This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/5147C064FFE611F0819299B6756F56BC.roa
File:                     5147C064FFE611F0819299B6756F56BC.roa (raw, json)
Hash identifier:          IV0Lx0imuM6oyZUs65/AX06IscXXELO+gXHNcXyISuI=
Subject key identifier:   41:C6:29:8B:A0:B0:67:20:7B:11:7D:A4:40:D6:AF:31:F8:6D:86:B0
Certificate issuer:       /CN=A912380D/serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F
Certificate serial:       05
Authority key identifier: C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/5147C064FFE611F0819299B6756F56BC.roa
Signing time:             Mon 02 Feb 2026 03:21:52 +0000
ROA not before:           Mon 02 Feb 2026 03:21:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     4686
IP address blocks:        103.19.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl
                          rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 08:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912380D, serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F
        Validity
            Not Before: Feb  2 03:21:52 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69801850-9426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:cc:10:35:c0:13:dc:89:fe:18:e6:87:c1:
                    d4:5d:f9:db:ee:11:08:09:ed:c7:cb:f7:fa:e7:80:
                    52:92:9a:8b:f7:49:89:f6:2a:70:a9:19:d3:4b:21:
                    2a:3c:f3:76:26:86:38:55:bf:f2:d6:b4:0b:b9:8a:
                    d4:c1:fd:39:a9:a2:f8:2b:ad:6e:47:30:52:b6:d9:
                    68:dc:10:fd:df:b8:e4:10:da:41:7f:96:97:7d:12:
                    1a:12:98:56:7a:cd:5c:26:4a:07:0a:af:f0:70:86:
                    8c:83:f1:ab:84:27:6b:cc:2e:c9:7b:28:2d:73:72:
                    cf:08:53:8a:d1:42:a9:11:de:23:6e:6e:2c:a5:b7:
                    34:73:44:85:9f:ba:ed:07:cb:17:5c:fa:c1:15:a8:
                    e1:c5:cc:52:ba:6b:33:da:f8:4c:2d:b2:60:13:8e:
                    bf:e4:b7:20:12:c9:c9:0b:98:1a:52:f5:98:cb:d4:
                    1f:8d:e0:93:a3:fe:35:bd:4b:7e:e1:6f:30:73:df:
                    59:f3:07:2f:63:7b:49:b6:2e:d1:01:30:5a:84:a0:
                    5b:7c:89:81:0f:af:d4:98:91:6a:41:fa:2b:cc:39:
                    29:fa:81:06:45:6c:00:17:d4:27:ec:ae:ff:a0:d0:
                    f0:d5:ec:ea:bc:51:fc:2a:fe:cb:b0:de:9a:d2:a1:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C6:29:8B:A0:B0:67:20:7B:11:7D:A4:40:D6:AF:31:F8:6D:86:B0
            X509v3 Authority Key Identifier:
                keyid:C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/5147C064FFE611F0819299B6756F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:3b:fd:e1:ce:96:23:3f:dc:b0:79:9b:36:32:fb:b9:17:fd:
         e6:21:c3:46:8b:3b:9f:02:99:9d:a4:cc:0c:2f:bc:3d:db:ff:
         25:a5:8b:9b:d4:6c:a4:68:ce:b8:cf:cc:e6:02:7c:bc:0f:80:
         03:f4:c1:1f:14:86:a8:1f:3b:aa:cb:69:47:d2:22:7e:3e:ac:
         69:b6:7d:fc:61:f4:57:62:6f:2d:59:f8:6c:44:4d:dc:27:39:
         d2:82:50:08:68:d8:bc:b6:64:f5:60:00:af:8c:23:5b:5d:e1:
         7f:97:e2:45:c8:28:29:ca:37:44:25:09:bf:f7:e2:ab:b3:8f:
         5b:82:f6:0d:7a:1a:2a:9d:61:1c:f2:b4:84:18:d1:8f:b8:d9:
         e5:74:2d:02:9b:b3:19:ea:7a:f3:3f:4e:61:9a:dd:c1:2e:ae:
         4f:92:13:df:bb:d8:32:99:20:39:1d:c0:aa:99:f3:d6:01:aa:
         b1:62:c8:b4:cd:c4:06:7c:fe:75:3f:2b:3e:b4:37:d0:af:91:
         98:5c:94:d3:d6:bb:b3:c1:7b:54:e3:fe:0e:a9:c9:a0:0e:de:
         98:43:f8:94:80:68:38:ec:e1:72:40:e8:90:19:e3:ed:6e:07:
         6d:ae:34:9a:76:f9:4e:8b:8b:9d:c5:3b:7b:c8:b6:33:4b:d2:
         01:a3:bf:e0
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEy
MzgwRDExMC8GA1UEBRMoQzNEMEVFNjg5NENFOEY1NkNGNkIwNzBBQjEzRjk4MTY5
REZENDExRjAeFw0yNjAyMDIwMzIxNTJaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5ODAxODUwLTk0MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6f8wQNcAT3In+GOaHwdRd+dvuEQgJ7cfL9/rngFKSmov3SYn2KnCpGdNLISo8
83YmhjhVv/LWtAu5itTB/TmpovgrrW5HMFK22WjcEP3fuOQQ2kF/lpd9EhoSmFZ6
zVwmSgcKr/BwhoyD8auEJ2vMLsl7KC1zcs8IU4rRQqkR3iNubiyltzRzRIWfuu0H
yxdc+sEVqOHFzFK6azPa+EwtsmATjr/ktyASyckLmBpS9ZjL1B+N4JOj/jW9S37h
bzBz31nzBy9je0m2LtEBMFqEoFt8iYEPr9SYkWpB+ivMOSn6gQZFbAAX1Cfsrv+g
0PDV7Oq8Ufwq/suw3prSoRgnAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUQcYpi6Cw
ZyB7EX2kQNavMfhthrAwHwYDVR0jBBgwFoAUw9DuaJTOj1bPawcKsT+YFp39QR8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzODBELzFCMDZDNDRDRkRB
MTExRjA5OEQ3NDZBQzVGNkY1NkJDL3c5RHVhSlRPajFiUGF3Y0tzVC1ZRnAzOVFS
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdzlEdWFKVE9qMWJQYXdjS3NULVlGcDM5UVI4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzgwRC8xQjA2QzQ0Q0ZEQTExMUYwOThENzQ2QUM1RjZGNTZCQy81MTQ3QzA2NEZG
RTYxMUYwODE5Mjk5QjY3NTZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmcTdDANBgkqhkiG9w0BAQsFAAOCAQEAQDv94c6WIz/csHmb
NjL7uRf95iHDRos7nwKZnaTMDC+8Pdv/JaWLm9RspGjOuM/M5gJ8vA+AA/TBHxSG
qB87qstpR9Iifj6sabZ9/GH0V2JvLVn4bERN3Cc50oJQCGjYvLZk9WAAr4wjW13h
f5fiRcgoKco3RCUJv/fiq7OPW4L2DXoaKp1hHPK0hBjRj7jZ5XQtApuzGep68z9O
YZrdwS6uT5IT37vYMpkgOR3Aqpnz1gGqsWLItM3EBnz+dT8rPrQ30K+RmFyU09a7
s8F7VOP+DqnJoA7emEP4lIBoOOzhckDokBnj7W4Hba40mnb5TouLncU7e8i2M0vS
AaO/4A==
-----END CERTIFICATE-----
Generated at Tue Feb 10 21:17:33 2026 by rpki-client