This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/31F9C990668B11F0B10A9677C4F9AE02.roa
File:                     31F9C990668B11F0B10A9677C4F9AE02.roa (raw, json)
Hash identifier:          OtuAlVp/CtZDUXgBtt2/Pucejms3+FGcAZtFFxTAqD8=
Subject key identifier:   BF:00:6B:88:1B:56:BC:55:45:12:C2:8D:BF:65:A6:5D:AB:9F:E0:C0
Certificate issuer:       /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Certificate serial:       C4
Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/31F9C990668B11F0B10A9677C4F9AE02.roa
Signing time:             Thu 22 Jan 2026 13:10:27 +0000
ROA not before:           Thu 22 Jan 2026 13:10:27 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     11870
IP address blocks:        103.44.16.0/24 maxlen: 24
                          103.44.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
                          rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
        Validity
            Not Before: Jan 22 13:10:27 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=697221c3-5434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:ab:b0:3c:56:cf:f2:6e:e8:04:5a:17:67:
                    79:5f:af:a9:dc:74:59:a0:56:b5:3e:50:1a:31:62:
                    92:68:c4:3c:3d:ea:30:86:9b:0f:82:0d:f9:4d:3a:
                    b8:e7:d0:d8:74:9f:cb:fc:a1:c6:88:47:9e:e9:b2:
                    8d:4e:72:e1:16:a8:08:dc:fb:40:b3:b5:b6:bf:fb:
                    4c:a1:36:90:f8:b1:5f:8b:9f:f1:af:7f:78:b8:b4:
                    c8:46:35:99:35:8f:bd:58:f2:83:38:4a:9b:17:bb:
                    4d:ec:9a:6f:40:e5:85:4e:c7:da:3e:01:01:1c:c0:
                    74:8b:cf:8d:49:88:04:34:ab:31:b7:0b:88:17:26:
                    83:93:91:37:b2:2e:9e:cc:59:45:c7:61:5f:e6:27:
                    fd:30:56:26:cf:a3:37:8e:47:78:e0:01:c7:6d:e0:
                    7e:5f:c2:f7:4d:ac:de:6a:c8:ef:2f:6d:1c:28:b4:
                    9a:ef:4a:62:cc:cf:70:e3:b0:60:5f:fb:b6:87:a7:
                    e9:9a:1d:f1:e5:2e:89:76:d9:9d:63:f9:9a:56:85:
                    c5:76:b4:e9:4b:f4:80:ec:70:91:70:fb:4d:c2:33:
                    93:41:91:c8:40:22:68:2e:11:41:c7:81:9e:8e:c2:
                    46:3c:51:f0:92:b0:86:ac:9d:35:8e:da:9b:81:5d:
                    5a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:00:6B:88:1B:56:BC:55:45:12:C2:8D:BF:65:A6:5D:AB:9F:E0:C0
            X509v3 Authority Key Identifier:
                keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/31F9C990668B11F0B10A9677C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:26:92:7b:1d:5b:b1:02:7d:19:3a:05:cc:ad:08:cd:8f:f3:
         fd:8f:72:94:8d:dd:ee:d5:fb:42:b6:f5:ff:19:39:09:a0:b5:
         54:2e:f6:93:9c:c8:fa:23:19:72:eb:80:8c:8d:19:82:25:a1:
         69:6a:f3:1e:6a:37:9f:2d:b8:cd:cd:93:a4:f6:84:2b:55:64:
         39:e7:02:53:13:b8:0a:bd:00:84:3c:82:42:5e:d4:8a:d1:98:
         fd:10:f5:ba:50:13:3a:f4:4b:df:8e:98:d9:f7:55:39:a5:21:
         44:35:b6:1e:22:8d:52:44:71:ec:14:b1:f0:38:78:6e:e8:cd:
         a9:bf:5a:02:8a:06:fb:c5:50:f4:77:4a:8a:60:54:ff:a0:2a:
         ec:19:31:38:e0:c9:f1:62:c1:a1:df:77:70:f9:5e:c0:5b:6b:
         92:cd:d2:04:21:73:63:1b:ec:d0:44:78:0e:96:e7:38:68:57:
         15:d3:f8:18:4a:13:f4:dc:0a:86:87:72:41:01:b0:f9:48:a9:
         e6:1d:43:4c:77:67:82:5b:ff:86:66:e4:68:94:39:ab:c8:ba:
         f4:e6:86:51:c5:f2:14:fd:91:67:e8:14:30:e2:4c:06:15:52:
         9f:f4:8b:66:0e:90:b2:a5:80:76:97:a1:60:15:a4:e1:82:f1:
         11:d4:75:1e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhBNDYxMTAvBgNVBAUTKEE4OEVFMjNGRjhENzA4MjhDRURCQzcwMUU3OEM4MDc0
N0ZGQzExQ0EwHhcNMjYwMTIyMTMxMDI3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTcyMjFjMy01NDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAppGrsDxWz/Ju6ARaF2d5X6+p3HRZoFa1PlAaMWKSaMQ8PeowhpsPgg35TTq4
59DYdJ/L/KHGiEee6bKNTnLhFqgI3PtAs7W2v/tMoTaQ+LFfi5/xr394uLTIRjWZ
NY+9WPKDOEqbF7tN7JpvQOWFTsfaPgEBHMB0i8+NSYgENKsxtwuIFyaDk5E3si6e
zFlFx2Ff5if9MFYmz6M3jkd44AHHbeB+X8L3TazeasjvL20cKLSa70pizM9w47Bg
X/u2h6fpmh3x5S6JdtmdY/maVoXFdrTpS/SA7HCRcPtNwjOTQZHIQCJoLhFBx4Ge
jsJGPFHwkrCGrJ01jtqbgV1aQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL8Aa4gb
VrxVRRLCjb9lpl2rn+DAMB8GA1UdIwQYMBaAFKiO4j/41wgoztvHAeeMgHR//BHK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEE0Ni9ENjRFNUE3RURD
ODQxMUVGQjkwODUwM0JDNEY5QUUwMi9xSTdpUF9qWENDak8yOGNCNTR5QWRIXzhF
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FJN2lQX2pYQ0NqTzI4Y0I1NHlBZEhfOEVjby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODhBNDYvRDY0RTVBN0VEQzg0MTFFRkI5MDg1MDNCQzRGOUFFMDIvMzFGOUM5OTA2
NjhCMTFGMEIxMEE5Njc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnLBAwDQYJKoZIhvcNAQELBQADggEBAE0mknsdW7ECfRk6
BcytCM2P8/2PcpSN3e7V+0K29f8ZOQmgtVQu9pOcyPojGXLrgIyNGYIloWlq8x5q
N58tuM3Nk6T2hCtVZDnnAlMTuAq9AIQ8gkJe1IrRmP0Q9bpQEzr0S9+OmNn3VTml
IUQ1th4ijVJEcewUsfA4eG7ozam/WgKKBvvFUPR3SopgVP+gKuwZMTjgyfFiwaHf
d3D5XsBba5LN0gQhc2Mb7NBEeA6W5zhoVxXT+BhKE/TcCoaHckEBsPlIqeYdQ0x3
Z4Jb/4Zm5GiUOavIuvTmhlHF8hT9kWfoFDDiTAYVUp/0i2YOkLKlgHaXoWAVpOGC
8RHUdR4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:15:24 2026 by rpki-client