This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
File:                     B76A1A109B5411EF9756FD79C4F9AE02.roa (raw, json)
Hash identifier:          wg6PkX5FTKBuzoU2wH2B403iAUUBx7n4KiMD6J5IWOE=
Subject key identifier:   A5:43:31:AE:C6:A9:F4:56:BB:0B:B1:84:65:A3:71:FD:E1:BB:A7:C5
Certificate issuer:       /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial:       01CC
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
Signing time:             Wed 24 Dec 2025 09:24:11 +0000
ROA not before:           Wed 24 Dec 2025 09:24:11 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     142132
IP address blocks:        103.166.174.0/24 maxlen: 24
                          103.166.175.0/24 maxlen: 24
                          2401:b0e0::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
                          rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 10:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
        Validity
            Not Before: Dec 24 09:24:11 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=694bb13b-49c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:00:66:ec:70:70:37:3f:e0:bc:6b:97:d4:
                    56:6d:3f:76:9a:42:4f:f4:d9:23:12:32:6b:da:d5:
                    6c:38:60:fd:5c:3f:b8:fc:71:09:42:de:de:32:a9:
                    0c:75:2e:e0:28:0c:44:57:24:85:8b:f1:41:24:4f:
                    ab:50:89:a6:7e:70:ba:d0:8b:29:79:68:a9:e8:a9:
                    0b:14:d4:ff:0e:85:d5:ec:42:98:a3:54:03:82:20:
                    bb:9c:c3:ef:50:6c:50:ed:9a:c2:98:4c:22:d3:dc:
                    b2:43:49:a9:98:1a:37:8c:06:42:b5:c9:38:71:4b:
                    b8:c3:ca:a1:e5:27:03:74:aa:5b:d8:7d:22:1a:7a:
                    f1:de:0b:73:23:3a:1b:99:f2:dd:57:fe:16:88:69:
                    66:c7:b1:05:82:bb:0a:4b:43:e7:d7:76:64:dc:23:
                    64:c6:ee:05:ac:b3:3a:b0:bf:0e:54:78:c6:fe:d5:
                    37:f0:c3:89:1c:e7:7f:03:f1:79:8e:24:70:f3:b1:
                    6a:06:2c:34:99:e8:10:6e:19:af:ca:43:f0:1f:55:
                    74:8e:6b:b4:d8:86:98:32:90:f7:2f:35:70:8e:74:
                    75:eb:5e:70:95:42:c4:c9:c5:bd:81:cd:d3:89:61:
                    f8:a6:3b:dc:cc:ce:02:6d:b2:74:e9:9f:ab:61:f2:
                    5a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:43:31:AE:C6:A9:F4:56:BB:0B:B1:84:65:A3:71:FD:E1:BB:A7:C5
            X509v3 Authority Key Identifier:
                keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.174.0/23
                IPv6:
                  2401:b0e0::/40

    Signature Algorithm: sha256WithRSAEncryption
         c7:1f:06:13:16:f3:15:70:17:14:81:ca:18:43:13:3f:97:c2:
         66:75:99:d0:89:25:90:f7:b6:8b:bb:cb:2c:ab:8a:b2:10:0a:
         97:3d:de:fd:27:3d:fb:06:f1:2c:31:52:76:09:4b:e0:b6:44:
         50:b8:6f:34:73:ca:14:e5:32:51:1d:fe:03:fb:ab:f1:3d:23:
         3d:c5:85:30:19:e2:42:37:75:db:da:c3:8d:fc:c4:a3:ef:dd:
         1b:85:4e:29:d3:86:45:7a:d9:7b:f4:58:33:14:ac:5f:98:f1:
         fb:3b:5d:4f:08:c8:44:60:c7:0a:84:82:74:aa:c8:59:1a:6d:
         37:5e:c0:26:85:2c:65:65:7b:ef:9b:41:d8:a1:34:c8:ec:60:
         65:3f:d0:11:a6:e7:1c:7c:6b:dd:af:27:41:1d:3f:4d:6b:a0:
         46:83:1e:45:c5:7c:05:bf:6f:08:08:9f:64:00:d7:15:40:31:
         26:e2:06:67:12:d5:5f:f2:23:b7:84:b2:0d:ea:33:e7:a4:96:
         0a:82:a9:80:e4:c9:37:2a:de:37:d4:2c:ca:16:6b:81:47:92:
         14:4c:e5:e0:26:06:af:89:0f:b8:08:a5:79:68:0d:cc:06:c9:
         75:46:d9:c0:47:e0:bd:5b:90:53:a7:d3:01:5a:93:6d:30:9b:
         9f:c2:37:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:52:52 2025 by rpki-client