This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/2D2322ECF53111F0B165BC265F6F56BC.roa
File:                     2D2322ECF53111F0B165BC265F6F56BC.roa (raw, json)
Hash identifier:          WX8+QX8VcEO1eC9Ul1GuUGCtEelNdO2appfyJA/sl2E=
Subject key identifier:   1C:A9:9E:25:B0:53:7C:F7:42:4A:71:64:22:E5:33:C4:7D:8E:43:33
Certificate issuer:       /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Certificate serial:       0C72
Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/2D2322ECF53111F0B165BC265F6F56BC.roa
Signing time:             Mon 19 Jan 2026 12:20:01 +0000
ROA not before:           Mon 19 Jan 2026 12:20:01 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     131464
IP address blocks:        103.198.132.0/24 maxlen: 24
                          103.198.133.0/24 maxlen: 24
                          103.198.134.0/23 maxlen: 23
                          103.198.134.0/24 maxlen: 24
                          103.198.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
                          rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3186 (0xc72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
        Validity
            Not Before: Jan 19 12:20:01 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=696e2171-5644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6f:ce:47:ba:c2:8a:f4:5a:2e:22:cb:fa:56:
                    e7:d7:5b:26:5f:07:b8:18:8a:6e:28:93:f3:cd:20:
                    03:d7:92:04:8d:ff:e6:ac:7d:25:d9:19:26:dc:c4:
                    e3:2a:47:32:3f:18:8d:d3:5e:51:96:e2:85:58:3f:
                    b5:6c:89:c1:b6:4c:e5:09:30:3d:c7:95:f7:19:d9:
                    09:7b:89:c1:34:56:90:62:f2:74:29:e8:39:f1:6a:
                    10:67:1f:65:dc:5e:05:6d:7e:c8:8a:fc:b6:d2:78:
                    a7:39:75:81:aa:73:72:1f:e5:20:73:f8:b0:a9:0e:
                    c9:20:aa:49:6d:18:b3:be:29:2a:de:f2:e0:17:8e:
                    7e:f5:e1:01:fe:e9:7f:e9:c6:5e:84:1d:07:e3:0e:
                    93:d8:55:28:41:08:f1:94:d2:3d:ce:c1:45:48:e3:
                    82:b5:98:df:63:09:6f:8b:d3:88:39:f1:a4:0b:22:
                    70:99:fd:d9:59:97:81:62:bc:f5:bf:13:b5:9e:d3:
                    b2:bf:af:2e:7a:55:a6:d1:db:40:33:95:b0:7d:b4:
                    a5:c2:bd:e1:f9:6b:ce:bd:cb:0f:ae:cb:28:39:19:
                    bd:94:ba:66:3d:1d:82:b6:a2:d5:b3:e3:ab:53:60:
                    e4:f5:30:62:d9:fd:4d:1e:2a:97:0b:f3:91:68:25:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A9:9E:25:B0:53:7C:F7:42:4A:71:64:22:E5:33:C4:7D:8E:43:33
            X509v3 Authority Key Identifier:
                keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/2D2322ECF53111F0B165BC265F6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:b6:dc:fe:49:55:dc:9e:18:f2:37:6b:d1:9e:5b:23:44:8c:
         ac:e8:b4:80:c9:de:bf:11:4d:81:74:60:c1:cf:a9:01:5d:2a:
         dc:a0:d0:1e:10:ff:e2:d7:f7:d8:67:8a:ae:05:0a:63:d7:85:
         20:8f:ac:90:11:e9:02:53:f4:d3:73:cc:df:90:1b:e6:96:87:
         b2:41:17:6d:e7:13:05:df:59:5c:76:8a:91:1e:cc:0d:94:48:
         07:45:5f:ce:43:07:e1:a1:8a:68:25:83:a5:f0:f3:a8:99:82:
         8c:ea:e1:bf:29:7b:1c:dc:d6:43:62:ac:95:6f:5d:3a:e4:5c:
         9c:96:03:ad:f0:c5:8f:7a:c0:0b:83:c5:72:66:db:c3:5f:bb:
         f7:6a:98:66:dc:d8:10:e7:b3:fa:a2:c5:c8:4e:a4:b2:b5:a8:
         69:02:a4:9e:46:f3:37:92:ac:09:c2:a6:ca:9a:df:71:66:34:
         14:9e:c5:53:14:ae:0c:f5:e8:c6:3a:3c:69:50:e9:69:bb:01:
         e6:e5:20:ed:96:71:4a:6e:b3:ca:83:92:0d:36:36:b7:a1:9e:
         a9:f2:f2:dd:4e:74:97:78:ac:9f:34:30:48:6d:8d:49:9e:cc:
         74:69:16:66:a7:70:2d:6b:ff:6f:93:76:bf:ed:e9:6f:d5:95:
         53:60:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:12:37 2026 by rpki-client