This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/DA505546B74C11ED916B5A6AC4F9AE02.roa
File:                     DA505546B74C11ED916B5A6AC4F9AE02.roa (raw, json)
Hash identifier:          DOFW5t5EE7rmiwo1vvDwYBwHyfhu6Kigv1sbMBw6Kl8=
Subject key identifier:   1F:6F:E1:65:F3:C0:3D:F4:C6:A4:41:44:7B:AB:39:D3:1E:A8:00:0A
Certificate issuer:       /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
Certificate serial:       12DA
Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/DA505546B74C11ED916B5A6AC4F9AE02.roa
Signing time:             Tue 06 Jan 2026 17:14:24 +0000
ROA not before:           Tue 06 Jan 2026 17:14:24 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     0
IP address blocks:        103.104.19.0/24 maxlen: 24
                          103.125.244.0/22 maxlen: 22
                          103.125.245.0/24 maxlen: 24
                          103.125.246.0/24 maxlen: 24
                          116.89.244.0/24 maxlen: 24
                          2401:fdc0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl
                          rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:49:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4826 (0x12da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
        Validity
            Not Before: Jan  6 17:14:24 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=695d42f0-e49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3c:aa:8d:e1:40:db:e0:67:0e:45:5d:89:90:
                    f8:12:ef:a5:0d:fc:dc:68:38:41:5d:23:b7:b9:f5:
                    c6:10:0c:86:dc:97:fa:4d:6f:00:98:89:d9:c0:f9:
                    91:83:c7:da:c3:2e:19:4a:5d:4a:5e:27:6c:7e:93:
                    ab:21:9a:6b:15:f0:84:d3:d1:da:26:c1:e1:2d:9f:
                    af:1e:90:20:cf:e4:32:90:92:77:af:3f:cc:02:74:
                    e8:b4:e6:af:19:3d:39:bd:6f:b4:71:22:d2:31:58:
                    d3:0c:c7:08:98:04:64:1f:7c:2e:8a:43:72:e6:03:
                    6f:3a:37:ac:0f:3a:b4:de:bc:6a:57:53:ab:59:75:
                    d6:59:50:d9:23:e6:45:09:bd:31:a1:78:0d:b9:05:
                    87:3b:40:f1:31:db:37:e6:e5:75:f8:7e:b9:c2:1f:
                    bf:8e:4d:fe:fc:77:16:7e:5f:bd:a8:ae:c1:a0:0a:
                    2a:1c:b8:af:0a:88:29:b1:11:18:9d:c0:f4:6f:c5:
                    5d:2e:6c:69:42:a0:d2:f2:5d:7f:87:b0:72:b5:52:
                    17:2d:72:7f:cc:ba:1b:f4:e1:34:41:50:ee:46:70:
                    04:97:f5:8c:a6:a5:bd:be:2d:b3:7c:ee:cf:f2:ba:
                    14:a2:3c:45:15:02:11:e0:42:7d:69:b0:ac:11:43:
                    1c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6F:E1:65:F3:C0:3D:F4:C6:A4:41:44:7B:AB:39:D3:1E:A8:00:0A
            X509v3 Authority Key Identifier:
                keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/DA505546B74C11ED916B5A6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.19.0/24
                  103.125.244.0/22
                  116.89.244.0/24
                IPv6:
                  2401:fdc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5f:69:6a:0e:fc:da:57:6a:7f:cc:72:6e:2a:2e:5e:6b:9c:a2:
         d1:65:35:5c:c7:ce:26:01:be:44:3d:99:9b:87:e1:a5:30:a4:
         96:e9:7c:95:33:25:d6:0c:e4:62:66:73:21:5e:5f:86:26:fc:
         ff:83:f2:57:76:73:9a:95:f7:fd:81:ca:dd:83:7c:e1:de:c4:
         24:76:73:0b:dc:6a:74:36:af:44:2f:05:ae:91:8d:1c:40:97:
         67:68:96:1e:f6:eb:08:ba:89:2d:9e:41:23:0e:55:81:ba:3c:
         86:b0:33:54:58:a0:11:72:14:26:45:97:a0:48:8c:67:33:b4:
         b7:37:c9:0c:2d:be:06:8d:79:b5:d3:49:4d:bf:45:4c:f8:07:
         c1:9b:c8:a6:32:af:9d:0b:ee:2c:f2:ef:59:5f:6d:bd:36:df:
         c4:77:94:cd:27:97:ff:46:14:9f:74:a5:f3:e0:c0:98:cb:aa:
         03:5a:de:eb:a0:66:65:8c:e8:80:28:a3:bb:77:bb:02:2c:4a:
         2c:6f:89:42:b8:fa:cf:15:fc:36:f9:c9:b4:f1:00:b3:b8:e5:
         84:97:a1:20:af:e2:81:21:2e:c4:2c:b9:7d:df:b9:10:a6:92:
         84:35:d8:3c:d6:a8:67:12:c3:a8:ac:47:0b:d2:d2:ab:1a:c1:
         31:80:ff:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:21:26 2026 by rpki-client