This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/F71994162B9A11F0A72AD831C4F9AE02.roa
File:                     F71994162B9A11F0A72AD831C4F9AE02.roa (raw, json)
Hash identifier:          K5MgT5P+UwC9E9ygKLcdUS0W9h3lKGVu6I7Nyk5krAA=
Subject key identifier:   46:3D:29:FB:80:B4:C1:0B:0F:4F:85:84:64:1D:B1:F6:B2:F0:07:A7
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3773
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/F71994162B9A11F0A72AD831C4F9AE02.roa
Signing time:             Fri 16 Jan 2026 16:13:13 +0000
ROA not before:           Fri 16 Jan 2026 16:13:13 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     138109
IP address blocks:        103.126.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14195 (0x3773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 16 16:13:13 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=696a6399-5bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:d4:5c:fb:ad:17:0e:6a:42:b8:b7:5c:94:
                    47:6a:ae:01:6a:3f:48:11:df:3e:5e:a2:46:bf:7c:
                    8f:0c:68:66:ef:29:65:3c:3e:5f:46:96:9c:9e:60:
                    46:07:6b:e2:3c:b8:de:c8:4b:6b:7c:6f:f4:8e:b1:
                    64:1e:5f:f9:fe:d7:d4:26:38:11:97:01:31:9b:05:
                    2c:1d:9f:98:57:96:c1:0a:1f:dc:4d:6e:ae:57:0a:
                    b0:e0:ff:d5:a4:3c:12:33:e8:fe:d5:2f:1d:6e:42:
                    aa:44:c5:bc:85:d6:5d:83:67:d3:bd:98:eb:72:e2:
                    b0:91:3d:81:6b:e2:7e:27:7e:62:a6:45:ec:56:2d:
                    18:ce:ad:2b:ae:6d:54:5f:bf:8c:07:fc:46:29:76:
                    d3:14:64:49:d1:fc:bf:42:3b:4d:4f:44:f4:bf:6a:
                    43:f1:a9:03:9a:bc:90:d1:47:24:78:3c:96:e1:a1:
                    6f:9b:48:8a:c2:3a:c9:53:c3:4f:d1:32:6f:43:8d:
                    e2:1b:4f:5e:6b:61:3e:63:18:9f:91:f9:f1:52:5c:
                    df:5f:e2:cc:ae:58:8b:09:b7:1a:74:a9:5b:ad:b8:
                    ce:cb:cb:d2:59:e8:bc:55:20:f9:ce:a4:1b:4b:ed:
                    90:73:78:65:53:a4:c4:ff:5e:1c:3d:e3:72:cd:95:
                    39:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3D:29:FB:80:B4:C1:0B:0F:4F:85:84:64:1D:B1:F6:B2:F0:07:A7
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/F71994162B9A11F0A72AD831C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:d7:b5:1b:56:22:f9:9e:aa:05:75:f2:77:13:f9:73:9a:d4:
         ee:44:87:4e:70:3a:49:bf:21:d9:3f:a6:14:ed:65:77:a6:25:
         a5:a5:54:1c:ad:d1:54:47:97:2c:32:7d:d4:fd:a3:51:85:e8:
         ae:98:e3:30:52:c4:44:3d:b8:e0:33:6a:c0:a2:51:b5:b1:2a:
         c2:2c:00:ce:3b:6f:5f:5e:27:ca:92:df:94:e9:ad:5c:dd:69:
         04:c5:05:dc:08:e8:49:01:1d:c7:0b:10:c8:4a:6b:69:7a:ae:
         ac:f5:29:29:be:8d:9c:9e:2e:06:f5:10:fb:be:ad:a8:67:09:
         cc:86:b8:08:c5:7b:1d:bc:43:a5:87:3e:14:53:cc:2e:e0:0f:
         22:4d:57:fc:a7:49:16:5d:11:8b:4a:4b:99:cc:b8:2a:ad:fd:
         82:9e:bc:b6:0d:90:21:0b:fe:2f:21:87:8f:9c:ea:8f:cb:9f:
         4e:6e:4f:a8:64:6f:5c:08:b9:9b:ba:08:78:45:4b:09:85:ac:
         c4:b8:1b:ce:50:41:1e:23:c7:48:dd:95:51:2a:f2:9e:9d:ae:
         82:87:f3:c8:03:52:ef:96:09:7e:af:50:13:1c:28:ea:a4:9c:
         d6:f2:5e:73:e7:43:40:1a:64:27:70:da:13:3e:68:d7:66:f0:
         13:37:ca:58
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICN3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzEzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZhNjM5OS01YmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtdjUXPutFw5qQri3XJRHaq4Baj9IEd8+XqJGv3yPDGhm7yllPD5fRpacnmBG
B2viPLjeyEtrfG/0jrFkHl/5/tfUJjgRlwExmwUsHZ+YV5bBCh/cTW6uVwqw4P/V
pDwSM+j+1S8dbkKqRMW8hdZdg2fTvZjrcuKwkT2Ba+J+J35ipkXsVi0Yzq0rrm1U
X7+MB/xGKXbTFGRJ0fy/QjtNT0T0v2pD8akDmryQ0UckeDyW4aFvm0iKwjrJU8NP
0TJvQ43iG09ea2E+YxifkfnxUlzfX+LMrliLCbcadKlbrbjOy8vSWei8VSD5zqQb
S+2Qc3hlU6TE/14cPeNyzZU5BwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEY9KfuA
tMELD0+FhGQdsfay8AenMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvRjcxOTk0MTYy
QjlBMTFGMEE3MkFEODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnflQwDQYJKoZIhvcNAQELBQADggEBAA7XtRtWIvmeqgV1
8ncT+XOa1O5Eh05wOkm/Idk/phTtZXemJaWlVByt0VRHlywyfdT9o1GF6K6Y4zBS
xEQ9uOAzasCiUbWxKsIsAM47b19eJ8qS35TprVzdaQTFBdwI6EkBHccLEMhKa2l6
rqz1KSm+jZyeLgb1EPu+rahnCcyGuAjFex28Q6WHPhRTzC7gDyJNV/ynSRZdEYtK
S5nMuCqt/YKevLYNkCEL/i8hh4+c6o/Ln05uT6hkb1wIuZu6CHhFSwmFrMS4G85Q
QR4jx0jdlVEq8p6droKH88gDUu+WCX6vUBMcKOqknNbyXnPnQ0AaZCdw2hM+aNdm
8BM3ylg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:22:14 2026 by rpki-client