This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/AE148B2A6BB911ED97343873C4F9AE02.roa
File:                     AE148B2A6BB911ED97343873C4F9AE02.roa (raw, json)
Hash identifier:          c6XgmTBE3zaRNxvDJzzPexFziElb2LaTYnqSleg9azc=
Subject key identifier:   53:47:6B:3E:DE:BE:35:51:25:61:A3:2B:1F:A6:F1:A4:89:C5:FA:96
Certificate issuer:       /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35
Certificate serial:       0252
Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/AE148B2A6BB911ED97343873C4F9AE02.roa
Signing time:             Wed 21 Jan 2026 01:21:28 +0000
ROA not before:           Wed 21 Jan 2026 01:21:28 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150442
IP address blocks:        103.37.126.0/23 maxlen: 23
                          103.37.126.0/24 maxlen: 24
                          103.37.127.0/24 maxlen: 24
                          2001:df1:92c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl
                          rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D9BE, serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35
        Validity
            Not Before: Jan 21 01:21:28 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69702a18-a229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8c:72:dc:40:44:24:97:82:05:c8:66:e0:16:
                    ef:74:5f:da:1f:e2:a5:76:ec:37:8e:cf:a4:8e:ca:
                    1b:73:dc:72:ca:e9:ac:c3:04:e9:88:b4:5a:ad:09:
                    3a:49:2f:8a:94:fe:fc:57:57:93:62:2e:ac:61:b0:
                    72:64:df:1d:a8:d6:a4:e4:d9:cb:23:fa:4d:1d:a0:
                    48:03:4e:5f:7f:7c:06:77:22:3e:5c:89:69:b5:47:
                    da:6b:5e:80:78:46:50:fb:46:ef:40:50:17:79:08:
                    38:c6:f2:57:65:21:88:cf:88:44:8c:38:60:79:45:
                    94:17:ad:34:f2:b9:63:c4:80:0e:3d:67:db:cb:91:
                    a2:88:25:eb:e8:55:9e:1a:ca:3a:d3:82:2d:30:57:
                    c6:9c:26:45:27:26:b1:6a:63:66:29:6b:c2:d9:eb:
                    d7:4f:6e:37:99:03:dc:a3:d0:83:6a:a1:a0:e1:88:
                    bd:22:7e:be:85:df:82:a0:f1:7f:15:64:61:cd:ff:
                    7d:d5:28:17:a5:15:4d:d4:ba:a2:c4:4f:36:d4:8a:
                    3f:a5:92:45:ec:56:33:36:91:25:ef:db:c7:f5:ae:
                    86:47:5c:5a:87:c3:43:6f:08:ed:66:0b:ab:fe:b8:
                    a5:b5:73:a2:b9:53:63:9c:0f:50:a0:34:49:7b:7e:
                    af:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:47:6B:3E:DE:BE:35:51:25:61:A3:2B:1F:A6:F1:A4:89:C5:FA:96
            X509v3 Authority Key Identifier:
                keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/AE148B2A6BB911ED97343873C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.126.0/23
                IPv6:
                  2001:df1:92c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:b1:79:a7:39:5c:c9:6e:cb:63:cb:4a:e7:a6:c2:7a:92:31:
         30:df:58:a5:6a:a3:05:a1:46:f5:2f:eb:7c:ef:3d:3e:5c:2c:
         4f:75:b2:ad:a5:22:e3:a0:84:06:44:76:3c:57:50:c4:f9:60:
         59:94:a6:79:e4:24:8d:5b:62:0c:be:4a:97:68:97:c3:74:e4:
         a7:59:04:08:74:fe:40:3b:db:e3:51:51:39:76:7f:96:4e:6e:
         56:05:d6:d6:e7:f6:ca:86:a0:12:cb:c1:2e:d4:90:2b:76:c4:
         92:8f:fb:a4:94:b5:01:8c:66:43:cd:78:64:95:29:d0:57:11:
         be:de:69:0d:fb:b2:5f:c3:ec:0e:b3:fd:38:77:51:b2:e5:d3:
         18:38:4d:39:df:66:1b:95:a7:0e:64:98:37:25:d6:97:42:2f:
         d1:c6:96:8c:0b:fc:fa:60:c4:ab:03:6d:0e:ac:a0:99:83:69:
         df:04:d6:cb:c0:43:0a:50:3e:89:77:17:e5:a5:64:92:a9:06:
         4b:92:5f:d0:92:71:72:05:79:86:a0:a3:9a:67:7a:dc:d1:cd:
         ec:01:a9:b1:e4:f8:42:1b:ab:b9:2d:e3:d8:9f:b5:66:64:49:
         59:55:dd:af:9f:3d:a6:05:51:9d:28:f0:32:27:1b:49:3e:1a:
         2c:4a:b0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:42:30 2026 by rpki-client