This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/7909FCC06DF211EA806B671BC4F9AE02.roa
File:                     7909FCC06DF211EA806B671BC4F9AE02.roa (raw, json)
Hash identifier:          9ntH5sdhKSrMolrJIKiUJK7DgvYcz8rLe6mdglzQ0XU=
Subject key identifier:   2B:FB:70:FB:A7:8F:45:25:C5:8D:74:A3:5B:FF:C3:32:F8:07:1A:6A
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       377D
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/7909FCC06DF211EA806B671BC4F9AE02.roa
Signing time:             Fri 16 Jan 2026 16:13:24 +0000
ROA not before:           Fri 16 Jan 2026 16:13:24 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     23951
IP address blocks:        103.101.136.0/24 maxlen: 24
                          103.101.137.0/24 maxlen: 24
                          103.101.138.0/24 maxlen: 24
                          103.101.139.0/24 maxlen: 24
                          117.20.48.0/24 maxlen: 24
                          117.20.49.0/24 maxlen: 24
                          117.20.50.0/24 maxlen: 24
                          117.20.51.0/24 maxlen: 24
                          117.20.52.0/24 maxlen: 24
                          117.20.53.0/24 maxlen: 24
                          117.20.54.0/24 maxlen: 24
                          117.20.55.0/24 maxlen: 24
                          117.20.56.0/24 maxlen: 24
                          117.20.57.0/24 maxlen: 24
                          117.20.58.0/24 maxlen: 24
                          117.20.59.0/24 maxlen: 24
                          117.20.60.0/24 maxlen: 24
                          117.20.61.0/24 maxlen: 24
                          117.20.62.0/24 maxlen: 24
                          117.20.63.0/24 maxlen: 24
                          202.152.129.0/24 maxlen: 24
                          202.152.130.0/24 maxlen: 24
                          202.152.131.0/24 maxlen: 24
                          202.152.132.0/24 maxlen: 24
                          202.152.133.0/24 maxlen: 24
                          202.152.134.0/24 maxlen: 24
                          202.152.135.0/24 maxlen: 24
                          202.152.136.0/24 maxlen: 24
                          202.152.137.0/24 maxlen: 24
                          202.152.138.0/24 maxlen: 24
                          202.152.139.0/24 maxlen: 24
                          202.152.140.0/24 maxlen: 24
                          202.152.141.0/24 maxlen: 24
                          202.152.142.0/24 maxlen: 24
                          202.152.143.0/24 maxlen: 24
                          202.152.144.0/24 maxlen: 24
                          202.152.145.0/24 maxlen: 24
                          202.152.146.0/24 maxlen: 24
                          202.152.147.0/24 maxlen: 24
                          202.152.148.0/24 maxlen: 24
                          202.152.149.0/24 maxlen: 24
                          202.152.150.0/24 maxlen: 24
                          202.152.151.0/24 maxlen: 24
                          202.152.152.0/24 maxlen: 24
                          202.152.153.0/24 maxlen: 24
                          202.152.154.0/24 maxlen: 24
                          202.152.155.0/24 maxlen: 24
                          202.152.156.0/24 maxlen: 24
                          202.152.157.0/24 maxlen: 24
                          202.152.158.0/24 maxlen: 24
                          202.152.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14205 (0x377d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 16 16:13:24 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=696a63a4-dcf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:21:73:86:8d:4d:d5:6f:01:87:00:47:21:
                    6d:df:a1:18:fa:93:76:6a:38:f0:e8:48:94:b3:4c:
                    5e:9e:33:ff:9e:a9:a8:31:44:a5:13:88:bd:16:1a:
                    d7:48:3f:75:f6:b9:90:c8:95:4d:94:55:d4:fa:ce:
                    01:7b:a4:06:01:6e:03:c2:d6:1e:42:4d:79:f6:dd:
                    b9:cf:31:a0:c3:9d:d2:c0:92:07:a0:a6:2d:66:f1:
                    93:c4:a6:6c:78:34:af:05:5a:27:91:6a:44:e4:f8:
                    ed:cf:a8:19:f3:58:27:ee:e4:fc:ed:c7:0c:d6:de:
                    8e:b3:b7:69:b0:3d:bd:87:99:ab:f8:34:16:9a:0e:
                    3c:df:7e:85:43:26:44:76:c4:7e:ad:4f:b3:c5:32:
                    e6:5f:8d:06:d5:53:af:90:b8:5e:9e:09:5c:7c:eb:
                    34:50:ee:35:e9:99:17:e9:80:84:e5:8d:fe:c6:13:
                    82:a4:8a:06:da:ef:0e:e1:fc:f8:0c:3e:3b:6e:08:
                    78:e9:7b:1b:2a:ba:90:59:65:e0:a3:6e:79:ff:44:
                    53:b8:bb:d2:77:7c:9b:e3:71:7e:54:6c:66:98:00:
                    8c:9c:a8:9a:2c:17:0f:99:1e:fd:1e:2c:cf:bb:2e:
                    c3:49:91:77:e1:0e:a2:1c:c1:ff:76:17:d7:ca:26:
                    ce:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FB:70:FB:A7:8F:45:25:C5:8D:74:A3:5B:FF:C3:32:F8:07:1A:6A
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/7909FCC06DF211EA806B671BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.136.0/22
                  117.20.48.0/20
                  202.152.129.0-202.152.159.255

    Signature Algorithm: sha256WithRSAEncryption
         b7:8d:33:ac:03:f9:fe:f2:49:c3:0a:12:52:3a:09:0b:eb:21:
         2e:17:9a:ae:76:dc:d1:b6:49:e2:74:18:16:c5:64:1d:9f:d5:
         d5:8a:c3:eb:7b:6c:a4:2d:24:6e:93:58:32:9f:a6:bb:f3:75:
         44:ef:49:ce:ef:aa:1d:cc:4c:48:66:db:f7:a3:46:2b:c9:02:
         97:be:7c:94:1d:fb:bf:59:fb:90:ec:9a:66:00:c7:5b:68:a3:
         89:8f:39:99:8f:05:57:86:e3:da:7a:cd:84:b2:d0:fd:48:6b:
         4c:35:6e:b5:2b:ec:40:90:82:33:18:8f:5b:d5:e3:99:d4:74:
         40:75:04:49:f8:1e:dc:6f:b5:a3:b7:ea:06:2f:8f:c6:01:4f:
         73:7a:8b:31:d1:72:a8:75:0c:c0:ea:77:77:26:70:2d:f3:80:
         78:e5:56:d7:2b:c7:af:4b:b4:0a:95:20:cd:2f:7d:c1:64:ec:
         4e:b6:1a:6b:50:69:41:7e:35:e2:4f:b8:8d:a1:af:3e:c7:31:
         60:30:74:16:d4:3b:71:15:90:f4:a2:f0:62:fb:ca:4b:a8:3f:
         d5:27:13:7d:64:3b:37:bb:5f:3a:a6:b6:16:ce:24:b6:09:4b:
         5f:b1:d0:69:29:69:ea:5a:27:9d:e3:e1:91:16:94:71:b9:18:
         57:2a:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:02:15 2026 by rpki-client