This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/54AC9B64C3B411EEBF90C180C4F9AE02.roa
File:                     54AC9B64C3B411EEBF90C180C4F9AE02.roa (raw, json)
Hash identifier:          gBbKIgvrjN8EF88UMQad2KPKIqDVcnl1Of4GJG7HN64=
Subject key identifier:   77:21:B4:AF:72:21:74:36:10:18:3E:16:01:22:BC:A5:E8:93:C7:F2
Certificate issuer:       /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
Certificate serial:       04F2
Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/54AC9B64C3B411EEBF90C180C4F9AE02.roa
Signing time:             Fri 26 Dec 2025 23:19:57 +0000
ROA not before:           Fri 26 Dec 2025 23:19:57 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152156
IP address blocks:        103.176.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl
                          rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 22:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1266 (0x4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D6C9, serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
        Validity
            Not Before: Dec 26 23:19:57 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=694f181d-f4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:e5:af:f6:0a:f1:2f:d5:3a:8d:2c:10:4b:
                    5b:e3:8e:65:93:4f:89:67:9f:01:69:74:dc:37:33:
                    9a:01:a9:5f:21:60:ae:f0:09:f8:ee:24:df:ed:e3:
                    33:c3:64:7a:57:36:f8:aa:23:23:08:04:6e:91:d7:
                    2b:82:d3:76:cb:bb:89:21:9c:4f:da:7b:56:7e:fd:
                    a1:55:85:4c:25:cb:3c:76:e5:fe:b9:8e:48:52:1b:
                    1c:f6:40:b3:ba:d6:2f:9d:e7:68:f4:d0:b7:e2:76:
                    13:32:26:1c:6c:34:19:e8:24:22:9c:ec:11:e3:b9:
                    64:66:3a:70:d6:45:4e:38:87:93:8b:52:9d:48:f5:
                    d9:d1:85:f7:7b:2d:57:20:1e:4f:49:eb:5c:70:ad:
                    94:44:aa:19:d3:2a:69:9b:ca:d5:8f:6e:71:fd:d2:
                    f0:09:44:68:10:a2:42:aa:b0:26:97:02:13:9a:a3:
                    3f:82:1f:df:86:26:73:8f:09:61:99:6a:38:f5:dc:
                    ec:fd:4b:7a:e0:5d:4a:d3:e0:87:af:9a:9c:ea:9d:
                    f0:d7:8f:ae:c9:86:47:75:d0:e2:9c:01:c4:c4:a5:
                    99:38:24:8d:85:e7:5a:fd:bc:fe:a1:1f:91:df:8c:
                    52:93:5c:d3:e1:3e:74:c3:67:e2:bc:0d:59:46:a3:
                    a4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:21:B4:AF:72:21:74:36:10:18:3E:16:01:22:BC:A5:E8:93:C7:F2
            X509v3 Authority Key Identifier:
                keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/54AC9B64C3B411EEBF90C180C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:25:68:36:6d:b5:48:ba:b8:4c:d4:d1:78:04:89:65:f9:3e:
         49:a5:b2:36:27:c7:97:f6:d3:a0:c1:0a:49:e0:47:10:4a:f2:
         2d:7b:41:55:2f:10:78:b5:2e:2a:1c:e4:1a:ac:f0:b6:68:b4:
         c8:e0:28:99:43:70:59:57:22:49:87:dc:e6:eb:d1:07:b8:91:
         1c:63:9d:31:8f:bf:43:69:2d:b9:ed:e1:9b:b5:d2:95:9d:3c:
         4e:b8:5f:ee:eb:a1:41:88:f1:39:a8:f9:ee:9c:30:80:fa:4c:
         d9:39:3b:46:dd:34:f6:a3:7d:d9:62:e8:3a:49:be:bf:9c:17:
         9a:93:2b:61:1e:b3:cc:82:2a:7d:eb:f6:07:50:12:03:2e:f7:
         49:23:9f:4f:92:2b:b5:89:66:c3:9f:58:02:7f:de:f3:64:ea:
         48:ef:6d:fe:49:28:91:63:9e:09:ec:4a:d1:5d:82:72:d1:be:
         54:b5:2a:e0:ee:30:bf:5e:34:ab:6e:75:1f:c0:0d:10:e7:b2:
         8d:8e:5a:20:1d:f2:94:cf:a5:38:a6:42:45:90:a5:df:94:23:
         a2:ea:59:d2:3d:69:c5:49:e6:d1:fa:94:0f:a1:ed:b4:5d:62:
         e1:eb:b9:54:d9:1b:d5:4d:7c:af:0e:b9:79:5f:df:36:0e:50:
         53:09:de:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 11:25:25 2026 by rpki-client