This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa
File:                     15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa (raw, json)
Hash identifier:          KqRvZo5E4wBhdqUsLILZB4n2af8w3vLwVtn67zB2JnU=
Subject key identifier:   7B:20:18:B8:F2:34:9A:96:97:3D:C1:95:35:15:61:D6:EA:1B:6C:C6
Certificate issuer:       /CN=A9180488/serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Certificate serial:       084C
Authority key identifier: C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa
Signing time:             Sat 20 Dec 2025 10:10:18 +0000
ROA not before:           Sat 20 Dec 2025 10:10:18 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     6453
IP address blocks:        103.26.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
                          rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 20:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124 (0x84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180488, serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
        Validity
            Not Before: Dec 20 10:10:18 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6946760a-1e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:95:1e:6a:79:19:ed:67:31:9e:e1:92:a5:6f:
                    ec:b2:1a:6b:87:92:7b:b7:e9:65:15:71:0b:b0:e9:
                    79:59:b2:15:25:ce:7e:23:1e:f9:c5:bb:75:8f:01:
                    df:38:e1:1c:5f:0b:d1:07:8c:da:b0:5d:80:da:cb:
                    80:d4:25:78:b0:ed:39:ac:1c:77:ef:48:b6:76:5b:
                    8f:69:97:6a:c4:a4:1e:e7:67:f1:71:38:69:5c:94:
                    2e:65:27:52:ae:1a:36:16:4f:08:63:c6:9f:d7:74:
                    19:d2:de:09:20:01:7d:26:8e:10:3b:89:94:4a:07:
                    8b:8f:17:54:af:8a:64:79:6e:41:9b:df:0d:79:45:
                    96:39:f1:b6:23:54:c2:a5:c2:d3:0f:91:ef:50:e4:
                    11:81:3f:33:a8:29:ec:c1:02:f1:fd:29:45:f4:7c:
                    bd:86:f4:49:da:c4:50:fd:10:96:ba:d7:5b:a1:4a:
                    02:6a:25:58:79:82:5c:e3:16:47:69:cd:1c:e7:2a:
                    9b:8c:a2:39:cb:32:84:ca:1a:5d:97:fd:8a:3e:da:
                    b8:77:98:e2:c2:34:1b:dd:0b:a9:1c:af:8f:0b:98:
                    fc:b3:89:5a:96:e2:8f:c0:6a:6a:78:7c:3e:f8:5c:
                    f4:d4:f7:d4:87:dd:ad:28:bb:4e:5a:71:51:b4:56:
                    42:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:20:18:B8:F2:34:9A:96:97:3D:C1:95:35:15:61:D6:EA:1B:6C:C6
            X509v3 Authority Key Identifier:
                keyid:C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:d4:58:f7:cb:1c:aa:88:09:7f:f7:3f:77:8f:fc:df:54:02:
         dd:75:2e:0e:41:01:a8:69:97:35:f4:27:d6:5d:ef:d4:ad:1b:
         6f:31:74:8e:52:6f:46:4f:1f:72:bd:c2:01:6c:1d:12:27:49:
         ee:55:b7:b5:30:92:0f:db:72:37:d6:c1:05:bf:ce:4f:5b:4f:
         08:73:00:16:41:91:30:b0:57:99:f2:89:95:21:97:36:b3:78:
         fe:f9:ea:98:9e:d6:f2:33:ba:52:a9:69:ca:f9:e2:1f:01:72:
         e7:62:b0:c9:66:ff:f7:3b:71:77:05:d8:a1:64:51:c7:dc:ca:
         1d:52:4f:9e:8c:b0:62:a8:d1:85:fb:df:13:23:20:42:ab:27:
         93:7c:e7:60:2e:eb:63:e4:c5:d3:14:79:b7:87:67:05:f0:1b:
         b7:d5:26:4f:cf:10:2a:cc:8a:2d:79:2b:50:76:4c:ca:39:e4:
         43:35:01:6c:85:8f:bf:9f:a0:a0:c3:34:b9:f7:df:53:c8:a4:
         0d:74:7c:83:f3:e8:12:42:78:52:d9:91:f6:cf:ee:5e:04:da:
         64:5e:7a:05:d4:3c:47:c1:bf:7d:ac:6e:5f:d2:1a:7f:7b:2e:
         c9:aa:a0:f1:a3:17:7e:08:70:1e:97:e9:62:f9:25:a1:02:f3:
         c8:84:a9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:28:45 2025 by rpki-client