This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/892F26B4EEF411F0A51D99D83B6F56BC.roa
File:                     892F26B4EEF411F0A51D99D83B6F56BC.roa (raw, json)
Hash identifier:          jrvzvu2HttLsHNzjZYsWd8qIkjND9xDfEJO2bNSyg2w=
Subject key identifier:   DB:CC:82:65:1A:CF:AC:AA:C6:5D:E7:65:1A:E7:F9:7F:E8:A7:41:59
Certificate issuer:       /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
Certificate serial:       040A
Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/892F26B4EEF411F0A51D99D83B6F56BC.roa
Signing time:             Sun 11 Jan 2026 13:50:49 +0000
ROA not before:           Sun 11 Jan 2026 13:50:49 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     139855
IP address blocks:        103.163.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl
                          rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1034 (0x40a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
        Validity
            Not Before: Jan 11 13:50:49 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6963aab9-09a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:5b:ba:57:e3:17:ff:22:e7:39:2d:b2:fd:
                    f9:ef:6d:39:2f:19:fa:b3:fc:73:da:ed:05:f0:83:
                    c2:61:3b:ca:b3:79:4f:e3:42:e8:95:e6:7a:10:1e:
                    f1:37:02:bb:01:ca:58:b7:7f:e5:19:ba:c9:6c:97:
                    7f:51:fa:8f:f2:a4:1e:b4:18:40:fe:6c:9c:1c:38:
                    64:ab:24:fe:aa:54:a9:5c:34:2a:50:32:f2:ed:e0:
                    04:ef:95:2b:8e:9f:bd:2f:a6:3e:e3:3d:a4:6a:71:
                    2e:21:d5:97:1c:d9:9e:70:98:78:75:5a:20:c4:03:
                    69:24:66:f3:c7:46:4a:5f:41:38:cb:76:af:b4:a7:
                    91:cc:15:71:64:eb:cf:fe:0a:f1:a1:55:67:65:9c:
                    5e:e3:8a:4f:fb:96:6a:d0:2b:33:18:dd:29:85:f1:
                    f5:0b:31:29:47:fb:ec:78:c0:f4:52:c1:37:12:eb:
                    f1:fe:76:68:4f:5e:cc:24:6c:d0:35:4c:c5:b4:eb:
                    35:fd:f1:3e:df:ed:2c:23:b0:e3:b1:eb:8c:6f:aa:
                    7f:5f:35:fb:80:a1:0a:01:30:6c:3c:e6:00:b4:f9:
                    0d:98:d7:7a:b3:ac:51:5d:ee:7f:69:63:c6:7d:4f:
                    60:4c:d0:b8:6d:04:7f:3d:07:3e:12:ee:a7:03:96:
                    c8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CC:82:65:1A:CF:AC:AA:C6:5D:E7:65:1A:E7:F9:7F:E8:A7:41:59
            X509v3 Authority Key Identifier:
                keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/892F26B4EEF411F0A51D99D83B6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:b2:c3:98:48:c9:57:8b:01:f8:7e:fa:e8:7b:56:3f:e8:f4:
         48:d7:16:75:23:6b:a9:e8:64:04:94:d1:b3:2a:3f:15:19:c3:
         b3:a6:65:a4:2f:26:e2:56:0b:bd:69:e0:f8:56:ca:c2:86:b8:
         42:37:05:c9:36:9b:cc:48:3d:ec:85:9c:30:75:96:17:fd:f8:
         00:b6:1c:8d:f3:f8:78:f8:6f:33:2e:68:d8:a5:00:d5:5a:ce:
         4f:7c:1c:f9:0f:aa:ea:3c:03:8f:33:bf:36:90:2c:e7:4c:f0:
         c9:a9:ac:7f:6f:7c:5c:4b:5c:78:54:db:b5:d4:15:14:16:bf:
         44:67:09:31:c3:f8:b7:7e:ec:a3:0d:ec:fe:b1:b9:2b:28:fd:
         6f:e8:3e:57:a7:d6:ff:8e:23:47:b8:42:a9:e3:b7:78:e7:6d:
         93:38:2e:71:ca:a4:01:55:95:a0:22:5d:1f:a8:3a:cf:31:28:
         c7:84:98:a3:1a:b2:af:ec:2e:4b:0d:29:39:a4:e4:a1:5f:d8:
         3e:57:5b:1e:80:84:fe:0a:b2:47:cf:b3:9d:f4:f0:5c:bf:8b:
         6c:18:4f:1d:2f:06:86:51:e4:58:9e:d7:5b:3a:10:ea:58:9a:
         1e:ad:01:d4:c0:7e:83:f8:46:d9:70:bc:3e:18:f0:65:87:9f:
         70:38:a3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:30:01 2026 by rpki-client