This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/3E9B5E9C791511F09DD1364EC4F9AE02.roa
File:                     3E9B5E9C791511F09DD1364EC4F9AE02.roa (raw, json)
Hash identifier:          ryMrdROkWopWtCd24OFF7BPHTxSfEd6I/FfwS8u7uiY=
Subject key identifier:   E0:4B:27:FE:DA:70:24:A4:8E:7F:43:9C:28:E1:62:38:F2:FE:5C:13
Certificate issuer:       /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
Certificate serial:       84
Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/3E9B5E9C791511F09DD1364EC4F9AE02.roa
Signing time:             Fri 16 Jan 2026 14:59:55 +0000
ROA not before:           Fri 16 Jan 2026 14:59:55 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     4755
IP address blocks:        203.105.174.0/23 maxlen: 23
                          203.105.174.0/24 maxlen: 24
                          203.105.175.0/24 maxlen: 24
                          203.105.176.0/23 maxlen: 23
                          203.105.176.0/24 maxlen: 24
                          203.105.177.0/24 maxlen: 24
                          203.105.178.0/23 maxlen: 23
                          203.105.178.0/24 maxlen: 24
                          203.105.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl
                          rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 06:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
        Validity
            Not Before: Jan 16 14:59:55 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=696a526b-e7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c3:df:e1:bf:ec:63:26:8e:ac:5e:9e:4e:be:
                    83:60:78:f5:e6:cc:89:82:b7:03:35:99:15:f2:f0:
                    84:65:a2:2d:66:bf:6c:7e:37:11:c2:76:83:d9:02:
                    ef:a0:a2:a9:e1:db:2b:3f:dc:be:c5:63:73:43:4e:
                    52:a3:46:23:d8:15:1b:9f:5b:40:07:d2:7e:d3:16:
                    3a:6f:a9:49:84:67:5e:0e:4e:bc:96:27:b8:e5:52:
                    39:9b:28:8d:0d:8a:da:76:60:15:9c:5d:44:70:88:
                    8a:4a:e3:ea:89:8b:5b:86:d2:19:b3:78:7c:a1:77:
                    8d:5e:74:9a:81:1b:64:3c:b3:7d:f3:20:03:6e:b1:
                    52:08:fa:4a:40:6e:cb:e8:2f:a8:3f:0f:3f:5b:e1:
                    bf:f2:0d:6c:75:6c:8e:c3:22:fa:90:69:af:d6:6c:
                    e9:fe:bf:f8:7c:8d:c3:e2:09:2b:37:38:65:7f:31:
                    d7:fb:a4:85:12:e2:a2:32:f6:35:6d:7a:ee:12:dc:
                    44:b8:04:69:a1:70:7c:fe:bb:09:1e:c2:5c:75:8c:
                    f2:3d:50:79:87:62:77:14:34:8f:f7:40:32:3c:f0:
                    5f:df:52:4f:7c:b1:fa:b1:53:b4:76:6b:b7:0d:dd:
                    ae:f5:2a:d9:6d:f0:75:3f:21:18:82:e5:58:7b:e0:
                    97:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4B:27:FE:DA:70:24:A4:8E:7F:43:9C:28:E1:62:38:F2:FE:5C:13
            X509v3 Authority Key Identifier:
                keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/3E9B5E9C791511F09DD1364EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.105.174.0-203.105.179.255

    Signature Algorithm: sha256WithRSAEncryption
         06:6a:1b:7d:96:0d:33:22:34:8b:23:86:dc:4a:61:2a:48:f4:
         90:de:96:a8:bc:f5:79:07:9a:3d:5e:bc:48:40:21:05:74:72:
         0d:5a:bc:2c:e6:3d:72:8d:ef:73:d3:f9:f5:01:93:f6:0e:3f:
         f2:d2:ce:47:ba:15:d3:f2:a9:d5:83:3e:96:49:21:66:09:85:
         14:7a:21:3b:b0:c2:3b:4c:49:e4:b9:72:26:12:95:56:57:3f:
         93:f7:f5:b5:c3:3d:bb:2f:8d:82:3d:0b:51:cd:27:88:dc:f9:
         87:93:ad:d2:6d:dc:94:9d:32:da:92:06:f0:59:c3:bd:82:e7:
         20:6e:a5:ad:0d:65:59:7c:ec:21:f1:ec:1e:87:14:94:5b:95:
         d7:8b:a5:01:21:95:b4:34:21:92:8d:cf:8c:4f:ef:a8:d8:3d:
         70:76:d3:60:5b:67:24:62:43:bb:c2:03:47:af:cc:d0:86:2e:
         15:8b:a1:a0:2a:f5:41:07:9a:10:dc:69:25:6e:d3:04:b5:27:
         ad:9e:be:4b:79:48:65:cf:94:b8:6a:a5:20:13:00:a0:d4:6d:
         a9:49:a2:87:c4:2f:23:23:d0:45:52:e3:5e:43:f1:0a:32:81:
         b9:34:7c:6c:c2:c7:28:3f:2c:fc:50:3b:4d:90:c6:94:a5:ae:
         a0:64:ca:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:00:39 2026 by rpki-client