This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/2E388BFA2B3C11F0A85EF417C4F9AE02.roa
File:                     2E388BFA2B3C11F0A85EF417C4F9AE02.roa (raw, json)
Hash identifier:          /jn8M4cDmzxE6w7qg7B0PKQF4seyMPr1/p6R5eEvh8E=
Subject key identifier:   51:2A:92:A2:60:20:47:90:83:C9:7C:57:A8:53:C6:A6:C3:45:45:14
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3775
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/2E388BFA2B3C11F0A85EF417C4F9AE02.roa
Signing time:             Fri 16 Jan 2026 16:13:16 +0000
ROA not before:           Fri 16 Jan 2026 16:13:16 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139418
IP address blocks:        103.144.18.0/24 maxlen: 24
                          103.144.19.0/24 maxlen: 24
                          103.174.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14197 (0x3775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 16 16:13:16 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=696a639b-2cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fc:fc:4b:06:09:6d:80:09:bf:31:e4:9f:53:
                    4f:96:a2:1e:d4:4b:27:d4:2c:e9:4a:19:7d:86:50:
                    ff:9f:af:99:0a:5d:63:98:47:e0:3e:42:a8:23:7a:
                    12:75:1d:53:a8:53:aa:8c:7f:5b:ec:e5:ee:d2:48:
                    f6:ab:35:25:22:25:cb:bf:b4:f3:32:e0:38:43:d5:
                    d6:62:19:b3:09:86:f4:54:d6:0c:61:90:a7:8f:52:
                    17:39:bb:8e:41:08:8f:c2:67:a0:51:2d:af:08:d2:
                    94:df:d6:6f:4d:65:4f:ca:ae:62:d8:19:ee:ae:f3:
                    23:00:f7:71:67:df:f7:06:d2:c9:ef:e9:0b:c5:da:
                    a8:7f:53:05:6c:cd:44:f5:0d:93:fa:a2:09:4b:c8:
                    28:74:6c:21:de:bd:6f:aa:d7:1a:db:c4:49:d7:f2:
                    38:da:52:a9:19:c9:a5:56:8f:09:55:62:23:d9:2e:
                    b0:3f:a9:33:9c:2a:c5:23:d8:bc:3b:67:83:f2:a6:
                    d6:df:45:36:e7:ed:38:5a:3a:f2:e8:9b:13:b8:5b:
                    40:27:3f:83:85:2c:39:00:7a:24:42:3d:9b:68:71:
                    58:8d:45:47:9f:7b:99:45:22:94:46:c3:0e:53:41:
                    02:c8:49:08:42:1e:ce:5d:6d:cc:9c:03:11:f2:d3:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2A:92:A2:60:20:47:90:83:C9:7C:57:A8:53:C6:A6:C3:45:45:14
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/2E388BFA2B3C11F0A85EF417C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.18.0/23
                  103.174.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:25:a3:ba:40:02:cd:7a:aa:5f:29:06:be:08:b1:01:c2:3c:
         ae:8f:b1:6d:8a:60:9d:3b:67:24:2a:14:8f:e9:f3:b1:74:a2:
         bd:8f:18:ed:c8:e1:9c:81:58:93:4b:d8:05:54:b9:9b:0c:c1:
         ba:5d:d2:15:46:a6:2a:24:3b:3d:c5:db:2c:8b:83:a4:cb:7c:
         e9:05:40:1c:a0:40:af:33:44:1a:40:4e:f3:34:b9:66:70:e6:
         7c:20:5b:1a:87:48:fa:e1:9e:f9:40:e0:54:c9:1e:fd:96:e9:
         e9:39:1e:6f:e9:d8:f1:f7:64:a4:75:71:9e:f7:fd:54:09:a6:
         c9:5e:92:35:cf:e0:7c:21:18:83:d1:ca:a3:35:d1:a5:92:15:
         60:dc:80:bc:6b:d6:31:1f:8c:e8:76:54:f4:b5:8a:34:b8:bd:
         0b:7f:1b:14:69:5e:df:35:f9:48:9f:e4:c7:ac:80:e0:90:5d:
         8f:5f:b3:86:29:67:42:0e:86:e9:47:30:f2:a8:2f:f2:4a:ad:
         41:f3:aa:ba:7c:cd:cb:19:f0:ff:80:ce:f0:99:91:87:fa:ab:
         9f:0a:0b:20:13:77:f6:4b:c8:16:1c:a2:f2:d8:a1:27:52:32:
         fb:05:6f:4d:58:8c:09:d6:bf:12:5b:d9:8a:be:40:8b:46:d2:
         c6:eb:e5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:22 2026 by rpki-client