This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/F86B8216BFED11EABE972E5AC4F9AE02.roa
File:                     F86B8216BFED11EABE972E5AC4F9AE02.roa (raw, json)
Hash identifier:          q9eGiiMMyPmfGmlzRMxllclvMU+KgTG+JmpKggoaZsY=
Subject key identifier:   21:49:FF:C2:DF:65:F1:06:74:85:14:A2:06:D3:A4:55:75:1D:B4:6B
Certificate issuer:       /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24
Certificate serial:       0910
Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/F86B8216BFED11EABE972E5AC4F9AE02.roa
Signing time:             Mon 02 Feb 2026 20:17:20 +0000
ROA not before:           Mon 02 Feb 2026 20:17:20 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     132827
IP address blocks:        103.28.168.0/24 maxlen: 24
                          103.28.169.0/24 maxlen: 24
                          103.28.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl
                          rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Feb 2026 20:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2320 (0x910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24
        Validity
            Not Before: Feb  2 20:17:20 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69810650-f030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:88:44:dc:44:f4:a7:30:7a:8e:36:e9:f4:43:
                    30:3d:66:89:54:4c:b7:75:5c:94:b1:34:3e:1c:82:
                    9d:30:e6:f0:80:f6:54:29:6e:1e:7c:14:72:6a:da:
                    66:b8:f6:3f:42:68:47:79:77:86:af:f5:5c:e0:28:
                    de:c5:12:03:d1:c2:6d:2c:09:a2:62:ce:e4:09:7f:
                    c0:b4:cf:75:30:fa:8e:b4:46:59:16:56:b7:ca:3c:
                    2a:6b:e3:ed:ba:89:44:57:05:21:1d:38:2a:14:a0:
                    29:5c:30:11:bc:02:19:2b:89:af:62:91:ac:c8:e5:
                    26:6c:4a:56:1a:2f:50:08:79:ac:40:a3:57:17:23:
                    e5:85:de:a1:25:a9:02:82:94:e9:78:d4:45:8e:01:
                    cb:a2:79:ef:1a:83:ae:2c:87:71:b2:a4:e4:ee:44:
                    2e:65:43:a2:fe:c9:29:d7:18:1f:be:ef:50:16:5e:
                    3a:7c:d8:b1:d7:12:3c:f4:fb:28:22:b0:5b:1b:a6:
                    51:11:c8:75:93:eb:91:1c:79:fb:13:d5:53:57:bd:
                    0d:14:8e:48:e2:88:95:90:be:55:44:b4:b1:26:70:
                    11:42:df:68:7d:38:2e:23:12:5e:22:bf:d7:38:72:
                    f4:bf:0e:12:80:0d:5b:49:1b:60:98:fb:43:e1:2e:
                    92:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:49:FF:C2:DF:65:F1:06:74:85:14:A2:06:D3:A4:55:75:1D:B4:6B
            X509v3 Authority Key Identifier:
                keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/F86B8216BFED11EABE972E5AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.168.0-103.28.170.255

    Signature Algorithm: sha256WithRSAEncryption
         63:5e:71:15:21:57:3e:ab:07:fd:e8:ee:31:d6:35:20:d3:58:
         92:99:28:2a:03:0e:35:eb:09:c1:58:a4:a7:89:4b:0f:5a:4f:
         de:da:fb:60:63:3f:6c:3e:0f:3a:24:df:62:bf:64:b0:17:08:
         b7:da:28:01:b7:3a:ce:03:e3:0f:38:17:97:25:16:de:de:eb:
         2b:2d:6c:af:e0:73:7b:e4:07:1d:f6:fc:93:a5:b3:35:80:51:
         1e:10:a3:a3:ca:0e:33:57:c5:16:ca:b8:24:8a:3f:e1:07:36:
         42:94:8c:7f:c2:b3:1d:7a:76:78:6e:a6:7b:8e:83:39:bd:02:
         ba:1f:40:2f:8d:e5:d7:82:f3:5e:32:dc:6c:3c:ce:6c:47:d2:
         bf:df:30:9a:e2:58:89:5b:c6:90:58:26:72:df:f0:a1:93:46:
         f8:80:ba:78:b8:cb:49:43:1b:5f:ee:9c:d6:62:9a:3f:f8:c6:
         66:d8:5d:ea:e4:5f:24:b5:dd:0d:3c:15:c5:06:9b:29:aa:7d:
         18:a3:17:c1:f2:bd:d7:f3:4c:f1:e7:90:37:ff:bb:46:15:70:
         9a:c7:bc:9f:49:d9:7a:d0:0f:d1:00:dd:c5:39:1a:02:59:fc:
         6a:7b:ea:46:5f:74:06:35:94:67:fd:9c:63:da:64:a0:a0:94:
         ad:bc:a4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 00:20:57 2026 by rpki-client