This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/C810C558F5F311F09C19772B516F56BC.roa
File:                     C810C558F5F311F09C19772B516F56BC.roa (raw, json)
Hash identifier:          GDJ3IcMZxJHS6aFdMqNZ3YhgV8GAAMHtpQHCnSQdVAo=
Subject key identifier:   08:19:71:21:98:05:55:9D:5B:7F:8E:95:05:6E:63:FB:44:10:10:E8
Certificate issuer:       /CN=A913F8FC/serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D
Certificate serial:       0195
Authority key identifier: 6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/C810C558F5F311F09C19772B516F56BC.roa
Signing time:             Tue 20 Jan 2026 12:43:04 +0000
ROA not before:           Tue 20 Jan 2026 12:43:03 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     38207
IP address blocks:        103.5.188.0/22 maxlen: 24
                          110.172.16.0/21 maxlen: 24
                          219.90.96.0/20 maxlen: 24
                          2402:4300::/32 maxlen: 32
                          2402:4300::/40 maxlen: 40
                          2402:4300::/48 maxlen: 48
                          2402:4300:40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl
                          rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F8FC, serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D
        Validity
            Not Before: Jan 20 12:43:03 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=696f7857-98fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:b2:e9:91:87:67:d3:93:af:ea:f7:e5:0c:
                    21:b9:78:ad:77:6d:74:0e:09:e0:16:26:56:8b:6e:
                    b5:b3:9f:c9:c3:2f:ef:14:5d:b5:7a:09:ce:7e:95:
                    26:73:a6:48:6c:47:3f:b9:85:e3:21:a9:97:f7:d8:
                    28:40:a2:bb:10:11:85:d4:4b:e7:8d:da:f8:e7:6b:
                    01:6f:54:10:c4:1d:42:a4:2c:1b:0d:42:bb:19:df:
                    68:9e:11:59:7d:c1:46:b4:91:3d:71:18:65:db:79:
                    e2:b0:2b:b4:40:f9:9f:ce:29:47:0e:dd:d4:f6:6b:
                    b3:78:0e:6a:5a:a2:5b:f9:68:97:bf:11:49:ec:31:
                    26:eb:ab:b0:fe:6b:6f:d7:29:d1:9b:68:a3:5d:ee:
                    f8:3b:48:8a:5b:f6:c4:1a:e6:85:b4:3e:d5:0a:93:
                    6a:76:b5:7b:9d:b3:ab:69:d6:24:a8:b0:8e:a8:61:
                    c0:0c:44:90:da:bb:56:95:c9:dd:6f:06:ea:5f:72:
                    91:35:0b:85:d1:49:fa:0d:99:d5:3b:fc:ea:cc:06:
                    ba:02:80:d6:12:cf:48:a6:be:0c:be:02:1f:8b:1a:
                    80:b0:6d:cd:83:7e:5f:cc:e7:b6:af:08:bc:46:50:
                    89:f0:a4:60:48:b7:d1:dc:fe:92:26:fe:e2:40:64:
                    ec:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:19:71:21:98:05:55:9D:5B:7F:8E:95:05:6E:63:FB:44:10:10:E8
            X509v3 Authority Key Identifier:
                keyid:6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/C810C558F5F311F09C19772B516F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.188.0/22
                  110.172.16.0/21
                  219.90.96.0/20
                IPv6:
                  2402:4300::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:d2:18:c0:ac:7a:e3:8d:09:4f:c6:84:f7:e1:b8:45:25:f6:
         ec:03:61:66:1e:57:17:cf:18:d6:ac:b5:89:67:56:96:e9:46:
         f6:70:7c:00:cd:f7:da:42:d4:ab:b3:5e:78:1f:20:9b:fa:3f:
         e6:d5:d6:01:1d:7f:51:3e:6f:1d:4b:b0:35:2f:85:67:99:96:
         45:5b:b0:78:72:f3:38:b8:ee:e8:3d:75:d5:ae:7c:da:20:3e:
         fa:d0:ca:1c:35:9f:c1:66:4e:cc:a0:3d:8f:33:9f:6f:a3:3d:
         11:94:b7:78:4f:ba:55:16:a5:04:d9:2e:da:3b:db:28:2e:98:
         81:69:75:06:cd:5e:eb:ff:58:22:96:a8:bc:8e:2d:d3:9e:15:
         bb:41:21:30:16:85:c0:00:87:19:06:fc:b1:6b:3c:e7:e9:28:
         cf:9f:05:7f:12:5d:11:9e:8d:68:dc:3b:db:33:c9:3b:26:ac:
         81:99:e0:1b:29:45:3a:b2:70:08:b5:7e:61:57:e1:33:20:d2:
         81:a0:8e:7e:14:d2:da:ef:35:15:7e:0f:ee:05:2d:c8:58:1d:
         7a:da:a5:43:9f:4c:22:12:8f:a2:5b:ac:e4:bc:58:f1:86:bb:
         24:77:5d:68:29:f1:00:44:1f:b8:2f:64:78:36:e5:89:0a:e8:
         15:65:ec:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:53:39 2026 by rpki-client