This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF1F9C78EC8011F09E8E0699566F56BC.roa
File:                     DF1F9C78EC8011F09E8E0699566F56BC.roa (raw, json)
Hash identifier:          lhg7/QEuyo0GNsEjo4O+BUYQkepHkK0tjhW0NFCKOWQ=
Subject key identifier:   4A:94:BA:55:F1:0C:DB:83:81:3A:51:95:6A:D4:CE:76:00:51:EC:26
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       CF72
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF1F9C78EC8011F09E8E0699566F56BC.roa
Signing time:             Fri 23 Jan 2026 12:32:03 +0000
ROA not before:           Fri 23 Jan 2026 12:32:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133661
IP address blocks:        45.120.37.0/24 maxlen: 24
                          45.248.156.0/22 maxlen: 24
                          45.248.160.0/22 maxlen: 24
                          101.0.32.0/22 maxlen: 24
                          101.0.37.0/24 maxlen: 24
                          101.0.38.0/24 maxlen: 24
                          101.0.41.0/24 maxlen: 24
                          101.0.42.0/24 maxlen: 24
                          101.0.45.0/24 maxlen: 24
                          101.0.49.0/24 maxlen: 24
                          101.0.50.0/24 maxlen: 24
                          101.0.53.0/24 maxlen: 24
                          101.0.54.0/23 maxlen: 24
                          101.0.57.0/24 maxlen: 24
                          103.40.196.0/22 maxlen: 24
                          103.41.20.0/22 maxlen: 24
                          103.41.24.0/22 maxlen: 24
                          103.41.36.0/22 maxlen: 24
                          103.61.150.0/24 maxlen: 24
                          103.66.204.0/22 maxlen: 24
                          103.66.208.0/22 maxlen: 24
                          103.72.168.0/22 maxlen: 24
                          103.72.220.0/22 maxlen: 24
                          103.73.148.0/24 maxlen: 24
                          103.73.149.0/24 maxlen: 24
                          103.73.150.0/24 maxlen: 24
                          103.110.248.0/24 maxlen: 24
                          103.110.249.0/24 maxlen: 24
                          103.110.250.0/24 maxlen: 24
                          103.110.251.0/24 maxlen: 24
                          103.114.64.0/24 maxlen: 24
                          103.114.65.0/24 maxlen: 24
                          103.114.66.0/24 maxlen: 24
                          103.114.67.0/24 maxlen: 24
                          103.165.72.0/23 maxlen: 24
                          103.165.76.0/24 maxlen: 24
                          103.165.77.0/24 maxlen: 24
                          103.166.215.0/24 maxlen: 24
                          103.167.154.0/23 maxlen: 24
                          103.167.182.0/23 maxlen: 24
                          103.167.212.0/23 maxlen: 24
                          103.168.0.0/23 maxlen: 24
                          103.168.33.0/24 maxlen: 24
                          103.171.236.0/23 maxlen: 24
                          103.172.168.0/23 maxlen: 24
                          103.178.64.0/23 maxlen: 24
                          103.178.203.0/24 maxlen: 24
                          103.179.10.0/23 maxlen: 24
                          103.179.100.0/23 maxlen: 24
                          103.179.102.0/23 maxlen: 24
                          103.179.120.0/24 maxlen: 24
                          103.179.225.0/24 maxlen: 24
                          103.179.226.0/24 maxlen: 24
                          103.179.227.0/24 maxlen: 24
                          103.180.168.0/24 maxlen: 24
                          103.180.169.0/24 maxlen: 24
                          103.180.174.0/24 maxlen: 24
                          103.180.212.0/23 maxlen: 24
                          103.180.214.0/23 maxlen: 24
                          103.180.238.0/23 maxlen: 24
                          103.181.56.0/23 maxlen: 24
                          103.181.110.0/23 maxlen: 24
                          103.181.151.0/24 maxlen: 24
                          103.181.152.0/23 maxlen: 24
                          103.181.154.0/23 maxlen: 24
