This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/AA135886D75411EFA0D6BE34C4F9AE02.roa
File:                     AA135886D75411EFA0D6BE34C4F9AE02.roa (raw, json)
Hash identifier:          xOb31eTj6qQweD06rQOZ68BLh7/cOt9toZkwNGiZiWE=
Subject key identifier:   84:23:4E:0A:59:30:80:9A:1A:50:D6:E7:00:D0:AA:3A:57:68:66:BF
Certificate issuer:       /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Certificate serial:       0F16
Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/AA135886D75411EFA0D6BE34C4F9AE02.roa
Signing time:             Tue 20 Jan 2026 18:14:47 +0000
ROA not before:           Tue 20 Jan 2026 18:14:47 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     6079
IP address blocks:        103.105.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
                          rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 18:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3862 (0xf16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D29F, serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
        Validity
            Not Before: Jan 20 18:14:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696fc617-7386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:ac:47:a3:93:10:9c:95:a0:2d:42:ee:47:
                    e0:31:b6:fd:b8:f6:89:da:f6:3e:d4:49:52:91:97:
                    c2:9a:d1:c9:a8:8a:29:3b:ec:da:c6:f8:7a:f7:93:
                    68:ca:1a:11:4a:6e:52:d6:e5:cb:b0:8d:b6:3c:68:
                    ca:6d:0f:1b:71:b4:20:7b:54:23:73:d0:cf:d8:4e:
                    09:e1:ad:58:b2:82:47:7f:23:b0:65:b2:ba:ea:2c:
                    0c:3e:1a:62:a6:6e:69:5e:61:36:8a:6c:6a:23:aa:
                    ec:0e:bc:54:b6:57:69:2a:a4:72:18:ee:2f:2c:ae:
                    ed:7a:de:37:e2:0c:62:66:c3:1d:a7:ba:0a:04:aa:
                    c0:5a:63:a2:cb:b2:49:97:5b:b8:dd:e0:7f:d1:f8:
                    ca:66:fb:0e:12:9a:8f:44:bc:5e:32:65:b3:c8:07:
                    43:68:e3:8e:fa:9d:df:25:1d:72:13:b5:bb:4c:93:
                    41:80:10:7e:1e:58:fa:46:0b:4c:61:73:ec:4e:d5:
                    62:2c:68:74:42:ae:df:e1:62:79:6c:6c:d2:69:bf:
                    74:86:f3:4a:4c:39:99:ff:8a:69:31:f7:c3:a9:4c:
                    fe:85:36:ad:3b:24:89:b9:1b:27:38:ef:d5:7b:09:
                    b2:a4:28:18:b2:2e:e1:f4:f1:c9:55:f7:f5:3a:d1:
                    f5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:23:4E:0A:59:30:80:9A:1A:50:D6:E7:00:D0:AA:3A:57:68:66:BF
            X509v3 Authority Key Identifier:
                keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/AA135886D75411EFA0D6BE34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:ca:af:30:49:fc:ac:26:06:cf:50:5f:50:26:8a:ff:04:64:
         c1:0a:3e:2a:64:bc:bb:5f:19:ca:44:3b:f5:27:83:08:74:d0:
         8c:78:ad:7b:89:7f:79:85:cf:9d:27:89:bf:76:7d:18:fc:a1:
         4c:20:81:65:f4:f0:df:f9:0c:40:f8:ba:f3:15:6a:e7:4d:3d:
         74:9a:48:a8:12:64:e0:3e:56:9e:6a:8e:03:a6:11:49:eb:24:
         d5:7b:52:b2:cf:3e:6e:87:f0:8f:e3:58:79:12:ef:13:69:8f:
         c0:54:63:ae:ca:6f:a1:4a:4f:23:9d:67:78:e5:03:2a:30:2f:
         32:57:a8:81:0b:df:2e:c4:95:df:5e:83:89:71:36:4b:ad:d6:
         71:b9:6d:96:cc:c4:69:37:6c:e8:ff:05:8e:6b:3d:be:45:65:
         b6:9c:ec:b7:b5:af:47:f2:9a:00:82:65:84:be:26:44:08:90:
         65:17:7e:76:96:1e:69:aa:6c:5e:4e:7b:b3:ba:fa:a9:5a:98:
         fd:be:29:2c:bf:44:53:f4:d9:a5:cf:0b:93:18:0c:46:7e:dd:
         d1:99:01:d1:3b:6a:d2:e5:72:d8:29:2d:71:5b:a1:fd:c2:cb:
         b2:0e:94:ea:1e:84:f5:69:81:04:2a:4e:2d:a2:c2:5e:1e:20:
         f8:76:f7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 04:08:22 2026 by rpki-client