This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/BA2C0A9E673A11F0B876713DC4F9AE02.roa
File:                     BA2C0A9E673A11F0B876713DC4F9AE02.roa (raw, json)
Hash identifier:          iENsMSoALP99bR1N5hhDPtffTTwsxcPuKsVO6aYiFUM=
Subject key identifier:   E0:BE:E5:3A:65:AA:97:ED:BC:8B:DA:04:98:6A:0A:CA:5C:D3:9B:C2
Certificate issuer:       /CN=A911CE4A/serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
Certificate serial:       63
Authority key identifier: 54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/BA2C0A9E673A11F0B876713DC4F9AE02.roa
Signing time:             Sun 25 Jan 2026 06:25:10 +0000
ROA not before:           Sun 25 Jan 2026 06:25:10 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        103.82.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl
                          rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CE4A, serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
        Validity
            Not Before: Jan 25 06:25:10 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6975b746-ee14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:70:22:80:34:35:ae:f6:83:96:a3:35:a8:57:
                    5a:d0:31:3c:99:26:2a:7e:93:a7:35:77:cd:2a:bb:
                    bb:63:95:25:17:6f:9f:71:90:8c:21:10:1c:03:a0:
                    21:d6:60:93:bb:8f:25:89:56:18:e1:77:65:58:da:
                    38:b8:41:93:fb:b5:00:a3:71:0a:27:a7:ae:50:2f:
                    2d:f0:df:19:73:cb:be:b9:4f:52:22:3b:b6:7a:a7:
                    06:68:5c:82:57:32:df:0a:81:81:73:31:65:4d:46:
                    a8:fb:a1:ba:da:96:f5:54:c0:a7:4a:d8:87:3f:c8:
                    64:94:ae:e3:ab:cb:0d:29:92:e1:9a:f8:3d:00:9f:
                    07:b2:29:5f:27:52:fb:5f:57:79:01:fe:bf:1d:46:
                    c5:3d:9f:ee:09:87:1e:a4:75:07:b6:d7:e5:ad:39:
                    2c:b3:48:f7:11:29:cd:23:32:85:54:93:bd:a6:90:
                    ab:ab:1c:72:47:c8:9f:60:f1:7a:1d:b2:3a:5c:7a:
                    ea:6d:59:60:a2:2f:21:0d:8c:5f:f6:c3:c9:42:f6:
                    69:78:ce:fc:c4:26:eb:99:32:27:47:6d:9e:48:16:
                    0d:66:2a:e9:5f:16:f4:54:71:ba:a9:be:89:3b:6c:
                    b0:1d:cd:b2:50:b7:c2:67:86:d4:60:46:b6:5b:98:
                    a3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BE:E5:3A:65:AA:97:ED:BC:8B:DA:04:98:6A:0A:CA:5C:D3:9B:C2
            X509v3 Authority Key Identifier:
                keyid:54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/BA2C0A9E673A11F0B876713DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:c5:4d:23:7b:a8:c0:82:07:91:eb:df:81:19:1e:c2:dc:3e:
         76:e8:3e:f2:2b:da:a2:bf:43:45:4b:64:00:c4:5d:0f:60:2d:
         74:b4:70:43:11:84:8a:69:6e:40:c0:05:13:ad:20:82:71:3a:
         9c:0b:56:ed:65:f7:40:e9:9c:4e:b4:c5:36:55:c4:c5:8e:c3:
         14:6d:7c:b8:11:ed:4d:c1:69:91:70:b4:18:d8:fd:81:ad:f7:
         cd:e4:e3:2b:29:4c:6c:4a:9a:99:2a:69:26:8c:42:95:1d:6a:
         1e:cd:87:ca:e3:04:d3:22:53:3c:16:b0:1d:8d:f4:22:04:48:
         9a:8d:3c:fc:bf:be:db:49:ef:8d:0b:c1:27:40:81:63:5d:af:
         61:97:3f:1b:d0:34:82:81:b1:5a:ee:c7:36:1a:ca:11:21:5e:
         c0:ad:6a:b0:ca:49:a1:66:40:12:c5:be:77:74:bb:66:6b:06:
         b4:e3:24:a7:37:04:ed:1d:09:b1:18:84:64:ba:a2:ff:9a:a1:
         47:8e:fe:d9:76:94:30:eb:c4:af:a1:96:ad:d7:30:b5:1a:a5:
         26:b6:43:d5:63:2a:0a:03:cb:9b:ce:41:95:6b:6c:b2:b7:23:
         1b:7a:8f:ba:98:8f:55:b1:85:36:d3:87:37:ac:e2:ae:33:bc:
         b6:08:45:da
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEx
Q0U0QTExMC8GA1UEBRMoNTQxREQxNUUxNTRFNTA4RkIwMEZEQjI0NUM0RTc2RjJB
RDNEODgxRDAeFw0yNjAxMjUwNjI1MTBaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NzViNzQ2LWVlMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCLcCKANDWu9oOWozWoV1rQMTyZJip+k6c1d80qu7tjlSUXb59xkIwhEBwDoCHW
YJO7jyWJVhjhd2VY2ji4QZP7tQCjcQonp65QLy3w3xlzy765T1IiO7Z6pwZoXIJX
Mt8KgYFzMWVNRqj7obralvVUwKdK2Ic/yGSUruOryw0pkuGa+D0AnweyKV8nUvtf
V3kB/r8dRsU9n+4Jhx6kdQe21+WtOSyzSPcRKc0jMoVUk72mkKurHHJHyJ9g8Xod
sjpceuptWWCiLyENjF/2w8lC9ml4zvzEJuuZMidHbZ5IFg1mKulfFvRUcbqpvok7
bLAdzbJQt8JnhtRgRrZbmKNXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU4L7lOmWq
l+28i9oEmGoKylzTm8IwHwYDVR0jBBgwFoAUVB3RXhVOUI+wD9skXE528q09iB0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDRTRBL0UxRUExOUY2Njcz
ODExRjBBRDU2NkQ3RkM0RjlBRTAyL1ZCM1JYaFZPVUktd0Q5c2tYRTUyOHEwOWlC
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVkIzUlhoVk9VSS13RDlza1hFNTI4cTA5aUIwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Q0U0QS9FMUVBMTlGNjY3MzgxMUYwQUQ1NjZEN0ZDNEY5QUUwMi9CQTJDMEE5RTY3
M0ExMUYwQjg3NjcxM0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmdSEDANBgkqhkiG9w0BAQsFAAOCAQEAdMVNI3uowIIHkevf
gRkewtw+dug+8ivaor9DRUtkAMRdD2AtdLRwQxGEimluQMAFE60ggnE6nAtW7WX3
QOmcTrTFNlXExY7DFG18uBHtTcFpkXC0GNj9ga33zeTjKylMbEqamSppJoxClR1q
Hs2HyuME0yJTPBawHY30IgRImo08/L++20nvjQvBJ0CBY12vYZc/G9A0goGxWu7H
NhrKESFewK1qsMpJoWZAEsW+d3S7ZmsGtOMkpzcE7R0JsRiEZLqi/5qhR47+2XaU
MOvEr6GWrdcwtRqlJrZD1WMqCgPLm85BlWtssrcjG3qPupiPVbGFNtOHN6zirjO8
tghF2g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:42:29 2026 by rpki-client