This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/1AC2369A010911ECB732340DC4F9AE02.roa
File:                     1AC2369A010911ECB732340DC4F9AE02.roa (raw, json)
Hash identifier:          l/86X+8o68B2pJxJyOCeQIqt2RaiG2o8599WQfHm2oI=
Subject key identifier:   CD:CE:62:73:23:36:EC:CB:A9:32:1C:B6:AA:27:66:0D:FB:15:FA:10
Certificate issuer:       /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Certificate serial:       0827
Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/1AC2369A010911ECB732340DC4F9AE02.roa
Signing time:             Fri 16 Jan 2026 21:17:20 +0000
ROA not before:           Fri 16 Jan 2026 21:17:20 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138552
IP address blocks:        103.132.192.0/22 maxlen: 24
                          2404:3dc0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
                          rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2087 (0x827)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
        Validity
            Not Before: Jan 16 21:17:20 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696aaae0-5902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:93:28:32:98:b2:6a:60:db:e9:26:a4:07:fd:
                    96:9d:78:9c:31:09:09:c6:c1:ed:1b:76:d3:78:4e:
                    ff:ea:6a:8d:37:28:c5:c9:37:9c:b5:aa:27:3c:70:
                    c3:58:0d:ee:13:8e:62:64:27:ae:b5:b6:cf:ea:c0:
                    39:f7:21:c7:c5:55:b2:08:09:20:ca:b1:32:df:03:
                    e0:b2:22:f8:11:6b:8c:0b:50:2d:18:82:05:ee:b5:
                    79:0a:42:a3:09:a2:66:1d:c6:23:29:96:7a:13:be:
                    8b:ca:dd:60:63:bb:49:fb:2d:4e:27:0d:ef:8f:19:
                    4b:ce:2b:7d:ec:13:71:41:65:54:a0:f9:42:83:09:
                    14:eb:64:65:25:36:4e:a7:2e:20:e2:e8:f3:d2:26:
                    40:e0:12:b6:3a:1f:69:39:bc:a9:26:4c:ee:8f:25:
                    2c:1a:74:c3:a4:b6:d6:1f:8d:ff:53:39:f6:f8:64:
                    6e:37:a2:aa:8c:b5:fe:60:7b:f6:ec:05:e9:a7:7d:
                    e8:cc:4e:8b:0d:9c:f9:c9:06:b9:ed:a3:e7:ec:c0:
                    ff:e8:41:97:48:f0:27:8e:ff:14:03:1c:08:7b:6c:
                    1d:c5:46:db:b1:31:de:57:12:dc:20:f1:87:9f:47:
                    1c:1d:13:01:a0:9a:e7:1b:a7:44:09:91:23:eb:4e:
                    30:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CE:62:73:23:36:EC:CB:A9:32:1C:B6:AA:27:66:0D:FB:15:FA:10
            X509v3 Authority Key Identifier:
                keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/1AC2369A010911ECB732340DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.192.0/22
                IPv6:
                  2404:3dc0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:7e:61:60:9f:fb:ef:4d:a0:52:00:c7:54:0c:b0:25:42:4b:
         de:7e:8f:81:04:60:36:fe:86:25:c5:15:34:26:bf:a3:59:e7:
         b0:20:1c:27:af:35:11:56:d6:53:7d:63:49:59:0e:79:03:28:
         fd:e2:85:69:5a:78:07:45:ab:07:ca:81:9f:2b:31:5f:6a:c4:
         c8:8f:92:e4:4c:2f:d8:a8:3e:00:bd:61:04:bd:dc:dd:68:3b:
         74:bc:5d:6f:bd:e8:b4:83:b1:11:d3:e5:69:34:84:b5:f7:f4:
         33:2b:43:46:8d:a6:f9:a2:38:43:ec:31:cd:40:34:e6:53:8a:
         4e:66:28:b4:3b:00:f2:26:f6:59:80:69:7e:bf:36:91:20:7a:
         ac:d4:4f:f4:b7:ae:39:e2:77:0c:2d:8f:92:48:83:86:f3:29:
         47:07:cf:60:5d:f0:e2:ca:98:64:c8:5c:2d:23:45:06:36:76:
         69:26:ad:82:5d:f0:9c:0a:70:57:d0:a8:9c:04:82:5c:a2:14:
         43:ff:7f:23:76:3e:ac:a1:41:45:5c:1f:13:a6:21:92:bb:4d:
         47:70:9f:11:58:48:fa:91:a9:00:58:1c:2e:e4:a2:44:35:a5:
         f0:a8:93:75:da:85:46:55:58:2d:58:ec:1f:73:99:e7:e2:1a:
         99:cb:3e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:55:05 2026 by rpki-client