This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/EF260118D54211EEA18A7234C4F9AE02.roa
File:                     EF260118D54211EEA18A7234C4F9AE02.roa (raw, json)
Hash identifier:          1uayieOsfgyIo4sMH5q9fVD6SHBlNeyNnbHHMUaf5mc=
Subject key identifier:   46:4C:81:A0:0E:9F:18:CD:46:63:CD:A8:A0:52:55:A7:88:CD:3B:2D
Certificate issuer:       /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Certificate serial:       0166
Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/EF260118D54211EEA18A7234C4F9AE02.roa
Signing time:             Thu 15 Jan 2026 04:22:41 +0000
ROA not before:           Thu 15 Jan 2026 04:22:41 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     134461
IP address blocks:        103.160.140.0/24 maxlen: 24
                          103.160.141.0/24 maxlen: 24
                          2001:df5:a080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
                          rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
        Validity
            Not Before: Jan 15 04:22:41 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69686b91-63fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:de:23:aa:8a:5c:1f:59:3f:8c:df:47:ff:c3:
                    33:4c:89:78:48:40:fc:5b:ac:f9:f0:1a:90:b9:a4:
                    5e:8c:0c:9b:2d:f0:31:39:4b:00:3a:33:fb:ed:f2:
                    90:99:b5:12:b8:d2:e1:9e:13:bb:0a:17:92:4f:5e:
                    c1:47:62:2b:f7:4a:55:2e:bd:76:11:96:b9:af:74:
                    50:3b:e1:6b:f4:49:bc:b4:17:d8:30:d2:b8:64:8a:
                    7a:d0:0c:93:a7:38:8d:97:df:db:09:89:68:72:1d:
                    22:00:a8:d1:4c:2b:9b:be:ea:d4:5c:a8:1c:6a:b5:
                    63:98:83:27:13:be:df:92:1d:37:44:07:71:ac:25:
                    00:55:49:cb:1d:f5:f1:5d:9b:13:a2:92:d8:5b:c5:
                    ad:1b:84:65:b5:95:0b:00:39:95:61:b0:78:cd:45:
                    5c:f0:83:ad:60:47:e0:cf:21:1f:b7:ff:c8:17:27:
                    68:86:a3:44:8e:30:cd:74:b0:c9:50:e1:54:74:c1:
                    b6:9c:4f:74:f6:fa:5e:31:d6:8b:dd:7b:54:b6:30:
                    0c:61:f0:55:89:5e:e8:a4:31:96:a5:77:fd:9e:d2:
                    c2:36:f1:10:4d:a5:17:13:54:45:34:88:9c:3c:32:
                    7e:4f:4a:85:c4:20:31:0e:ea:20:ec:78:10:21:d1:
                    3b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4C:81:A0:0E:9F:18:CD:46:63:CD:A8:A0:52:55:A7:88:CD:3B:2D
            X509v3 Authority Key Identifier:
                keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/EF260118D54211EEA18A7234C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.140.0/23
                IPv6:
                  2001:df5:a080::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:31:2e:00:ba:da:1a:98:76:a4:3d:ee:99:e9:69:a6:01:69:
         54:c0:7f:eb:9c:f1:d4:2d:ca:5e:27:75:51:68:61:e2:3e:e2:
         5b:63:6c:73:b6:69:b1:2f:9b:11:6f:5e:19:3f:ee:4a:1a:15:
         a3:a7:d3:c4:07:20:3a:bb:d1:48:f3:c3:38:e6:fb:78:c1:6b:
         f0:45:46:fb:9e:e1:7d:c0:3f:00:09:8b:cb:76:39:71:10:70:
         d4:4c:d5:3f:41:cc:2b:2a:bb:ee:ba:41:bf:e7:b8:cd:7e:f2:
         be:55:6b:bd:00:7d:67:24:45:d1:01:6c:04:ce:a2:c1:df:40:
         c5:00:5a:ec:c4:64:9f:91:c3:d4:23:71:c1:12:3e:f2:97:df:
         dc:a2:c3:ad:75:42:05:2a:ad:7f:a2:d9:04:15:40:4c:ef:3d:
         78:07:2b:a2:97:8e:3a:b6:70:46:6e:6d:49:5c:30:1d:f1:85:
         e1:56:b2:da:b1:64:7e:07:3b:97:ca:66:32:4b:d7:5a:67:fb:
         df:f8:97:b4:f0:bb:f6:b3:98:4b:98:7f:4a:c1:69:e0:7d:4c:
         04:c7:48:66:2c:04:b4:53:e1:40:13:e0:47:84:29:ba:a6:ad:
         1a:a8:81:28:50:7d:4b:9a:12:f1:07:76:de:0d:ed:84:03:01:
         f5:88:70:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:25:49 2026 by rpki-client