This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/13E4471298B711EE99FD1F09C4F9AE02.roa
File:                     13E4471298B711EE99FD1F09C4F9AE02.roa (raw, json)
Hash identifier:          ldg+jyQG1XLsPn0219B9bkdGrOsxkUVoi2DOn5mORcQ=
Subject key identifier:   36:62:76:37:DC:BA:62:90:35:A6:3E:97:94:1A:F8:5B:41:33:30:EC
Certificate issuer:       /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Certificate serial:       0197
Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/13E4471298B711EE99FD1F09C4F9AE02.roa
Signing time:             Mon 19 Jan 2026 03:22:38 +0000
ROA not before:           Mon 19 Jan 2026 03:22:38 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     141047
IP address blocks:        103.160.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
                          rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
        Validity
            Not Before: Jan 19 03:22:38 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696da37e-fceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2f:0e:0c:83:4a:6a:a4:54:f0:94:28:e8:70:
                    5d:4c:aa:37:f5:9b:52:4d:d1:a6:49:d2:ec:4e:e9:
                    d0:fe:7a:80:9d:2b:a2:a5:e1:aa:fa:8f:9c:39:5a:
                    4a:06:c0:09:1d:bc:23:40:42:7b:be:13:51:d1:76:
                    61:f7:3c:5c:be:df:1a:5e:78:78:d9:d3:90:ac:e5:
                    de:cf:ff:17:64:f4:d5:7d:b1:c3:e6:11:3c:51:1c:
                    5d:a4:39:7a:a8:e6:d2:1e:b0:23:3e:0d:e2:c9:00:
                    af:bc:aa:a0:8f:da:ae:b3:4b:cc:8a:48:a8:89:95:
                    2f:70:fc:4c:0e:f1:b3:9f:8b:fa:c4:33:ce:0d:de:
                    4b:69:13:75:e2:21:33:c6:59:44:22:ad:e0:76:ea:
                    2b:e1:86:2c:f9:9a:a8:2b:d0:a9:06:1e:d9:ec:b3:
                    4c:df:0a:4f:48:d2:ca:26:c1:d7:b0:f7:3d:19:1a:
                    8f:c4:24:8b:d5:4d:92:15:f5:55:b7:fd:a5:4c:13:
                    0d:dc:20:28:e5:ac:71:86:38:5c:58:8c:88:b3:e5:
                    b0:50:83:5a:e8:1c:55:4d:72:83:30:30:4d:10:3f:
                    3f:01:a6:b1:a3:88:96:10:93:11:60:45:77:e8:d6:
                    8d:17:2f:26:04:4d:fe:d2:91:28:64:70:67:e2:18:
                    5c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:62:76:37:DC:BA:62:90:35:A6:3E:97:94:1A:F8:5B:41:33:30:EC
            X509v3 Authority Key Identifier:
                keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/13E4471298B711EE99FD1F09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:6e:14:19:2c:29:d0:2e:41:0c:98:ff:eb:db:cc:a0:d6:d1:
         96:2b:77:95:27:38:7b:23:68:c2:33:ba:0b:f1:91:59:33:32:
         b6:1d:ca:eb:d5:eb:0f:9f:c6:2e:5c:bf:db:8a:d1:a3:09:34:
         09:27:21:03:10:08:a5:7a:d1:3e:03:17:0c:fb:f5:c2:3d:63:
         23:ce:09:95:4b:6a:aa:02:e5:ee:46:a6:36:51:7e:79:cd:58:
         89:17:a6:44:49:03:12:ad:f4:2b:f7:81:8f:e8:42:1a:8a:08:
         62:9f:75:50:5e:ec:81:5a:ce:e9:6f:40:a5:c1:dd:d7:bb:86:
         06:a8:38:73:a6:6a:b9:1f:ff:75:b3:99:3e:43:11:7b:22:e0:
         84:83:4b:d0:4c:a4:bc:dd:3d:77:b1:25:8c:a4:41:a0:b4:81:
         bd:96:ca:8b:c2:08:a9:76:fc:11:7c:25:43:66:79:1b:74:48:
         88:52:04:3c:3c:9d:5f:bc:3d:82:2d:9f:ce:31:0e:7b:a8:d4:
         3e:ed:7c:0e:bf:15:0f:b0:e4:ff:9e:ce:49:60:81:c7:a2:64:
         73:52:0b:d9:40:19:c0:21:2d:59:6c:14:43:fe:b0:3a:89:fa:
         69:e9:7b:44:4b:bd:b7:4d:41:dc:4a:70:11:e1:70:2c:de:e0:
         23:05:4f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:04:35 2026 by rpki-client