This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/116B4B06282011E8BBA2F625C4F9AE02.roa
File:                     116B4B06282011E8BBA2F625C4F9AE02.roa (raw, json)
Hash identifier:          yneq3VCU0xUuuWqz2yd6YieZf1M20T8Wk5aQncEi7bY=
Subject key identifier:   A9:CD:75:AB:AF:44:8C:DF:54:92:F1:63:E2:00:54:58:BF:1E:28:6A
Certificate issuer:       /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
Certificate serial:       1639
Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/116B4B06282011E8BBA2F625C4F9AE02.roa
Signing time:             Tue 06 Jan 2026 17:13:59 +0000
ROA not before:           Tue 06 Jan 2026 17:13:59 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136219
IP address blocks:        103.83.228.0/24 maxlen: 24
                          103.83.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl
                          rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:28:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5689 (0x1639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8EB6, serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
        Validity
            Not Before: Jan  6 17:13:59 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=695d42d7-22e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:4b:57:cb:62:32:56:30:ac:ee:9d:ab:4b:
                    2e:f2:e8:90:ba:77:63:fd:6e:d8:ce:65:b1:c7:34:
                    00:4a:f0:fc:1f:4f:d9:1e:ae:b2:28:b1:3f:87:4c:
                    32:0b:c5:de:e0:55:22:eb:6c:4d:51:22:08:c7:f5:
                    ec:44:c2:bf:e2:0d:c1:fa:82:81:ae:5f:4f:fa:81:
                    fe:7a:eb:53:1d:53:c9:b0:10:17:84:c2:77:97:02:
                    ce:8f:32:76:d1:61:79:da:bb:ed:5b:0a:b6:92:61:
                    7a:bc:e1:24:0c:50:c8:a8:53:2d:21:47:96:c5:a0:
                    9d:dc:94:90:10:47:cf:d4:0b:20:36:20:1d:71:8d:
                    30:2d:89:f5:c0:03:f0:fb:38:0c:a7:94:9a:4b:17:
                    63:fb:91:4b:44:de:9c:15:36:74:d9:1d:d7:03:c8:
                    af:fa:44:88:30:8f:77:cd:31:d7:0a:3c:91:f0:2f:
                    d5:91:89:33:a8:10:49:d0:f6:f4:ee:4a:d3:5c:63:
                    0d:71:68:83:a3:3d:eb:4a:6f:3c:e3:71:31:51:e6:
                    4a:93:5a:ac:62:81:75:84:aa:04:bc:78:7a:b1:76:
                    5f:74:f9:82:0e:b3:e1:a6:95:2f:12:3a:85:c4:39:
                    7a:44:88:b7:7b:c0:ea:bb:45:67:11:68:66:fc:7e:
                    23:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CD:75:AB:AF:44:8C:DF:54:92:F1:63:E2:00:54:58:BF:1E:28:6A
            X509v3 Authority Key Identifier:
                keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/116B4B06282011E8BBA2F625C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:83:39:2f:73:8b:d9:5e:27:6f:06:99:c7:cf:06:89:50:a2:
         37:2f:32:bd:a5:dc:25:5c:aa:0e:5b:31:ed:f5:25:5e:6a:1c:
         74:ae:ce:ef:49:21:61:a8:c4:3f:47:7d:95:24:16:2a:01:52:
         c3:36:62:38:aa:c6:f0:a3:27:4d:dd:1b:f4:0e:4b:86:a1:d8:
         14:0e:69:fc:7e:9a:60:d5:c0:1b:91:8b:34:b9:db:28:bb:f7:
         5c:d5:a1:3b:60:cc:14:b1:43:d0:92:91:db:90:a4:32:0b:7e:
         b9:26:18:94:40:dc:af:38:f5:17:c5:3b:81:42:e0:6d:65:4d:
         c5:a9:48:e2:63:1c:f1:fa:6b:23:13:55:58:02:d4:d4:7b:11:
         fc:85:8b:6f:96:88:73:43:2c:db:70:82:f3:31:cb:49:68:bf:
         37:12:2f:c7:c0:bb:0d:43:11:3d:d8:eb:89:17:a9:37:e7:d2:
         50:cf:cd:06:5f:55:56:4d:b8:67:88:5f:72:a6:5a:13:af:a8:
         ff:20:8c:fe:0d:7a:74:dd:f4:cb:fb:de:1d:32:32:06:43:ab:
         c6:ff:81:4c:bf:0d:29:91:ef:28:b1:2b:bc:7c:b8:17:74:f9:
         c2:09:aa:c6:da:9d:93:d7:be:46:41:7b:d2:c7:9e:eb:10:f1:
         f8:4b:42:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:52:37 2026 by rpki-client