This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/1405AC90F0E911F0BB71DECD406F56BC.roa
File:                     1405AC90F0E911F0BB71DECD406F56BC.roa (raw, json)
Hash identifier:          M+PCd41tpDirGlLnrMePnJnIIPgPA0EZUgSQIhumC38=
Subject key identifier:   4D:D0:07:02:F5:EE:FF:BC:9A:0A:89:88:7D:CC:F0:DF:74:B4:FB:40
Certificate issuer:       /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial:       0A0B
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/1405AC90F0E911F0BB71DECD406F56BC.roa
Signing time:             Wed 14 Jan 2026 01:33:50 +0000
ROA not before:           Wed 14 Jan 2026 01:33:50 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     148996
IP address blocks:        103.142.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
                          rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2571 (0xa0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
        Validity
            Not Before: Jan 14 01:33:50 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6966f27e-e55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b8:3b:08:53:61:b0:db:4a:1b:61:06:64:fb:
                    30:5a:91:c9:4c:c4:0f:83:3d:e1:16:bf:d9:cb:8c:
                    47:bd:bc:47:c1:9a:60:29:b5:ae:d7:7c:9c:4d:87:
                    0d:88:82:7c:c9:e5:4b:90:5a:93:ad:59:90:53:05:
                    8f:11:c2:98:b4:65:36:0e:b2:e2:20:47:44:a5:34:
                    18:e9:4b:3b:43:6d:b3:5d:e4:26:be:1f:07:e8:03:
                    c4:ae:0a:99:5d:16:55:08:79:a5:cd:fd:7b:aa:fd:
                    83:af:19:45:8e:10:a1:23:63:6f:78:00:12:34:48:
                    2e:6d:d1:ec:51:7f:27:09:dc:fd:ec:60:6a:f0:c8:
                    fb:c7:37:ef:fa:69:cc:8c:a5:10:40:2f:cc:5f:97:
                    2a:76:1d:f2:2b:31:93:68:c9:ee:c8:b3:9a:d9:d4:
                    80:dc:50:df:56:f0:2f:a6:42:02:61:dc:f5:ff:d9:
                    5f:9b:be:a3:e0:78:71:c0:4c:e1:b8:af:bf:06:ea:
                    94:44:07:6c:c5:07:81:5d:30:e3:b3:3b:f2:50:26:
                    d3:58:42:b7:02:2c:25:59:8a:6f:ec:4e:1c:fb:68:
                    e2:cc:13:5e:69:23:49:d6:b6:ce:62:64:64:b2:c2:
                    da:99:85:b8:21:8a:cf:66:53:1e:7b:6c:f4:83:2f:
                    34:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D0:07:02:F5:EE:FF:BC:9A:0A:89:88:7D:CC:F0:DF:74:B4:FB:40
            X509v3 Authority Key Identifier:
                keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/1405AC90F0E911F0BB71DECD406F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:93:f1:60:72:5e:fa:61:e9:c4:79:ef:07:92:2b:05:c9:8a:
         34:a9:65:74:aa:28:2f:5f:74:c1:57:3a:ac:50:48:71:1d:b7:
         91:9b:10:ef:c2:19:4c:3d:55:3d:8b:f0:c5:a2:cd:54:f9:22:
         b1:0a:8d:eb:8e:22:34:3c:3f:94:3d:db:8c:f7:61:35:09:1d:
         ee:5d:bd:c0:bc:10:f6:76:57:69:e3:85:f6:db:5a:8d:6a:9c:
         8b:ab:21:27:24:ad:bc:41:b5:7e:bd:cf:5c:95:85:05:8f:14:
         d2:61:af:5d:eb:6f:62:07:9e:c8:32:9b:ea:6b:70:61:ec:9f:
         59:03:96:0b:b5:01:37:3c:be:b1:bc:5a:23:b3:5a:cd:1d:5d:
         3d:87:58:5b:31:b2:8e:23:4c:ae:cc:83:64:d7:e6:84:28:9d:
         a1:4f:e9:b4:60:92:ce:6f:14:3e:d9:63:5a:e7:0d:16:b4:8c:
         78:5f:7a:2c:d5:5e:8f:7f:33:62:1e:f5:8c:bb:9a:4b:3d:75:
         a2:32:71:f7:f0:4c:4f:35:06:48:52:37:a8:a8:c8:74:e5:80:
         1b:f5:8c:56:7b:19:f3:31:bc:a7:6e:50:f2:cf:b2:db:31:7d:
         8d:51:2c:0f:63:af:f0:bc:2d:c0:bb:0f:14:af:bd:ea:b7:13:
         c6:45:b2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:06:52 2026 by rpki-client