                          103.181.174.0/23 maxlen: 24
                          103.183.30.0/23 maxlen: 24
                          103.183.32.0/23 maxlen: 24
                          103.183.34.0/23 maxlen: 24
                          103.187.84.0/23 maxlen: 24
                          103.187.96.0/23 maxlen: 24
                          103.187.102.0/23 maxlen: 24
                          103.187.130.0/23 maxlen: 24
                          103.187.158.0/23 maxlen: 24
                          103.187.170.0/23 maxlen: 24
                          103.217.116.0/22 maxlen: 24
                          103.217.120.0/22 maxlen: 24
                          103.223.8.0/22 maxlen: 24
                          103.223.12.0/22 maxlen: 24
                          103.242.232.0/24 maxlen: 24
                          114.134.24.0/22 maxlen: 24
                          163.47.212.0/22 maxlen: 24
                          175.176.184.0/22 maxlen: 24
                          180.188.224.0/24 maxlen: 24
                          180.188.232.0/24 maxlen: 24
                          180.188.236.0/23 maxlen: 24
                          180.188.241.0/24 maxlen: 24
                          180.188.242.0/23 maxlen: 24
                          180.188.246.0/23 maxlen: 24
                          180.188.248.0/24 maxlen: 24
                          180.188.249.0/24 maxlen: 24
                          180.188.250.0/24 maxlen: 24
                          180.188.251.0/24 maxlen: 24
                          180.188.252.0/22 maxlen: 24
                          202.14.120.0/22 maxlen: 24
                          203.76.178.0/24 maxlen: 24
                          203.76.180.0/24 maxlen: 24
                          203.76.181.0/24 maxlen: 24
                          203.76.188.0/24 maxlen: 24
                          203.76.190.0/24 maxlen: 24
                          203.76.191.0/24 maxlen: 24
                          203.115.68.0/24 maxlen: 24
                          203.115.73.0/24 maxlen: 24
                          203.115.84.0/23 maxlen: 24
                          203.115.91.0/24 maxlen: 24
                          210.89.39.0/24 maxlen: 24
                          210.89.58.0/23 maxlen: 24
                          210.89.61.0/24 maxlen: 24
                          210.89.62.0/23 maxlen: 24
                          223.130.28.0/22 maxlen: 24
                          2001:df0:e400::/48 maxlen: 48
                          2001:df2:e200::/48 maxlen: 48
                          2001:df2:e600::/48 maxlen: 48
                          2400:7b20::/32 maxlen: 32
                          2401:a880::/32 maxlen: 48
                          2404:7c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53106 (0xcf72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jan 23 12:32:03 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69736a43-d223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:00:30:1c:ee:7a:06:2a:65:f5:8e:37:8e:
                    53:9b:eb:65:92:34:3c:8c:57:a3:0e:a5:4f:32:02:
                    6e:29:9d:60:43:93:55:86:a6:d8:35:6f:6a:e7:07:
                    5f:85:39:ac:bd:42:e4:94:f4:69:95:36:4a:66:3d:
                    3a:0a:1c:4d:f7:8b:4c:b1:f0:5c:3e:4f:31:4a:dc:
                    68:4d:84:a2:9b:86:4c:7d:c2:02:23:bc:96:35:fc:
                    ea:da:d2:7c:80:3c:42:fa:b6:2d:80:59:21:31:ab:
                    89:7b:8f:fc:88:73:86:17:67:d1:36:a6:a4:85:3c:
                    3e:f4:73:05:c5:65:f5:05:6b:2d:a7:88:fd:62:56:
                    97:d1:be:81:e8:29:76:34:28:97:2d:29:28:f4:76:
                    6f:73:da:c2:33:84:41:70:ef:22:dd:86:66:f1:c5:
                    2c:92:ea:96:bc:06:8c:bb:e2:4e:c5:8b:0f:b6:8f:
                    7e:2d:68:00:86:52:59:dd:a6:43:44:9f:c3:fa:8a:
                    0e:a6:46:a7:fc:df:da:f3:57:87:92:43:21:bc:c3:
                    91:14:00:05:0f:b8:f1:52:0c:1a:ff:3a:5c:08:b8:
                    2d:a0:db:3e:63:e2:06:86:ee:37:93:bc:78:76:a1:
                    b2:aa:74:c6:33:8b:88:db:41:75:b1:ef:10:23:5c:
                    17:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:94:BA:55:F1:0C:DB:83:81:3A:51:95:6A:D4:CE:76:00:51:EC:26
