This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/2FA91770D61A11EE9BDDD627C4F9AE02.roa
File:                     2FA91770D61A11EE9BDDD627C4F9AE02.roa (raw, json)
Hash identifier:          GgqWDXRXMEsQeN75LJgCiv55sHeACOuJk1QD+hoxC5o=
Subject key identifier:   EB:18:F5:2F:74:A8:2D:38:AD:2C:21:08:EC:35:B4:BB:63:BD:1A:FA
Certificate issuer:       /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Certificate serial:       0165
Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/2FA91770D61A11EE9BDDD627C4F9AE02.roa
Signing time:             Thu 15 Jan 2026 04:22:40 +0000
ROA not before:           Thu 15 Jan 2026 04:22:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     13335
IP address blocks:        103.160.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
                          rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
        Validity
            Not Before: Jan 15 04:22:40 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69686b90-7fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f0:04:9a:f5:27:8f:ee:e3:c0:18:20:1c:d7:
                    d5:6a:e0:4f:0c:eb:ed:ef:d6:ed:e6:2e:fc:04:98:
                    d0:cb:aa:95:ec:4e:55:df:c7:ae:e9:01:2c:c0:14:
                    04:27:e8:a8:8b:a7:12:3c:41:7e:8b:29:7f:56:b2:
                    26:35:82:a5:7a:b4:08:02:d7:50:18:c2:8b:63:5f:
                    1f:76:b7:d9:3a:18:a4:b4:e8:9c:4b:ef:20:57:3c:
                    92:a8:70:9f:7d:fe:a3:a5:d1:d7:04:00:4d:e5:c3:
                    e0:b7:69:4d:9e:53:cd:dc:21:65:41:7b:dd:b4:3a:
                    bc:1f:4f:05:5f:c4:7d:a3:36:d3:5f:26:fe:06:63:
                    ee:5e:4e:0c:02:13:08:a0:57:dc:b1:19:df:c2:c9:
                    50:00:e5:d1:e2:c6:ed:cb:cb:5a:89:fa:b5:44:77:
                    22:b9:f2:0b:27:ba:93:84:fd:ff:e9:73:4c:c3:53:
                    67:77:16:4e:72:bc:86:70:1c:8e:49:d2:52:79:9a:
                    87:0c:09:18:34:36:3c:2a:ce:5b:2e:4d:7f:de:28:
                    12:14:49:6e:4b:60:9c:2a:5b:94:68:90:4a:69:03:
                    81:9d:ce:91:c6:14:66:d5:cf:8a:9a:de:d5:56:a5:
                    51:03:a6:20:61:aa:92:9f:0b:65:d8:92:95:32:8b:
                    5f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:18:F5:2F:74:A8:2D:38:AD:2C:21:08:EC:35:B4:BB:63:BD:1A:FA
            X509v3 Authority Key Identifier:
                keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/2FA91770D61A11EE9BDDD627C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:7e:4d:f2:ab:2d:42:30:de:d7:f5:39:64:0d:8a:3b:7f:3f:
         ad:d1:47:f0:4a:92:38:7a:1f:fd:14:0e:ef:c2:76:30:78:98:
         d3:a0:7e:8e:c5:13:79:44:c9:f8:1f:b6:60:f6:90:3a:d3:0a:
         d2:80:22:84:d5:0a:94:99:77:f5:56:d9:5a:3c:4a:7e:3e:50:
         b8:20:4b:33:8e:84:c3:94:87:f1:fc:79:f2:58:f1:be:8c:5c:
         80:0f:35:fb:e9:65:7d:a9:c9:70:2c:ca:a1:b0:8f:44:31:fe:
         05:dc:19:49:32:ac:6e:83:f6:31:1b:07:7b:63:ca:a2:56:20:
         cb:a2:fb:e5:4e:5b:77:22:90:f9:ec:67:f2:cc:0b:88:2c:e6:
         e3:df:4a:fb:5e:51:38:17:23:85:53:0f:b0:aa:24:f9:15:c5:
         65:0a:e3:b3:ee:b6:a2:20:f3:29:43:9e:bf:08:b3:0b:b2:53:
         5f:1a:fd:6b:1d:e7:37:4c:7c:9f:3c:c0:e9:dd:00:53:b9:a6:
         94:25:b0:d8:87:27:b3:1e:db:6d:bb:6c:cf:07:3c:5d:b9:0d:
         bc:96:a9:f8:f6:8b:a0:48:bf:c7:18:64:0b:c4:87:66:75:a0:
         a4:25:80:80:4e:c2:a1:d8:be:45:20:13:60:8c:8b:5a:fe:96:
         f0:df:50:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:31:42 2026 by rpki-client