This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/9F12E3A025A511EE87132E45C4F9AE02.roa
File:                     9F12E3A025A511EE87132E45C4F9AE02.roa (raw, json)
Hash identifier:          dj53GnNOW9Moe4ZwWr3vPHDq1PRqDSOo/8oQWiyyik4=
Subject key identifier:   8C:86:44:32:23:1C:94:D4:4D:8A:39:EE:EE:64:4B:B0:65:72:58:78
Certificate issuer:       /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Certificate serial:       0DBB
Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/9F12E3A025A511EE87132E45C4F9AE02.roa
Signing time:             Wed 14 Jan 2026 12:28:37 +0000
ROA not before:           Wed 14 Jan 2026 12:28:37 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137967
IP address blocks:        103.117.192.0/22 maxlen: 22
                          103.117.192.0/23 maxlen: 23
                          103.117.192.0/24 maxlen: 24
                          103.117.193.0/24 maxlen: 24
                          103.117.194.0/23 maxlen: 23
                          103.117.194.0/24 maxlen: 24
                          103.117.195.0/24 maxlen: 24
                          2403:1e40::/32 maxlen: 36
                          2403:1e40::/48 maxlen: 48
                          2403:1e40:100::/48 maxlen: 48
                          2403:1e40:150::/48 maxlen: 48
                          2403:1e40:151::/48 maxlen: 48
                          2403:1e40:152::/48 maxlen: 48
                          2403:1e40:153::/48 maxlen: 48
                          2403:1e40:154::/48 maxlen: 48
                          2403:1e40:168::/48 maxlen: 48
                          2403:1e40:169::/48 maxlen: 48
                          2403:1e40:207::/48 maxlen: 48
                          2403:1e40:1000::/37 maxlen: 40
                          2403:1e40:1000::/41 maxlen: 48
                          2403:1e40:1080::/41 maxlen: 48
                          2403:1e40:1100::/41 maxlen: 48
                          2403:1e40:1180::/41 maxlen: 48
                          2403:1e40:1200::/41 maxlen: 48
                          2403:1e40:1280::/41 maxlen: 48
                          2403:1e40:1300::/41 maxlen: 48
                          2403:1e40:1380::/41 maxlen: 48
                          2403:1e40:1400::/41 maxlen: 48
                          2403:1e40:1800::/37 maxlen: 40
                          2403:1e40:1800::/41 maxlen: 48
                          2403:1e40:1880::/41 maxlen: 45
                          2403:1e40:1880::/42 maxlen: 48
                          2403:1e40:18c0::/43 maxlen: 48
                          2403:1e40:18e0::/44 maxlen: 48
                          2403:1e40:18f0::/45 maxlen: 48
                          2403:1e40:18f8::/46 maxlen: 46
                          2403:1e40:18f8::/47 maxlen: 48
                          2403:1e40:1a00::/41 maxlen: 48
                          2403:1e40:1a80::/41 maxlen: 48
                          2403:1e40:70ff::/48 maxlen: 48
                          2403:1e40:80ff::/48 maxlen: 48
                          2403:1e40:90ff::/48 maxlen: 48
                          2403:1e40:97ff::/48 maxlen: 48
                          2403:1e40:c305::/48 maxlen: 48
                          2403:1e40:fffd::/48 maxlen: 48
                          2403:1e40:fffe::/48 maxlen: 48
                          2403:1e40:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
                          rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3515 (0xdbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
        Validity
            Not Before: Jan 14 12:28:37 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69678bf5-d457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:cf:8a:11:61:74:73:41:62:a5:47:56:2c:
                    bd:75:76:f1:89:70:6c:43:c9:2c:30:26:6f:cc:07:
                    ec:26:fb:bd:8d:9a:5b:67:5a:8f:7a:5a:d8:8c:b6:
                    82:f9:c6:53:12:2b:5a:92:b0:2a:16:8e:7b:1e:c9:
                    c4:6c:42:16:13:9b:13:6e:4f:8f:d0:28:ab:20:b2:
                    c9:c5:94:ad:7a:32:f3:28:24:53:d1:c1:3a:33:7b:
                    5f:bc:58:0e:49:82:8b:3a:65:f5:a6:70:d3:7e:01:
                    e8:5f:f9:ad:43:9e:94:63:27:2e:9e:24:1e:7e:8a:
                    79:2e:8f:e8:6f:a5:a3:9c:17:8f:d3:85:06:c1:cc:
                    25:70:45:00:c0:3d:75:46:9a:54:32:84:86:c6:3e:
                    52:f6:1d:23:9f:33:48:a3:85:59:96:27:00:74:a6:
                    f1:e7:6c:77:42:12:48:7f:d5:ad:12:b9:f4:e1:b7:
                    10:46:29:65:f5:ad:92:f5:f0:84:ae:d7:ed:34:e6:
                    f2:8b:7a:c4:53:31:09:1b:ca:99:2f:a0:7c:a2:e1:
                    16:33:83:3d:e1:58:5f:0c:f2:d8:2b:5c:a7:44:5a:
                    5e:cc:1a:21:58:a9:d6:a1:6a:52:84:76:da:81:80:
                    01:98:85:f0:49:18:10:ca:57:95:d2:d0:40:b1:c1:
                    d3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:86:44:32:23:1C:94:D4:4D:8A:39:EE:EE:64:4B:B0:65:72:58:78
            X509v3 Authority Key Identifier:
                keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/9F12E3A025A511EE87132E45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.192.0/22
                IPv6:
                  2403:1e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:cc:c5:ec:48:3a:90:44:c1:c2:e4:73:8e:be:8e:8e:54:5f:
         86:c9:08:69:10:c0:d4:31:cc:d3:be:9f:ab:fa:0b:dd:d4:82:
         ef:0b:54:c8:ba:c4:12:b4:7a:af:48:42:ff:f3:5a:8d:34:63:
         0a:fe:03:eb:fe:35:5c:31:0e:b5:d0:cf:b0:f8:9e:dc:70:ef:
         10:94:60:1e:13:4d:7c:75:07:1d:e2:73:19:f5:67:bc:2e:1c:
         a9:66:21:0e:86:ff:6e:86:a7:bc:85:3f:bc:14:df:85:3c:fc:
         8c:ae:7a:b3:0f:20:bc:9d:83:a8:bd:1e:d8:8b:f6:0f:74:df:
         88:6a:95:99:75:e4:9b:dc:c9:52:1a:66:d9:5c:d1:30:f5:61:
         ae:62:81:b5:88:e2:ba:d0:17:82:6f:62:6c:39:14:da:8b:38:
         f9:a7:eb:a1:4d:f5:d7:2e:36:a6:5e:22:6d:ef:9f:aa:e5:b6:
         c3:2d:6a:0b:7d:c3:aa:f6:ac:92:c2:3e:7c:77:d7:33:0a:2a:
         5e:b5:de:17:8e:cf:06:e5:b7:ae:c1:89:ac:91:bb:d4:eb:23:
         38:45:1a:bb:37:47:cc:a8:81:ab:0f:1d:83:c7:92:fc:fe:29:
         f4:d4:fa:bf:51:6a:f8:7f:d6:9c:a6:24:02:b8:8a:e8:92:8b:
         00:a7:f2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:47:45 2026 by rpki-client