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF1F9C78EC8011F09E8E0699566F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.37.0/24
                  45.248.156.0-45.248.163.255
                  101.0.32.0/22
                  101.0.37.0-101.0.38.255
                  101.0.41.0-101.0.42.255
                  101.0.45.0/24
                  101.0.49.0-101.0.50.255
                  101.0.53.0-101.0.55.255
                  101.0.57.0/24
                  103.40.196.0/22
                  103.41.20.0-103.41.27.255
                  103.41.36.0/22
                  103.61.150.0/24
                  103.66.204.0-103.66.211.255
                  103.72.168.0/22
                  103.72.220.0/22
                  103.73.148.0-103.73.150.255
                  103.110.248.0/22
                  103.114.64.0/22
                  103.165.72.0/23
                  103.165.76.0/23
                  103.166.215.0/24
                  103.167.154.0/23
                  103.167.182.0/23
                  103.167.212.0/23
                  103.168.0.0/23
                  103.168.33.0/24
                  103.171.236.0/23
                  103.172.168.0/23
                  103.178.64.0/23
                  103.178.203.0/24
                  103.179.10.0/23
                  103.179.100.0/22
                  103.179.120.0/24
                  103.179.225.0-103.179.227.255
                  103.180.168.0/23
                  103.180.174.0/24
                  103.180.212.0/22
                  103.180.238.0/23
                  103.181.56.0/23
                  103.181.110.0/23
                  103.181.151.0-103.181.155.255
                  103.181.174.0/23
                  103.183.30.0-103.183.35.255
                  103.187.84.0/23
                  103.187.96.0/23
                  103.187.102.0/23
                  103.187.130.0/23
                  103.187.158.0/23
                  103.187.170.0/23
                  103.217.116.0-103.217.123.255
                  103.223.8.0/21
                  103.242.232.0/24
                  114.134.24.0/22
                  163.47.212.0/22
                  175.176.184.0/22
                  180.188.224.0/24
                  180.188.232.0/24
                  180.188.236.0/23
                  180.188.241.0-180.188.243.255
                  180.188.246.0-180.188.255.255
                  202.14.120.0/22
                  203.76.178.0/24
                  203.76.180.0/23
                  203.76.188.0/24
                  203.76.190.0/23
                  203.115.68.0/24
                  203.115.73.0/24
                  203.115.84.0/23
                  203.115.91.0/24
                  210.89.39.0/24
                  210.89.58.0/23
                  210.89.61.0-210.89.63.255
                  223.130.28.0/22
                IPv6:
                  2001:df0:e400::/48
                  2001:df2:e200::/48
                  2001:df2:e600::/48
                  2400:7b20::/32
                  2401:a880::/32
                  2404:7c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:2b:a9:cc:e9:e2:26:52:92:8d:94:d0:04:90:f1:8f:d3:fe:
         07:31:a5:0e:8e:b6:e1:ea:14:43:78:8c:39:cf:74:9c:62:ba:
         3f:f5:3a:5c:8a:33:73:63:cd:57:ab:97:0b:cd:a8:75:f2:8d:
         bc:c4:4b:b8:7a:30:72:40:ab:e9:6d:70:c6:2c:fc:3e:87:30:
         1a:4f:a0:ed:fc:b8:34:3a:cd:b4:76:36:c1:7e:cd:83:ba:fd:
         a7:1a:f0:7a:8c:50:db:47:b5:42:7b:7b:b9:d3:b4:ec:b9:64:
         5a:59:9d:6b:8f:5e:5d:f3:44:bf:38:12:44:2a:b9:e7:1e:8e:
         26:d9:3c:9a:1a:80:fe:41:fa:44:53:93:5c:1c:54:1f:99:c3:
         44:4f:fd:0d:6b:69:f2:11:89:79:54:bd:67:87:2d:76:15:a7:
         d2:48:cf:a7:f2:c1:ea:0b:d9:5c:b1:ca:c8:dc:f7:60:2f:5f:
         94:23:15:07:36:a3:5e:c1:eb:be:f0:65:6a:3c:1e:7b:82:42:
         5a:db:a7:eb:c0:6c:b6:51:cf:a7:44:32:71:82:e7:c6:ab:e5:
         3e:e0:c8:37:96:94:39:68:a1:48:74:dc:d4:fc:86:e4:25:59:
         73:a4:89:03:05:2d:f2:d5:6c:6c:e6:74:cd:31:28:fe:7f:2f:
         58:6e:65:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:24:14 2026 by rpki-client