This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/203DB338782111EEAFDDBD86C4F9AE02.roa
File:                     203DB338782111EEAFDDBD86C4F9AE02.roa (raw, json)
Hash identifier:          ykJXAmgC9kF9NQ7NL49IYzkwdwdEbjDilRroROFuhv4=
Subject key identifier:   D0:CA:1B:F1:DB:91:62:2A:4C:10:1C:29:FD:EF:08:EC:65:19:13:7F
Certificate issuer:       /CN=A9158568/serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
Certificate serial:       01A8
Authority key identifier: 94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/203DB338782111EEAFDDBD86C4F9AE02.roa
Signing time:             Thu 08 Jan 2026 19:15:21 +0000
ROA not before:           Thu 08 Jan 2026 19:15:21 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     8739
IP address blocks:        37.139.131.0/24 maxlen: 24
                          193.47.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl
                          rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 18:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158568, serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F
        Validity
            Not Before: Jan  8 19:15:21 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69600249-2818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:12:fa:65:1e:6a:5c:19:0f:c7:75:43:6d:91:
                    ba:69:f9:c0:dd:d1:13:0e:a7:ac:70:6e:69:f2:30:
                    5b:5d:e7:25:05:d2:19:f1:0b:0b:1b:66:a1:ae:b2:
                    02:d9:54:e4:f7:39:69:fd:15:e9:3f:95:22:42:41:
                    79:e6:08:d2:b7:c0:20:f3:fb:ec:13:4e:ec:d0:cd:
                    77:01:25:9f:75:3d:ed:37:bb:6b:8d:6f:ac:de:8c:
                    2e:d6:f8:3a:0c:88:ab:57:a0:82:fb:27:4f:2b:ef:
                    19:7b:2b:26:e6:fb:01:ff:a6:cd:7a:76:47:13:4b:
                    d9:d8:0f:c8:b9:e7:a5:ef:0c:1c:e4:c1:52:86:bf:
                    28:4a:f7:83:8a:f4:ee:0e:01:f4:51:ed:fa:20:1b:
                    99:0c:4a:38:17:7b:a9:77:3b:7c:75:f3:5e:5a:d7:
                    ae:9e:a1:55:3c:7a:71:8c:59:10:16:06:87:a6:c7:
                    a6:fa:a6:02:7c:1d:8b:10:d0:e9:93:42:40:aa:3f:
                    d1:45:ef:e2:d4:32:6e:90:65:ad:47:00:c1:dc:fb:
                    1a:6e:43:24:09:67:36:83:83:d5:e3:73:d5:a1:ed:
                    f6:96:66:e0:83:0b:08:ab:d7:a6:80:85:50:0c:6c:
                    b9:bc:54:fd:43:21:42:ab:c1:26:7f:58:e6:04:f4:
                    c6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CA:1B:F1:DB:91:62:2A:4C:10:1C:29:FD:EF:08:EC:65:19:13:7F
            X509v3 Authority Key Identifier:
                keyid:94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/203DB338782111EEAFDDBD86C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.139.131.0/24
                  193.47.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:11:bb:0a:3b:d3:e0:30:e1:bd:ab:45:28:ca:06:0f:5c:66:
         b6:5c:ff:8b:20:03:55:3e:0c:d6:36:09:fd:50:ce:5d:42:b1:
         60:b9:ae:dc:a9:b5:01:9a:91:4a:d8:12:97:13:59:dd:31:e7:
         0d:77:eb:39:54:14:9b:8b:0a:0a:5e:70:01:8b:a3:d6:6c:14:
         1a:2b:07:f4:29:1a:20:20:ae:ac:38:cb:b7:0f:4d:57:07:c3:
         de:ef:d6:00:12:2a:35:51:9f:f5:26:76:4d:4f:51:90:62:6b:
         e8:4a:d0:3f:8d:6e:c6:49:a2:07:4b:0c:5f:14:80:f0:37:84:
         e0:a9:25:0f:db:38:8c:b3:40:94:ba:ae:56:9a:7d:63:0e:3b:
         bf:4d:86:87:1d:97:16:56:f6:85:e8:7f:95:a3:6b:3d:cb:05:
         b8:24:22:aa:70:52:29:1e:e6:39:ba:a9:c5:b2:cb:89:45:04:
         85:d1:75:01:c1:1b:dc:d1:77:fd:1b:24:52:c3:c9:38:32:52:
         d7:30:db:4f:27:5d:ee:d5:2a:5d:23:a1:73:fb:84:84:39:ca:
         e7:70:5f:bc:68:43:82:5a:ae:13:8e:5e:dd:ae:76:d8:79:65:
         fb:b0:be:55:5e:2e:5a:e1:a9:c9:0b:13:57:58:ce:ca:8b:dc:
         af:38:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:40:05 2026 by rpki-client