This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/E85B23282DF211EAA63F5D60C4F9AE02.roa
File:                     E85B23282DF211EAA63F5D60C4F9AE02.roa (raw, json)
Hash identifier:          hLn5Saedvapv3tXf4Cho1HIqT8ebPc+DVPoJXCMT0gA=
Subject key identifier:   06:A2:3C:8A:CF:85:9C:DA:A6:F0:7B:B4:9A:95:CB:04:C1:37:AA:86
Certificate issuer:       /CN=A91C0C0B/serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F
Certificate serial:       0C03
Authority key identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/E85B23282DF211EAA63F5D60C4F9AE02.roa
Signing time:             Fri 16 Jan 2026 19:15:47 +0000
ROA not before:           Fri 16 Jan 2026 19:15:47 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     139925
IP address blocks:        103.147.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl
                          rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3075 (0xc03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0C0B, serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F
        Validity
            Not Before: Jan 16 19:15:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696a8e62-087d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:ea:6c:21:d2:30:9b:d2:68:9f:33:6f:60:
                    aa:df:6e:d7:9b:ee:90:9f:21:bd:d6:fd:6a:84:94:
                    db:93:77:08:82:73:99:20:71:da:21:dc:93:a4:6d:
                    62:21:26:f1:75:64:f9:03:04:63:a6:db:db:8e:c4:
                    85:f9:a5:1c:6b:5e:06:9a:05:f6:c4:db:3d:1e:c2:
                    3a:08:64:6e:a1:9f:2e:55:e8:56:a5:38:c2:16:38:
                    ef:dc:49:77:7d:a8:8c:3a:c8:c8:36:5b:8a:5e:c0:
                    4b:9b:52:d1:24:76:44:80:3e:f4:ac:1a:71:4f:03:
                    19:d0:20:7b:92:e3:a9:fa:82:80:f8:0e:ef:c3:21:
                    71:44:11:65:cd:39:5d:6c:67:8b:26:73:2f:13:79:
                    f7:ac:c9:1e:3d:ed:3d:fc:34:55:73:79:a6:c5:94:
                    69:eb:1a:0b:8b:86:ee:53:dd:35:b3:db:6e:f1:ea:
                    b2:ed:c1:0a:bb:3e:1c:99:db:8c:76:4f:bd:d9:c9:
                    25:ca:6f:ac:79:df:0d:d0:ec:f5:e6:a5:69:ab:0f:
                    a6:88:8f:cc:00:34:46:c1:ad:6a:c4:9a:d8:45:23:
                    65:f0:37:5c:52:93:3c:50:20:67:8d:7e:1a:5a:80:
                    c7:52:94:d0:75:64:b5:e7:f6:70:b8:9e:85:69:db:
                    55:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A2:3C:8A:CF:85:9C:DA:A6:F0:7B:B4:9A:95:CB:04:C1:37:AA:86
            X509v3 Authority Key Identifier:
                keyid:01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/E85B23282DF211EAA63F5D60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:5f:53:8b:79:a7:86:ce:17:c6:03:e6:38:bd:be:1d:d0:87:
         61:18:e9:d9:cd:99:30:13:8f:09:51:54:da:66:24:e1:6d:4b:
         66:0e:56:00:a4:4f:d6:52:34:2f:44:f5:39:a2:7e:69:20:7d:
         6f:4d:dc:3b:b4:9b:dd:88:cc:1c:6a:99:8c:69:5b:33:c0:af:
         4d:f8:84:66:33:c7:18:67:33:26:0f:ff:3f:28:f7:11:e4:a7:
         e4:4e:de:03:39:10:ee:df:d2:c0:f3:6d:d5:40:63:4e:95:b6:
         a6:05:f9:67:e5:a5:f6:62:f2:55:0d:9e:0c:96:f7:8f:15:aa:
         8f:c3:35:52:26:cc:9a:53:90:63:67:4b:7a:c0:fd:af:d9:b1:
         15:5b:98:55:29:81:92:cd:ad:86:a5:ca:a4:5a:34:e3:b5:5c:
         6e:4b:19:31:50:14:fa:09:ea:8e:62:54:0e:fe:a2:9c:21:89:
         64:01:96:74:10:af:62:b6:29:9a:4b:a1:1f:16:0d:e2:ed:9d:
         1d:3f:51:ff:5c:f8:88:00:1d:44:4a:9f:44:e4:ea:6d:6f:61:
         ca:19:90:98:23:91:6d:ab:ba:b4:9e:66:8d:d5:8f:aa:30:84:
         5f:07:32:9a:55:81:14:f0:93:74:b1:43:de:4e:f2:12:a8:52:
         c0:f8:b6:3b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QzBDMEIxMTAvBgNVBAUTKDAxMjg3MDVENjlDNTFFMEUyQjA3OEFFREI5OTg5MUU3
RjE5QjREMUYwHhcNMjYwMTE2MTkxNTQ3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZhOGU2Mi0wODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArAzqbCHSMJvSaJ8zb2Cq327Xm+6QnyG91v1qhJTbk3cIgnOZIHHaIdyTpG1i
ISbxdWT5AwRjptvbjsSF+aUca14GmgX2xNs9HsI6CGRuoZ8uVehWpTjCFjjv3El3
faiMOsjINluKXsBLm1LRJHZEgD70rBpxTwMZ0CB7kuOp+oKA+A7vwyFxRBFlzTld
bGeLJnMvE3n3rMkePe09/DRVc3mmxZRp6xoLi4buU901s9tu8eqy7cEKuz4cmduM
dk+92cklym+sed8N0Oz15qVpqw+miI/MADRGwa1qxJrYRSNl8DdcUpM8UCBnjX4a
WoDHUpTQdWS15/ZwuJ6FadtV7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFAaiPIrP
hZzapvB7tJqVywTBN6qGMB8GA1UdIwQYMBaAFAEocF1pxR4OKweK7bmYkefxm00f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEMwQi80NDU5NDQ4QzJD
NkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhnNHJCNHJ0dVppUjVfR2JU
UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FTaHdYV25GSGc0ckI0cnR1WmlSNV9HYlRSOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzBDMEIvNDQ1OTQ0OEMyQzZBMTFFQTlDRUNCRjRBQzRGOUFFMDIvRTg1QjIzMjgy
REYyMTFFQUE2M0Y1RDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnkyowDQYJKoZIhvcNAQELBQADggEBAD9fU4t5p4bOF8YD
5ji9vh3Qh2EY6dnNmTATjwlRVNpmJOFtS2YOVgCkT9ZSNC9E9TmifmkgfW9N3Du0
m92IzBxqmYxpWzPAr034hGYzxxhnMyYP/z8o9xHkp+RO3gM5EO7f0sDzbdVAY06V
tqYF+WflpfZi8lUNngyW948Vqo/DNVImzJpTkGNnS3rA/a/ZsRVbmFUpgZLNrYal
yqRaNOO1XG5LGTFQFPoJ6o5iVA7+opwhiWQBlnQQr2K2KZpLoR8WDeLtnR0/Uf9c
+IgAHURKn0Tk6m1vYcoZkJgjkW2rurSeZo3Vj6owhF8HMppVgRTwk3SxQ95O8hKo
UsD4tjs=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:57 2026 by rpki-client