This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B883270E356B11E7A51C314CC4F9AE02.roa
File:                     B883270E356B11E7A51C314CC4F9AE02.roa (raw, json)
Hash identifier:          DIrnPld2pmCO8F0lSwk+fjrch45J04Fbx0KSu5+1g1s=
Subject key identifier:   DF:61:B6:F6:9F:9D:E8:EF:14:80:6E:F5:94:4F:EF:28:B6:4E:31:3F
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3789
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B883270E356B11E7A51C314CC4F9AE02.roa
Signing time:             Fri 16 Jan 2026 16:13:35 +0000
ROA not before:           Fri 16 Jan 2026 16:13:35 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     38778
IP address blocks:        45.64.4.0/22 maxlen: 22
                          45.64.4.0/23 maxlen: 23
                          45.64.4.0/24 maxlen: 24
                          45.64.5.0/24 maxlen: 24
                          45.64.6.0/23 maxlen: 23
                          45.64.6.0/24 maxlen: 24
                          45.64.7.0/24 maxlen: 24
                          103.228.236.0/22 maxlen: 22
                          103.228.236.0/23 maxlen: 23
                          103.228.236.0/24 maxlen: 24
                          103.228.237.0/24 maxlen: 24
                          103.228.238.0/23 maxlen: 23
                          103.228.238.0/24 maxlen: 24
                          103.228.239.0/24 maxlen: 24
                          115.69.216.0/21 maxlen: 21
                          115.69.216.0/22 maxlen: 22
                          115.69.216.0/23 maxlen: 23
                          115.69.216.0/24 maxlen: 24
                          115.69.217.0/24 maxlen: 24
                          115.69.218.0/23 maxlen: 23
                          115.69.218.0/24 maxlen: 24
                          115.69.219.0/24 maxlen: 24
                          115.69.220.0/22 maxlen: 22
                          115.69.220.0/23 maxlen: 23
                          115.69.220.0/24 maxlen: 24
                          115.69.221.0/24 maxlen: 24
                          115.69.222.0/23 maxlen: 23
                          115.69.222.0/24 maxlen: 24
                          115.69.223.0/24 maxlen: 24
                          2407:f900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14217 (0x3789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 16 16:13:35 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=696a63af-3bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b7:33:d3:d1:c3:df:18:c9:b5:3f:b7:9b:ad:
                    2c:3c:4b:b7:2c:dd:33:3a:bc:90:41:38:23:7f:83:
                    e2:37:22:78:81:01:4c:13:e2:3d:e5:94:60:9a:d4:
                    cb:07:b9:73:c5:cb:55:0a:91:78:ce:1f:3d:9d:68:
                    0f:c8:05:e2:49:db:ee:ea:61:ea:ae:d9:4b:72:61:
                    e8:bd:9e:b3:e2:d4:b5:26:4f:ac:e4:45:1a:84:91:
                    eb:4a:9c:ff:67:2c:20:77:4d:69:90:76:d0:5e:a3:
                    63:e5:37:1e:a5:eb:0e:d2:7d:42:40:34:39:ad:f6:
                    f8:f2:21:d2:4b:26:3b:b0:b1:52:9f:3a:00:58:c3:
                    ba:4c:c8:43:07:e4:86:69:c7:e5:1d:c9:e7:48:28:
                    f9:b0:9e:a6:29:b2:14:dc:27:56:65:8a:7e:3d:34:
                    24:61:95:b8:36:62:ab:1a:17:31:ff:08:2b:95:f5:
                    eb:da:09:89:42:06:1a:18:6e:b1:75:e6:04:0f:a3:
                    11:62:e1:78:1f:6a:b4:d5:7f:39:eb:d1:b4:ad:dc:
                    6f:88:1e:69:e9:0f:5a:6b:4f:dc:64:80:f4:c4:bc:
                    4d:b8:9b:37:a5:f7:b1:25:de:d0:a0:fe:0a:cd:fc:
                    87:ca:d3:ba:a1:8f:f9:72:1c:9d:fe:04:f0:15:df:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:61:B6:F6:9F:9D:E8:EF:14:80:6E:F5:94:4F:EF:28:B6:4E:31:3F
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B883270E356B11E7A51C314CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.4.0/22
                  103.228.236.0/22
                  115.69.216.0/21
                IPv6:
                  2407:f900::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:a5:7f:65:44:c9:7b:ce:08:1c:1a:6a:13:e8:ed:f1:7f:3e:
         32:e7:7a:b6:9f:ea:a0:6e:20:4f:a7:10:41:8c:ef:58:82:20:
         10:ce:66:8a:a7:2e:07:0e:49:7a:0e:19:b5:e5:8f:11:d8:09:
         15:46:bb:11:ea:b3:54:84:a7:af:c1:50:29:e3:2f:44:b6:eb:
         63:85:81:f0:71:4a:bb:2f:5d:fe:2b:b9:39:bf:06:1a:b6:a3:
         8b:7d:1f:65:f8:16:dc:4f:2c:7d:9b:12:e0:eb:1e:82:8f:70:
         9a:ee:da:cb:67:ce:77:64:55:c3:ce:60:bb:d4:9f:c5:ed:8c:
         00:a6:38:48:a7:46:19:11:50:79:bf:cd:97:03:53:42:bd:76:
         21:20:1b:36:da:ac:23:b8:20:a8:75:43:c7:2e:af:02:ae:1b:
         89:47:c9:23:56:e8:76:11:b9:40:b9:9e:0f:2e:5b:51:f9:53:
         fe:45:68:89:bc:81:72:16:05:26:84:8d:d7:22:16:cb:07:8d:
         bb:ff:f7:21:bb:a6:a4:68:aa:a1:8c:83:4e:4c:ab:d1:fc:53:
         fd:3d:34:13:2a:96:9a:3b:ee:00:73:2f:78:4c:27:70:91:93:
         07:9f:45:34:8a:88:c0:ab:c8:32:c4:5f:ec:33:80:32:a5:a3:
         5a:f0:ae:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:58:05 2026 by rpki-client