This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/44BA2B8C671011EEB41FB227C4F9AE02.roa
File:                     44BA2B8C671011EEB41FB227C4F9AE02.roa (raw, json)
Hash identifier:          96wKn4tF8dlrw9xXxtLpUcePMMDZgN/R31W3m8DC/HQ=
Subject key identifier:   B6:46:30:58:A7:DE:08:2B:E9:FF:50:12:72:B4:22:01:59:50:BD:68
Certificate issuer:       /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D
Certificate serial:       01A7
Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/44BA2B8C671011EEB41FB227C4F9AE02.roa
Signing time:             Wed 31 Dec 2025 03:22:00 +0000
ROA not before:           Wed 31 Dec 2025 03:22:00 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     137263
IP address blocks:        103.126.92.0/22 maxlen: 22
                          103.126.92.0/23 maxlen: 23
                          103.126.94.0/23 maxlen: 23
                          103.126.94.0/24 maxlen: 24
                          103.126.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl
                          rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF286, serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D
        Validity
            Not Before: Dec 31 03:22:00 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=695496d8-9142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:8c:b7:61:b7:38:ba:84:b7:69:35:de:86:
                    d5:3d:99:a9:38:44:9f:dd:f0:76:5a:60:1d:5c:46:
                    0e:4f:b0:3d:67:31:72:96:24:c2:da:f4:00:3c:fd:
                    9b:2d:8e:af:63:19:e1:c9:d6:05:41:b3:32:f5:e6:
                    62:7d:4f:6d:93:cf:46:1c:d5:a7:eb:c2:8e:50:5c:
                    42:8d:28:fa:00:97:a7:15:15:1c:82:c2:7e:8a:f9:
                    82:75:91:2f:4b:2e:36:00:3d:16:25:92:82:30:2f:
                    90:f5:55:89:c7:1a:a7:a2:88:ca:15:4d:66:ce:8a:
                    ba:7c:d9:4b:90:3c:c4:cb:9d:c7:e7:5b:97:d8:55:
                    da:10:c8:dc:61:14:b9:4b:79:3d:fd:56:cb:23:e0:
                    8b:7d:c8:b4:97:8b:0c:29:58:da:33:28:6d:2c:1b:
                    59:06:d9:b8:c0:06:d9:d6:a3:03:15:38:84:51:e9:
                    8c:3d:d1:f0:cd:83:4c:2f:46:2c:24:61:cb:bc:21:
                    3c:94:e7:61:f5:4f:8f:0b:0d:49:c2:bc:c2:66:ce:
                    a3:59:1b:dc:f8:27:9c:a4:e8:bc:ea:b1:3a:8e:17:
                    eb:ed:df:3f:80:26:81:2c:a9:fc:92:8a:7e:b4:fe:
                    6b:50:9d:04:fb:a2:e2:82:6c:0d:6d:1b:c4:4d:a1:
                    d8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:46:30:58:A7:DE:08:2B:E9:FF:50:12:72:B4:22:01:59:50:BD:68
            X509v3 Authority Key Identifier:
                keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/44BA2B8C671011EEB41FB227C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e6:c6:1d:5c:b6:d4:a9:0b:fe:ce:52:d5:e7:51:85:be:f2:a5:
         e2:70:1c:b6:c3:eb:ab:da:2c:82:35:74:39:53:0f:21:ce:6c:
         98:8b:8e:d6:64:80:1e:23:9f:73:b4:21:69:31:25:03:b2:5e:
         bb:c1:90:e5:0a:65:a5:0d:0e:45:c1:ec:dc:66:9d:8d:4a:5a:
         ea:fb:7f:aa:f6:c2:5e:79:2d:f8:9c:fe:5c:e5:8e:b8:12:67:
         c0:34:a8:58:49:21:ec:26:8c:e3:4c:cb:3f:64:08:de:f3:7f:
         01:5e:e6:02:8c:15:96:c6:a3:d3:0f:dd:e3:1f:e0:e5:e9:91:
         8f:69:db:58:9f:75:88:31:11:8c:9b:8e:4b:65:b5:ac:ad:ba:
         0a:be:7e:82:cd:59:21:5d:f7:2e:59:5d:31:18:76:62:d0:a3:
         0f:1d:7c:be:3d:b1:34:09:88:9f:7f:48:ba:1f:ce:0f:27:15:
         df:61:03:bd:c0:c1:81:f1:fc:40:a7:bf:97:9f:b0:4f:7a:21:
         97:56:85:84:aa:35:4f:02:ea:09:fd:ee:32:f2:4d:cb:4c:30:
         83:f7:0f:d5:5e:4c:72:10:2d:ff:cd:60:1b:21:c6:d6:cd:c5:
         f4:94:69:65:0e:59:33:ba:b0:c0:3c:51:bc:e2:22:33:f8:a5:
         ed:1e:b7:cd
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QkYyODYxMTAvBgNVBAUTKDEwMTEwNkMzNzU1MUIxMTQ3NUZCQUFCMjM5MDExNUI3
QUNGMjgwMkQwHhcNMjUxMjMxMDMyMjAwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU0OTZkOC05MTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ceMt2G3OLqEt2k13obVPZmpOESf3fB2WmAdXEYOT7A9ZzFyliTC2vQAPP2b
LY6vYxnhydYFQbMy9eZifU9tk89GHNWn68KOUFxCjSj6AJenFRUcgsJ+ivmCdZEv
Sy42AD0WJZKCMC+Q9VWJxxqnoojKFU1mzoq6fNlLkDzEy53H51uX2FXaEMjcYRS5
S3k9/VbLI+CLfci0l4sMKVjaMyhtLBtZBtm4wAbZ1qMDFTiEUemMPdHwzYNML0Ys
JGHLvCE8lOdh9U+PCw1JwrzCZs6jWRvc+CecpOi86rE6jhfr7d8/gCaBLKn8kop+
tP5rUJ0E+6LigmwNbRvETaHYkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLZGMFin
3ggr6f9QEnK0IgFZUL1oMB8GA1UdIwQYMBaAFBARBsN1UbEUdfuqsjkBFbes8oAt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ni8xQ0UyQjBDNDY2
OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNSUjEtNnF5T1FFVnQ2enln
QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VCRUd3M1ZSc1JSMS02cXlPUUVWdDZ6eWdDMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkYyODYvMUNFMkIwQzQ2Njk0MTFFRUEwNDUyOTUxQzRGOUFFMDIvNDRCQTJCOEM2
NzEwMTFFRUI0MUZCMjI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnflwwDQYJKoZIhvcNAQELBQADggEBAObGHVy21KkL/s5S
1edRhb7ypeJwHLbD66vaLII1dDlTDyHObJiLjtZkgB4jn3O0IWkxJQOyXrvBkOUK
ZaUNDkXB7NxmnY1KWur7f6r2wl55Lfic/lzljrgSZ8A0qFhJIewmjONMyz9kCN7z
fwFe5gKMFZbGo9MP3eMf4OXpkY9p21ifdYgxEYybjktltaytugq+foLNWSFd9y5Z
XTEYdmLQow8dfL49sTQJiJ9/SLofzg8nFd9hA73AwYHx/ECnv5efsE96IZdWhYSq
NU8C6gn97jLyTctMMIP3D9VeTHIQLf/NYBshxtbNxfSUaWUOWTO6sMA8UbziIjP4
pe0et80=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:22:00 2026 by rpki-client