This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/A34E20703F3411EF9DF9274AC4F9AE02.roa
File:                     A34E20703F3411EF9DF9274AC4F9AE02.roa (raw, json)
Hash identifier:          GBJJUfbij0tnucwYmrfLY9XgkjXpgz8CSd2UEwaOnaY=
Subject key identifier:   C3:CA:BE:F7:B3:10:2D:F5:E6:86:A1:95:81:B2:F5:89:0B:59:BB:5F
Certificate issuer:       /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
Certificate serial:       047E
Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/A34E20703F3411EF9DF9274AC4F9AE02.roa
Signing time:             Mon 26 Jan 2026 23:20:05 +0000
ROA not before:           Mon 26 Jan 2026 23:20:05 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     135341
IP address blocks:        103.180.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl
                          rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 23:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150 (0x47e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
        Validity
            Not Before: Jan 26 23:20:05 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6977f6a5-0ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:00:2c:1a:8a:5a:df:6f:91:16:3e:7f:0f:
                    34:c7:47:a1:ee:fe:c8:cb:d4:e3:53:fe:33:f7:09:
                    14:e8:fb:2b:ed:b2:9f:a8:c8:ce:e6:cd:d1:28:8f:
                    6b:5e:34:7f:c6:04:18:e4:09:26:18:49:6e:9a:f9:
                    79:e4:6f:91:5b:7f:a9:6c:18:aa:6d:07:ef:81:c4:
                    c1:1a:2b:c0:26:4f:0a:62:2f:25:02:3d:1f:b6:85:
                    0d:29:8b:c7:36:3a:ac:ef:de:20:08:01:0e:3d:30:
                    3b:61:85:48:42:c0:50:ce:e2:49:1f:1d:3e:bb:3f:
                    11:f3:25:81:34:44:50:fb:54:15:42:1d:41:85:9c:
                    cf:a7:54:27:8b:24:4d:4e:af:9e:06:72:1e:32:7e:
                    15:5f:0b:e1:a6:b6:9e:9b:09:ca:71:bc:84:35:6e:
                    55:fb:fa:90:1a:2c:d2:01:7f:7b:d0:38:bd:ef:5c:
                    2a:7c:fc:e8:68:04:7d:df:03:1b:83:92:02:02:8a:
                    8c:28:5b:8f:dd:28:7f:54:d8:ba:a4:fe:0e:c4:b1:
                    0c:f3:24:7e:f9:fb:29:76:03:1c:ca:74:ae:41:ce:
                    07:e2:a0:ee:40:22:7b:b8:da:70:94:87:63:24:1e:
                    c8:e7:16:d9:3c:8b:89:32:84:76:9a:6d:44:db:0d:
                    c0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CA:BE:F7:B3:10:2D:F5:E6:86:A1:95:81:B2:F5:89:0B:59:BB:5F
            X509v3 Authority Key Identifier:
                keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/A34E20703F3411EF9DF9274AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:1a:f0:e2:4c:2d:54:02:c7:af:f4:af:af:82:8e:b1:66:5d:
         1f:7c:0a:85:5a:7d:71:65:a4:b7:32:ce:8d:65:09:85:75:58:
         5a:85:58:25:f0:ac:48:ca:ed:58:46:9d:17:67:e1:df:e2:3e:
         43:5d:a4:c8:c7:be:21:76:50:bb:97:42:d4:79:50:57:2a:7e:
         c8:af:a6:04:70:7a:8b:bc:57:4a:98:19:08:23:28:83:4b:3e:
         1b:7a:bc:c7:4b:71:36:81:f1:d9:89:b9:dd:f7:ac:a3:39:5b:
         9e:57:be:95:16:b3:31:df:a9:ed:3b:b1:96:3b:b9:e4:37:18:
         b1:c8:46:04:22:a6:b4:2e:de:ef:d0:97:6c:ba:65:17:6a:ec:
         2c:32:33:b0:62:a6:0a:b7:ec:a2:97:f7:7c:87:0a:52:c6:87:
         b4:ef:54:c4:7e:dd:58:72:ce:b8:83:c9:a5:8f:7c:84:56:58:
         ed:96:02:cb:13:dd:22:b6:ed:5b:65:0b:71:0a:e9:26:e5:15:
         96:32:a6:78:6b:21:9d:88:13:34:18:3e:c8:d4:06:16:5b:f4:
         40:b9:bc:68:9b:e8:cf:1e:3c:81:bf:62:c7:6c:0c:61:93:b6:
         6e:ec:11:39:f4:db:59:b2:ed:66:9f:5e:29:d0:f3:e2:eb:00:
         a2:9c:bb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 00:07:35 2026 by rpki-client