This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/49E05638EA0B11F09069D0EA6F6F56BC.roa
File:                     49E05638EA0B11F09069D0EA6F6F56BC.roa (raw, json)
Hash identifier:          3SZvzWML86+wGHlnuFj4ZS77Hk1sy5EU776SKpXlgt4=
Subject key identifier:   0E:DC:4B:17:12:3E:7D:FF:E8:5B:40:06:0D:9E:D3:D2:33:5C:38:46
Certificate issuer:       /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial:       0BAD
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/49E05638EA0B11F09069D0EA6F6F56BC.roa
Signing time:             Mon 05 Jan 2026 07:54:33 +0000
ROA not before:           Mon 05 Jan 2026 07:54:33 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     197537
IP address blocks:        103.23.72.0/24 maxlen: 24
                          103.23.73.0/24 maxlen: 24
                          103.23.74.0/24 maxlen: 24
                          103.23.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
                          rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 14:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2989 (0xbad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
        Validity
            Not Before: Jan  5 07:54:33 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=695b6e39-80f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:73:69:15:c2:ee:ba:a4:6f:93:03:fe:7d:03:
                    34:e0:95:d0:78:24:dd:6e:e7:a5:d4:86:b4:c4:3d:
                    35:ac:57:26:e1:d9:6c:c0:7c:e9:b7:89:70:b9:8e:
                    ba:48:6d:c7:e9:61:a0:1a:d8:a9:2b:9d:fb:3a:13:
                    50:d9:c5:44:13:50:c4:8d:26:8b:f2:c9:99:9f:5d:
                    7d:15:8d:e4:d3:a4:a1:a2:9c:74:e6:b1:6b:11:4d:
                    cf:66:ee:13:7d:01:1d:45:b4:37:bd:a9:c7:cf:13:
                    b2:23:30:ca:dd:8b:60:49:c8:e5:77:f3:20:a9:92:
                    82:37:e8:b9:18:ec:d9:a1:ac:cf:3c:2f:96:61:d9:
                    32:35:58:4b:08:e2:a1:6b:98:e0:50:9f:63:2d:96:
                    e2:eb:33:1b:1d:a1:45:41:96:37:c7:06:4a:a5:87:
                    a5:37:d8:74:a1:08:21:06:7d:f2:e9:08:ea:3d:10:
                    d5:c6:a3:00:bf:d2:34:c3:7a:c3:90:ce:c2:50:41:
                    15:5b:1f:b0:2f:c6:1d:8d:69:66:33:ec:ec:73:2b:
                    6a:21:c5:8c:87:6e:d8:92:5d:92:26:f5:f7:b4:39:
                    d9:7f:44:ae:7b:a3:a9:51:06:aa:67:5a:9f:c4:8a:
                    ea:26:0e:12:f4:50:12:8e:99:4f:fc:7c:70:be:ea:
                    a3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DC:4B:17:12:3E:7D:FF:E8:5B:40:06:0D:9E:D3:D2:33:5C:38:46
            X509v3 Authority Key Identifier:
                keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/49E05638EA0B11F09069D0EA6F6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:f0:bd:dc:eb:af:3a:83:be:09:38:62:ca:d9:67:dd:3a:8d:
         7b:cf:a6:9c:cf:27:72:5e:09:c9:cd:5f:37:c5:47:71:37:a8:
         91:1f:56:2f:61:b2:c2:ba:4b:bc:1a:67:0d:b2:1b:88:e8:14:
         90:b0:76:ef:a0:63:56:6f:ce:f5:8d:58:d6:61:b5:db:74:36:
         08:fe:f0:e8:83:b9:26:e9:c4:2c:a9:88:72:b8:f0:a2:f5:eb:
         8a:5a:af:36:21:d1:2c:ae:f2:13:ef:71:99:7b:0f:28:e5:29:
         94:50:3b:dd:8a:8e:f4:b6:70:b0:1c:7d:6b:aa:b1:d8:75:a9:
         63:56:de:e2:fb:3a:16:3f:d2:b3:1a:3b:62:45:2d:f1:8c:64:
         d4:e3:3a:76:94:86:da:89:08:dc:d9:64:92:44:c2:9e:2f:16:
         62:b9:87:3f:0a:06:48:2f:59:9d:6f:af:94:83:0a:cb:0c:04:
         07:d5:85:83:16:c7:69:5b:fe:0b:1f:66:fc:99:92:49:38:bd:
         bb:9c:3b:87:ec:9a:27:3f:77:c2:50:2f:a5:66:3f:ec:06:20:
         bb:76:af:59:62:38:75:67:b5:35:97:d8:29:54:b8:7f:6d:ed:
         9d:e3:06:20:c8:7a:65:47:73:dc:46:2d:d6:1e:fa:f2:c7:cc:
         1f:cf:ec:ad
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF
M0RBRDE1NzEwHhcNMjYwMTA1MDc1NDMzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTViNmUzOS04MGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4nNpFcLuuqRvkwP+fQM04JXQeCTdbuel1Ia0xD01rFcm4dlswHzpt4lwuY66
SG3H6WGgGtipK537OhNQ2cVEE1DEjSaL8smZn119FY3k06Shopx05rFrEU3PZu4T
fQEdRbQ3vanHzxOyIzDK3YtgScjld/MgqZKCN+i5GOzZoazPPC+WYdkyNVhLCOKh
a5jgUJ9jLZbi6zMbHaFFQZY3xwZKpYelN9h0oQghBn3y6QjqPRDVxqMAv9I0w3rD
kM7CUEEVWx+wL8YdjWlmM+zscytqIcWMh27Ykl2SJvX3tDnZf0Sue6OpUQaqZ1qf
xIrqJg4S9FASjplP/HxwvuqjvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFA7cSxcS
Pn3/6FtABg2e09IzXDhGMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw
RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEZDNDAvNjE3RjM1MzY0MEUxMTFFQUJDNjJEQjI2QzRGOUFFMDIvNDlFMDU2MzhF
QTBCMTFGMDkwNjlEMEVBNkY2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnF0gwDQYJKoZIhvcNAQELBQADggEBAE7wvdzrrzqDvgk4
YsrZZ906jXvPppzPJ3JeCcnNXzfFR3E3qJEfVi9hssK6S7waZw2yG4joFJCwdu+g
Y1ZvzvWNWNZhtdt0Ngj+8OiDuSbpxCypiHK48KL164parzYh0Syu8hPvcZl7Dyjl
KZRQO92KjvS2cLAcfWuqsdh1qWNW3uL7OhY/0rMaO2JFLfGMZNTjOnaUhtqJCNzZ
ZJJEwp4vFmK5hz8KBkgvWZ1vr5SDCssMBAfVhYMWx2lb/gsfZvyZkkk4vbucO4fs
mic/d8JQL6VmP+wGILt2r1liOHVntTWX2ClUuH9t7Z3jBiDIemVHc9xGLdYe+vLH
zB/P7K0=
-----END CERTIFICATE-----
Generated at Sun Jan 18 08:55:01 2026 by rpki-client