f3:ea:fe:23:22:b3:87:c0:b3:
         27:72:b6:20:ed:d0:3f:d6:9e:b4:3b:be:3d:18:02:e6:52:b3:
         49:cd:a9:55:c5:cf:d6:9e:0a:75:68:dd:7e:99:14:42:02:41:
         d8:41:18:da:87:e5:0e:b7:74:1f:3a:bd:ab:5c:88:82:78:8e:
         cf:93:3f:3b:9a:e0:fe:6f:13:be:fa:87:29:99:37:3b:f3:d5:
         3f:56:b4:97:a9:bd:66:24:61:36:fc:d9:45:f7:a1:0f:f4:d0:
         d3:94:86:40:21:c5:86:d6:6e:37:a1:ff:b0:89:a4:26:02:cb:
         0d:34:86:e3:ca:4e:72:11:2c:c4:63:24:99:16:a7:c8:2d:2f:
         3f:8a:23:ea:4a:93:35:91:d3:b8:60:49:1a:4a:e3:d7:5f:80:
         65:86:97:39:81:7a:34:03:5e:7d:e0:bc:b9:18:74:39:05:94:
         7f:68:58:b5:27:a0:18:a3:57:50:e9:54:b3:4a:5a:4d:50:58:
         8c:d8:a0:16:2f:06:34:b3:a7:b6:a8:0e:07:be:c5:6b:44:88:
         d4:44:e9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 09:16:45 2026 by rpki-client