This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/3B501252140811EDBF3D2F27C4F9AE02.roa
File:                     3B501252140811EDBF3D2F27C4F9AE02.roa (raw, json)
Hash identifier:          Uf5aHN+Mz4c+Y7CHmK4+s9547GNti2K0CrQJYe8fums=
Subject key identifier:   F5:5F:F6:14:69:8C:CB:60:94:B3:55:33:53:48:99:6F:C5:B1:FA:B2
Certificate issuer:       /CN=A91644A4/serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9
Certificate serial:       0321
Authority key identifier: 8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/3B501252140811EDBF3D2F27C4F9AE02.roa
Signing time:             Tue 03 Feb 2026 01:20:44 +0000
ROA not before:           Tue 03 Feb 2026 01:20:44 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     17158
IP address blocks:        103.109.128.0/24 maxlen: 24
                          103.109.129.0/24 maxlen: 24
                          103.109.130.0/24 maxlen: 24
                          103.109.131.0/24 maxlen: 24
                          203.22.186.0/24 maxlen: 24
                          203.23.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl
                          rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 00:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 801 (0x321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91644A4, serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9
        Validity
            Not Before: Feb  3 01:20:44 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69814d6c-6ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:da:04:0a:1b:a7:6a:d8:cb:cd:56:d3:22:
                    a6:0c:5f:e4:61:ed:3b:1c:9c:ac:53:2f:05:b9:04:
                    2d:11:83:63:a0:08:98:6b:d6:33:52:e6:16:3d:3f:
                    d1:c4:fb:ff:6e:2a:9c:37:1c:ae:b0:05:28:91:e7:
                    46:63:27:ad:52:50:63:07:ed:09:01:35:b7:80:68:
                    18:0f:e5:58:a6:01:c2:c1:1b:f8:07:ca:69:69:8e:
                    14:68:49:d9:16:10:e6:14:94:f8:25:a2:36:e3:04:
                    db:49:66:18:84:68:1e:88:f7:1a:29:80:5a:a8:b3:
                    ed:ae:56:8c:2a:fd:10:18:db:c2:45:d3:27:dd:04:
                    f9:16:04:f9:2a:6b:ec:0d:46:de:d3:3a:6f:12:37:
                    9e:a1:82:6d:d2:3b:a0:f9:b7:fa:25:c8:65:ed:d9:
                    8f:91:9b:05:42:99:8c:2b:6c:ea:b7:fa:08:88:4a:
                    04:13:cd:19:14:81:ea:f2:c4:31:59:0d:6e:13:37:
                    be:ab:8c:e6:1d:f4:da:13:5a:e1:33:ea:a3:64:ea:
                    ed:26:84:a9:08:eb:99:2e:aa:bd:ca:e1:11:3d:f4:
                    85:7f:53:67:e5:ce:2b:4a:4c:44:b1:84:cd:69:4c:
                    6a:92:82:46:a1:e2:50:f8:3c:76:32:1a:f7:65:61:
                    31:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5F:F6:14:69:8C:CB:60:94:B3:55:33:53:48:99:6F:C5:B1:FA:B2
            X509v3 Authority Key Identifier:
