This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/134D519098B711EE99FD1F09C4F9AE02.roa
File:                     134D519098B711EE99FD1F09C4F9AE02.roa (raw, json)
Hash identifier:          E76XAORV5ru79qm809Iipb+GZ/aZqgzSbLj/HMdntw8=
Subject key identifier:   14:8C:03:4F:FF:A9:3C:4F:A0:07:3D:FB:23:5C:F5:BE:7F:13:EB:40
Certificate issuer:       /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Certificate serial:       0196
Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/134D519098B711EE99FD1F09C4F9AE02.roa
Signing time:             Mon 19 Jan 2026 03:22:37 +0000
ROA not before:           Mon 19 Jan 2026 03:22:37 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     134467
IP address blocks:        103.160.82.0/24 maxlen: 24
                          2001:df4:b540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
                          rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
        Validity
            Not Before: Jan 19 03:22:37 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696da37c-e536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:07:1e:be:50:80:3c:2b:01:df:06:78:ee:ee:
                    92:2c:ff:cf:2d:8f:f3:9c:da:3f:e7:1a:b2:df:5f:
                    54:a2:a8:9a:5f:65:d9:02:7f:e6:1d:91:d5:e8:b5:
                    6b:ea:5b:60:8a:79:c8:b1:aa:0d:6c:a0:0f:e5:d8:
                    cb:ed:9b:50:9a:e1:1d:0d:f4:02:3b:7f:9f:df:5d:
                    a4:d4:62:8f:a4:50:4e:46:57:0d:73:da:35:8d:7c:
                    39:1c:33:08:5c:de:64:d4:bc:46:05:f8:7b:ff:42:
                    64:4d:87:45:02:b2:34:ce:d4:da:93:78:77:98:9a:
                    fd:db:0d:b3:49:64:c6:c0:10:df:51:7d:3e:aa:30:
                    77:7e:23:d4:44:99:dc:b6:0c:41:0c:9f:8f:c4:fb:
                    1b:fc:65:f5:f0:f7:c5:79:ac:50:92:5b:79:1d:80:
                    b8:4f:26:97:6f:fb:7c:6a:cc:0c:fe:bd:4c:05:44:
                    bb:a1:5d:79:22:92:ae:b8:09:bb:cc:fd:d5:2b:30:
                    dc:33:ca:52:3f:40:90:00:5b:ba:0f:69:08:39:42:
                    2f:5e:40:f1:1a:49:e5:ce:2f:d3:34:a0:60:69:36:
                    9f:44:82:64:f5:75:cd:f8:a9:ac:e4:4e:3d:98:55:
                    36:77:3e:a7:b3:c4:a9:97:6d:2d:1e:b5:4c:14:d6:
                    b0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8C:03:4F:FF:A9:3C:4F:A0:07:3D:FB:23:5C:F5:BE:7F:13:EB:40
            X509v3 Authority Key Identifier:
                keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/134D519098B711EE99FD1F09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.82.0/24
                IPv6:
                  2001:df4:b540::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:8c:3d:62:32:ba:0a:53:f5:cf:bd:26:0e:06:0c:51:ba:65:
         84:58:93:5a:c2:3c:49:24:06:6d:24:68:2a:dc:61:d3:cb:c4:
         98:db:76:48:17:71:ac:c4:14:1f:30:9e:ae:fa:3a:9d:a6:b6:
         21:78:5b:67:14:e1:4c:86:5c:8c:af:ad:0a:5e:be:9a:a7:54:
         dd:ce:c6:1d:49:1f:eb:c0:ea:f2:b4:58:5f:b0:a2:f0:16:95:
         f2:31:65:29:2b:0a:98:62:20:a5:78:67:80:ec:6e:48:3e:52:
         39:42:6e:41:3c:6d:79:ba:9e:42:08:46:a8:59:bf:29:58:42:
         cf:90:75:02:86:68:d0:d3:3e:cf:72:82:6f:35:c8:72:2e:34:
         62:51:43:24:4d:c6:ab:56:7a:80:77:25:82:dc:e0:1c:c6:da:
         2e:a6:c9:6e:c7:5d:24:c1:b3:4b:13:fd:2d:13:bf:69:02:1d:
         36:7d:2f:84:4e:06:24:37:98:24:96:0c:03:e5:b3:71:8e:ac:
         84:b0:33:59:58:74:7c:b9:38:e4:55:58:7f:d6:c7:cd:8d:b4:
         af:3b:88:01:11:3a:d2:2a:18:fa:6a:59:cd:12:9f:6e:14:7b:
         79:ac:71:51:4b:24:4c:35:43:3f:e3:bc:0b:74:53:f8:e4:d7:
         c1:48:fe:a2
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QTM1MjYxMTAvBgNVBAUTKDA1RkQyRDUxOUQ0MENCMjA4OTM3QkY4QThFNDYzRTZE
ODQyQ0MwN0QwHhcNMjYwMTE5MDMyMjM3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZkYTM3Yy1lNTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtQcevlCAPCsB3wZ47u6SLP/PLY/znNo/5xqy319UoqiaX2XZAn/mHZHV6LVr
6ltginnIsaoNbKAP5djL7ZtQmuEdDfQCO3+f312k1GKPpFBORlcNc9o1jXw5HDMI
XN5k1LxGBfh7/0JkTYdFArI0ztTak3h3mJr92w2zSWTGwBDfUX0+qjB3fiPURJnc
tgxBDJ+PxPsb/GX18PfFeaxQklt5HYC4TyaXb/t8aswM/r1MBUS7oV15IpKuuAm7
zP3VKzDcM8pSP0CQAFu6D2kIOUIvXkDxGknlzi/TNKBgaTafRIJk9XXN+Kms5E49
mFU2dz6ns8Spl20tHrVMFNaw5QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBSMA0//
qTxPoAc9+yNc9b5/E+tAMB8GA1UdIwQYMBaAFAX9LVGdQMsgiTe/io5GPm2ELMB9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzUyNi9BMTNDNTVDRTk4
QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5Q0pONy1LamtZLWJZUXN3
SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JmMHRVWjFBeXlDSk43LUtqa1ktYllRc3dIMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTM1MjYvQTEzQzU1Q0U5OEI2MTFFRThCNDkwNDg3QzRGOUFFMDIvMTM0RDUxOTA5
OEI3MTFFRTk5RkQxRjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnoFIwDwQCAAIwCQMHACABDfS1QDANBgkqhkiG9w0BAQsF
AAOCAQEAt4w9YjK6ClP1z70mDgYMUbplhFiTWsI8SSQGbSRoKtxh08vEmNt2SBdx
rMQUHzCervo6naa2IXhbZxThTIZcjK+tCl6+mqdU3c7GHUkf68Dq8rRYX7Ci8BaV
8jFlKSsKmGIgpXhngOxuSD5SOUJuQTxtebqeQghGqFm/KVhCz5B1AoZo0NM+z3KC
bzXIci40YlFDJE3Gq1Z6gHclgtzgHMbaLqbJbsddJMGzSxP9LRO/aQIdNn0vhE4G
JDeYJJYMA+WzcY6shLAzWVh0fLk45FVYf9bHzY20rzuIARE60ioY+mpZzRKfbhR7
eaxxUUskTDVDP+O8C3RT+OTXwUj+og==
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:09:24 2026 by rpki-client