This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/DBB62584510F11EE91E98858C4F9AE02.roa
File:                     DBB62584510F11EE91E98858C4F9AE02.roa (raw, json)
Hash identifier:          y9V2U2pz4LZi3G7Jp7kLpB7GUSaHYb1Y6LzEsYYM/lM=
Subject key identifier:   1B:B1:BD:40:25:54:41:5F:22:4B:DE:17:9C:4B:68:35:A4:5E:68:2F
Certificate issuer:       /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial:       1D84
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/DBB62584510F11EE91E98858C4F9AE02.roa
Signing time:             Fri 30 Jan 2026 16:14:23 +0000
ROA not before:           Fri 30 Jan 2026 16:14:23 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     136133
IP address blocks:        103.81.52.0/24 maxlen: 24
                          103.107.226.0/24 maxlen: 24
                          103.107.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
                          rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 15:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7556 (0x1d84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
        Validity
            Not Before: Jan 30 16:14:23 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697cd8df-5084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:61:bf:f4:47:9c:51:fb:c0:d2:92:5c:89:1e:
                    26:c4:39:db:41:ba:fb:24:c9:43:dc:8f:6a:d9:d5:
                    9b:4e:b5:1e:a8:25:0f:ee:94:a5:22:38:56:f9:cc:
                    b6:a6:b2:1c:bf:c7:d3:ba:e6:47:56:14:1c:23:d8:
                    86:0e:7b:d9:d9:21:ff:e3:f9:96:bb:a5:bc:f2:0f:
                    3f:42:61:ed:93:fd:3e:7f:54:fd:95:06:3e:47:2f:
                    1b:d8:62:f2:af:bb:ac:92:d3:08:0c:d4:14:71:5c:
                    8c:e9:ef:16:6a:0f:03:6a:48:09:94:9e:91:9a:66:
                    37:31:f6:fb:1e:cc:79:0c:e3:b3:a7:e7:5c:81:b4:
                    05:b6:0b:18:a2:3e:d5:6b:54:91:2e:70:09:c0:99:
                    1d:db:17:30:a4:8b:60:e2:0c:91:5b:9c:ed:4f:bc:
                    41:21:2e:f4:0b:26:7f:5c:1d:df:2d:9c:2f:ac:55:
                    99:e7:a5:3d:83:ea:e2:ee:ac:88:60:a1:96:3a:82:
                    9b:3e:40:e0:80:6a:14:f1:73:c2:59:61:1d:4c:27:
                    d1:a9:4d:57:59:cd:bc:4a:9f:27:be:5d:54:ae:8a:
                    06:6e:28:28:6b:1b:12:92:91:f4:de:c3:7b:49:0f:
                    34:35:be:e0:f0:52:51:74:dc:71:18:7f:97:a1:65:
                    c6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B1:BD:40:25:54:41:5F:22:4B:DE:17:9C:4B:68:35:A4:5E:68:2F
            X509v3 Authority Key Identifier:
                keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/DBB62584510F11EE91E98858C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.52.0/24
                  103.107.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:ab:df:6a:b8:d5:1e:95:c5:18:12:ef:78:cd:45:a1:66:15:
         da:89:7d:3b:e7:23:d3:d0:a3:8e:53:05:00:87:06:44:42:81:
         1c:ca:ee:e9:af:d9:fd:fb:66:84:08:86:c1:1e:10:e2:29:7b:
         34:9f:b5:35:c2:ae:8f:cb:36:7e:76:5e:f6:8f:62:9b:49:80:
         7a:01:52:80:33:85:e0:2f:cf:0c:26:44:8e:51:44:91:7e:ed:
         48:16:fc:86:3f:ba:c8:4f:a3:22:23:0b:1a:4d:20:5c:c3:1e:
         0c:28:4b:22:8e:3e:60:e2:a7:1c:2b:5b:2a:71:4d:f9:aa:ac:
         5c:e2:58:5d:c1:a7:48:a5:c0:a0:94:dc:ae:60:8d:13:99:47:
         ce:d4:1c:44:bb:4e:a5:29:34:9f:5d:70:c5:ff:ce:35:87:91:
         fc:4e:af:d7:bb:19:48:0c:fe:48:4a:12:67:fd:0f:65:6f:7d:
         b1:20:10:65:14:9c:44:2e:ca:04:69:35:57:8f:7c:01:35:12:
         53:9e:8e:3c:99:e0:23:cb:45:e0:ae:3f:62:66:d4:ef:7c:35:
         91:b6:bb:de:b6:c3:06:61:f9:8e:0d:a6:e2:88:81:7b:75:39:
         41:2c:e9:9c:3f:d1:23:80:8c:10:af:16:a2:a3:a6:5f:a6:6d:
         20:16:c4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:32 2026 by rpki-client