                keyid:8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/3B501252140811EDBF3D2F27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.128.0/22
                  203.22.186.0/24
                  203.23.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:6c:82:f0:fc:86:23:9f:a5:b0:3d:f4:23:c9:53:5a:29:02:
         53:6d:f4:16:f0:fd:18:ac:c5:ae:e5:74:ee:37:a8:5b:81:4a:
         25:25:86:a0:ff:ef:c2:94:cf:d6:ed:e5:7a:5d:13:74:42:1a:
         32:12:50:3f:8a:44:c7:df:84:17:5f:cd:0a:78:fe:de:dc:02:
         e2:ae:9a:1f:6f:d6:bb:08:91:b1:0a:8d:72:bd:cd:76:a6:5d:
         02:26:a2:32:8e:19:4a:69:88:0d:0e:62:30:43:c6:6b:e6:85:
         46:4a:b2:49:26:2f:ea:1f:2a:1a:e6:ea:28:01:05:85:18:24:
         1a:9f:0c:a6:52:ee:ea:75:84:63:74:45:38:8c:44:2a:e3:7a:
         87:40:8d:ac:04:f9:e4:0a:14:b9:59:7c:bc:07:8d:ee:40:e3:
         3a:d8:6e:27:7e:27:5c:09:c1:32:09:87:5a:fa:e3:ba:0f:89:
         7a:fd:95:b3:3c:4c:cb:a8:39:cc:24:25:91:cb:69:18:58:d3:
         94:83:c9:97:0f:e9:bc:c2:e9:4e:3e:5a:b1:11:1c:25:51:e6:
         ba:79:f3:06:8d:32:73:b4:1b:d2:b9:0c:34:8c:10:f2:b2:a3:
         b9:27:b2:db:2d:f0:c7:7b:1d:8c:1b:4f:1a:d6:b8:58:ea:dc:
         e3:65:82:e2
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NjQ0QTQxMTAvBgNVBAUTKDhGQzY2MUExOTMzMkFFODY0QkM4NzkwMDc0NERBMzM3
RjlBNzAwQTkwHhcNMjYwMjAzMDEyMDQ0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgxNGQ2Yy02ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAovzaBAobp2rYy81W0yKmDF/kYe07HJysUy8FuQQtEYNjoAiYa9YzUuYWPT/R
xPv/biqcNxyusAUokedGYyetUlBjB+0JATW3gGgYD+VYpgHCwRv4B8ppaY4UaEnZ
FhDmFJT4JaI24wTbSWYYhGgeiPcaKYBaqLPtrlaMKv0QGNvCRdMn3QT5FgT5Kmvs
DUbe0zpvEjeeoYJt0jug+bf6Jchl7dmPkZsFQpmMK2zqt/oIiEoEE80ZFIHq8sQx
WQ1uEze+q4zmHfTaE1rhM+qjZOrtJoSpCOuZLqq9yuERPfSFf1Nn5c4rSkxEsYTN
aUxqkoJGoeJQ+Dx2Mhr3ZWExtQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPVf9hRp
jMtglLNVM1NImW/FsfqyMB8GA1UdIwQYMBaAFI/GYaGTMq6GS8h5AHRNozf5pwCp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDRBNC8yRDIzQTRDQzAy
MDcxMUVEODFERjAxNjhDNEY5QUUwMi9qOFpob1pNeXJvWkx5SGtBZEUyak5fbW5B
S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2o4WmhvWk15cm9aTHlIa0FkRTJqTl9tbkFLay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjQ0QTQvMkQyM0E0Q0MwMjA3MTFFRDgxREYwMTY4QzRGOUFFMDIvM0I1MDEyNTIx
NDA4MTFFREJGM0QyRjI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAJnbYADBADLFroDBADLF38wDQYJKoZIhvcNAQELBQADggEB
ACJsgvD8hiOfpbA99CPJU1opAlNt9Bbw/Risxa7ldO43qFuBSiUlhqD/78KUz9bt
5XpdE3RCGjISUD+KRMffhBdfzQp4/t7cAuKumh9v1rsIkbEKjXK9zXamXQImojKO
GUppiA0OYjBDxmvmhUZKskkmL+ofKhrm6igBBYUYJBqfDKZS7up1hGN0RTiMRCrj
eodAjawE+eQKFLlZfLwHje5A4zrYbid+J1wJwTIJh1r647oPiXr9lbM8TMuoOcwk
JZHLaRhY05SDyZcP6bzC6U4+WrERHCVR5rp58waNMnO0G9K5DDSMEPKyo7knstst
8Md7HYwbTxrWuFjq3ONlguI=
-----END CERTIFICATE-----
Generated at Tue Feb 10 06:27:58 2026 by rpki-client