This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/8342D87641AC11ECACD65E18C4F9AE02.roa
File:                     8342D87641AC11ECACD65E18C4F9AE02.roa (raw, json)
Hash identifier:          qRC2GewBVSIqQ+ig/xN3YEhCI38Ss813sjwAiEiNdvA=
Subject key identifier:   80:51:4D:90:07:3E:8C:E5:3D:63:61:04:DA:D3:D4:4E:E0:57:67:51
Certificate issuer:       /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Certificate serial:       07B9
Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/8342D87641AC11ECACD65E18C4F9AE02.roa
Signing time:             Fri 16 Jan 2026 21:17:56 +0000
ROA not before:           Fri 16 Jan 2026 21:17:56 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     40676
IP address blocks:        103.160.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
                          rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1977 (0x7b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
        Validity
            Not Before: Jan 16 21:17:56 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696aab04-43b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bc:17:2d:27:50:40:96:ef:c2:f2:14:3e:a4:
                    83:4f:19:3a:c7:73:3e:93:54:75:a6:78:51:79:38:
                    a0:f8:c3:95:85:87:2a:0e:1a:77:fc:60:4f:b5:e6:
                    51:81:e1:2d:ea:ef:81:a1:77:d1:61:c3:d3:bb:bc:
                    ac:72:65:f7:71:a5:79:eb:27:7e:cd:57:6f:ff:fd:
                    65:c5:7a:fc:ac:49:61:5f:99:6b:81:df:7e:1d:bc:
                    5a:f4:05:01:0f:79:8a:bf:63:31:5a:88:ec:e5:bf:
                    e5:1d:65:dd:48:74:dd:8c:b2:5a:da:80:44:e9:70:
                    71:23:d7:96:48:fa:06:3a:23:72:0b:70:12:98:67:
                    26:67:26:97:3b:47:76:68:83:d7:25:d5:7f:ef:6c:
                    57:1f:36:bc:16:3a:33:77:a9:ec:34:a7:74:b6:22:
                    cb:2d:65:0a:77:ad:7c:2b:cf:94:4e:d3:91:84:fc:
                    53:b4:d8:fb:26:05:1a:75:0c:df:7a:62:67:37:cf:
                    0c:d0:dc:a7:a1:35:a5:4e:29:43:a2:09:3e:3c:6f:
                    8f:6d:38:93:a5:99:2a:f7:7a:c9:37:e4:08:21:ed:
                    e4:df:eb:4a:aa:e8:43:37:d6:b0:02:50:25:ce:a1:
                    8a:cb:ac:36:3f:79:c4:31:5d:de:c0:5c:6b:86:e6:
                    c1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:51:4D:90:07:3E:8C:E5:3D:63:61:04:DA:D3:D4:4E:E0:57:67:51
            X509v3 Authority Key Identifier:
                keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/8342D87641AC11ECACD65E18C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:8a:64:56:52:da:e0:c2:c1:51:fe:67:c0:c7:01:92:87:ff:
         44:1d:69:7a:e5:69:2a:45:a8:66:e2:81:ca:82:9d:10:5e:d1:
         62:da:3b:40:be:69:d0:7f:e3:67:b7:2e:90:81:8d:40:d5:c0:
         4d:b8:56:71:34:b5:84:b0:ec:17:38:4f:81:af:c3:27:43:df:
         7e:28:4d:6f:e3:12:b4:9c:81:94:2b:19:51:97:b5:7f:db:f6:
         05:21:e6:93:aa:0d:f1:56:f3:27:d7:6b:68:60:d4:84:64:d1:
         de:02:2c:63:2c:63:4d:14:7c:1e:d2:f4:80:5f:19:ab:1e:8e:
         50:d5:68:70:e9:9f:ec:4e:12:dd:ce:77:e2:88:71:cd:10:6f:
         57:8e:dc:37:e5:fa:0f:a2:8c:6e:b9:ba:7d:d4:0a:97:94:c5:
         42:dd:74:46:86:0f:6d:44:9b:36:9a:ca:cb:f2:c9:9d:a8:78:
         6a:e9:ee:8b:24:18:22:25:e5:2c:11:fc:ce:8a:1f:27:59:3d:
         8c:1e:8a:f3:cf:98:f4:ca:79:53:77:0e:1a:17:0d:08:2b:1b:
         ec:e9:d6:17:28:dc:50:8a:3d:7b:d0:64:00:ab:b2:8d:bd:76:
         d6:80:16:06:f7:4b:c3:14:b1:5c:ba:dc:21:78:5f:b6:94:b1:
         eb:bb:7e:fc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NkQxMjgxMTAvBgNVBAUTKEM1MDQ1NjU1NzdBRTk5RjYxOTFDOTc4MzNEREJERDYy
NEVDMjRFOTIwHhcNMjYwMTE2MjExNzU2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZhYWIwNC00M2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2bwXLSdQQJbvwvIUPqSDTxk6x3M+k1R1pnhReTig+MOVhYcqDhp3/GBPteZR
geEt6u+BoXfRYcPTu7yscmX3caV56yd+zVdv//1lxXr8rElhX5lrgd9+Hbxa9AUB
D3mKv2MxWojs5b/lHWXdSHTdjLJa2oBE6XBxI9eWSPoGOiNyC3ASmGcmZyaXO0d2
aIPXJdV/72xXHza8Fjozd6nsNKd0tiLLLWUKd618K8+UTtORhPxTtNj7JgUadQzf
emJnN88M0NynoTWlTilDogk+PG+PbTiTpZkq93rJN+QIIe3k3+tKquhDN9awAlAl
zqGKy6w2P3nEMV3ewFxrhubB5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIBRTZAH
PozlPWNhBNrT1E7gV2dRMB8GA1UdIwQYMBaAFMUEVlV3rpn2GRyXgz3b3WJOwk6S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDEyOC85MERFOUM2NjNF
QTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1mWVpISmVEUGR2ZFlrN0NU
cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hRUldWWGV1bWZZWkhKZURQZHZkWWs3Q1RwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQxMjgvOTBERTlDNjYzRUEzMTFFQjhBQ0I5MDEzQzRGOUFFMDIvODM0MkQ4NzY0
MUFDMTFFQ0FDRDY1RTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnoGUwDQYJKoZIhvcNAQELBQADggEBAISKZFZS2uDCwVH+
Z8DHAZKH/0QdaXrlaSpFqGbigcqCnRBe0WLaO0C+adB/42e3LpCBjUDVwE24VnE0
tYSw7Bc4T4GvwydD334oTW/jErScgZQrGVGXtX/b9gUh5pOqDfFW8yfXa2hg1IRk
0d4CLGMsY00UfB7S9IBfGasejlDVaHDpn+xOEt3Od+KIcc0Qb1eO3Dfl+g+ijG65
un3UCpeUxULddEaGD21EmzaaysvyyZ2oeGrp7oskGCIl5SwR/M6KHydZPYweivPP
mPTKeVN3DhoXDQgrG+zp1hco3FCKPXvQZACrso29dtaAFgb3S8MUsVy63CF4X7aU
seu7fvw=
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:01:24 2026 by rpki-client