This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E7193BDA352611F0B2DE9741C4F9AE02.roa
File:                     E7193BDA352611F0B2DE9741C4F9AE02.roa (raw, json)
Hash identifier:          dzKkqS/7OsYnkfoqzKSJXR7qM8+9IoE/ARMhQM+1zyE=
Subject key identifier:   2B:4F:E1:9D:71:9D:EB:13:40:CA:68:1D:A7:84:B5:E0:43:BF:82:96
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4F67
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E7193BDA352611F0B2DE9741C4F9AE02.roa
Signing time:             Thu 25 Dec 2025 09:25:45 +0000
ROA not before:           Thu 25 Dec 2025 09:25:45 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149107
IP address blocks:        103.188.166.0/23 maxlen: 24
                          163.47.30.0/23 maxlen: 23
                          2001:df4:1bc0::/48 maxlen: 48
                          2001:df4:bac0::/48 maxlen: 48
                          2001:df4:bb40::/48 maxlen: 48
                          2001:df4:bbc0::/48 maxlen: 48
                          2001:df4:fc40::/48 maxlen: 48
                          2401:8e20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20327 (0x4f67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Dec 25 09:25:45 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=694d0319-06fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9b:06:7d:95:55:4a:1b:3f:e3:18:ac:88:28:
                    82:b2:1c:d2:00:dc:b6:bc:e8:53:c8:b7:79:41:25:
                    20:80:0e:40:cf:37:fd:bf:ee:e9:62:c7:23:fb:e6:
                    8c:6e:46:57:9b:c8:42:76:80:fb:75:e3:de:0f:69:
                    18:2d:0f:af:c6:c1:f3:e4:07:62:41:8e:40:05:49:
                    da:f5:ab:49:69:c3:43:f2:33:55:10:f5:ed:97:65:
                    b4:30:a3:7a:0b:c7:4a:7e:e8:35:d5:d7:18:c1:36:
                    69:46:1f:cc:05:c7:81:9f:17:96:3b:7d:8c:07:dc:
                    34:cd:2c:ee:e8:2f:47:ca:44:e7:db:f4:32:95:51:
                    a7:d3:22:57:5d:14:a0:9d:2e:25:8c:85:90:97:28:
                    68:4d:a2:35:04:ed:a0:77:8d:27:18:90:74:fe:57:
                    ab:bd:19:b3:6b:e7:48:95:84:09:b4:9c:de:4a:9c:
                    ce:2f:ff:10:19:ca:f6:2a:bc:99:6e:62:67:4f:4e:
                    8d:cb:ea:1d:b0:4b:2c:ed:6b:57:40:65:30:eb:66:
                    70:19:92:28:d6:ea:35:e2:3c:11:8e:9e:4c:6f:cf:
                    e2:88:c1:b2:7d:79:e1:de:d3:85:80:cc:c2:c6:06:
                    b2:33:5e:b1:c2:28:45:9d:aa:b9:61:f2:a9:aa:8a:
                    75:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4F:E1:9D:71:9D:EB:13:40:CA:68:1D:A7:84:B5:E0:43:BF:82:96
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E7193BDA352611F0B2DE9741C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.166.0/23
                  163.47.30.0/23
                IPv6:
                  2001:df4:1bc0::/48
                  2001:df4:bac0::/48
                  2001:df4:bb40::/48
                  2001:df4:bbc0::/48
                  2001:df4:fc40::/48
                  2401:8e20::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:05:77:3f:06:31:1d:9c:d8:f6:2e:2e:bf:ce:4a:be:54:bd:
         38:27:d9:e1:1a:e9:8d:ef:e8:b1:ec:7b:ba:94:f9:32:51:56:
         da:53:64:56:61:64:83:8d:38:09:5d:26:f8:c5:55:55:fe:37:
         1b:13:7f:4c:2d:ad:89:1b:6c:13:08:b3:38:a6:3a:c2:5d:bc:
         d2:36:72:0a:da:87:ea:74:3e:6e:28:08:67:3c:1f:79:f5:2e:
         fd:9c:db:e8:d7:1e:ce:c3:95:1f:01:32:51:8a:5d:65:f6:fa:
         70:68:28:94:cc:a6:a0:2e:ff:9c:6e:92:07:52:95:72:50:fa:
         75:00:71:c2:a2:d5:2d:79:f3:5a:57:d2:fc:d1:e7:ca:86:31:
         29:d8:11:11:7c:c2:0c:89:74:f0:33:25:67:8d:4a:69:25:86:
         37:32:08:e3:21:ea:72:ee:25:fb:5c:be:55:33:f4:9f:8f:7f:
         c9:09:4b:e5:15:98:61:80:65:39:1a:a8:16:ea:72:d6:c6:fc:
         1e:62:ea:19:a2:5e:c5:ed:08:9f:25:98:7f:21:67:a3:75:3a:
         4b:4a:14:f2:81:f6:68:6a:16:c4:b1:2f:d7:68:f1:8b:82:53:
         67:8c:c2:f9:fb:9f:37:33:72:d3:a6:b5:02:c1:e2:f2:f9:aa:
         c9:1f:17:cc
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgICT2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUxMjI1MDkyNTQ1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTRkMDMxOS0wNmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4psGfZVVShs/4xisiCiCshzSANy2vOhTyLd5QSUggA5Azzf9v+7pYscj++aM
bkZXm8hCdoD7dePeD2kYLQ+vxsHz5AdiQY5ABUna9atJacND8jNVEPXtl2W0MKN6
C8dKfug11dcYwTZpRh/MBceBnxeWO32MB9w0zSzu6C9HykTn2/QylVGn0yJXXRSg
nS4ljIWQlyhoTaI1BO2gd40nGJB0/lervRmza+dIlYQJtJzeSpzOL/8QGcr2KryZ
bmJnT06Ny+odsEss7WtXQGUw62ZwGZIo1uo14jwRjp5Mb8/iiMGyfXnh3tOFgMzC
xgayM16xwihFnaq5YfKpqop1YQIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFCtP4Z1x
nesTQMpoHaeEteBDv4KWMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRTcxOTNCREEz
NTI2MTFGMEIyREU5NzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYwYIKwYBBQUHAQcBAf8E
VDBSMBIEAgABMAwDBAFnvKYDBAGjLx4wPAQCAAIwNgMHACABDfQbwAMHACABDfS6
wAMHACABDfS7QAMHACABDfS7wAMHACABDfT8QAMHACQBjiAAADANBgkqhkiG9w0B
AQsFAAOCAQEAIgV3PwYxHZzY9i4uv85KvlS9OCfZ4Rrpje/osex7upT5MlFW2lNk
VmFkg404CV0m+MVVVf43GxN/TC2tiRtsEwizOKY6wl280jZyCtqH6nQ+bigIZzwf
efUu/Zzb6NcezsOVHwEyUYpdZfb6cGgolMymoC7/nG6SB1KVclD6dQBxwqLVLXnz
WlfS/NHnyoYxKdgREXzCDIl08DMlZ41KaSWGNzII4yHqcu4l+1y+VTP0n49/yQlL
5RWYYYBlORqoFupy1sb8HmLqGaJexe0InyWYfyFno3U6S0oU8oH2aGoWxLEv12jx
i4JTZ4zC+fufNzNy06a1AsHi8vmqyR8XzA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:31:45 2026 by rpki-client