This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/807F931E2B4011F092798182C4F9AE02.roa
File:                     807F931E2B4011F092798182C4F9AE02.roa (raw, json)
Hash identifier:          vPyoXNrItwkoKdtP3WCOd93iHFSNskrPl49foh832MU=
Subject key identifier:   FE:E4:9E:36:91:F7:6B:95:90:A7:A8:5B:5F:DB:50:C8:55:0F:00:6D
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3776
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/807F931E2B4011F092798182C4F9AE02.roa
Signing time:             Fri 16 Jan 2026 16:13:17 +0000
ROA not before:           Fri 16 Jan 2026 16:13:17 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139949
IP address blocks:        103.147.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14198 (0x3776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 16 16:13:17 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=696a639c-aa69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:d2:dd:44:ae:e5:25:45:d2:4f:ff:11:e0:
                    dc:93:93:4c:92:b8:df:74:c0:21:60:51:64:42:3f:
                    10:ec:f1:f8:a8:2f:f0:0c:1b:6b:f4:cd:00:08:90:
                    04:ba:8c:30:b3:19:e0:c8:54:2e:41:5e:85:1d:c2:
                    8d:96:59:c0:93:de:fc:0c:e2:a4:05:b3:a0:9c:d5:
                    8b:5d:5b:ba:ff:69:18:55:98:56:ae:38:01:0b:39:
                    23:a4:1f:c2:37:64:07:58:65:de:dd:2b:49:d9:6f:
                    58:4c:3b:07:0a:f0:0e:6b:95:2d:d0:0c:e8:90:8d:
                    eb:58:9f:60:b4:11:02:84:b3:15:98:ca:b5:7c:13:
                    ee:51:6b:c3:5c:15:bc:99:ca:66:4a:c5:d2:84:5f:
                    0b:5f:8e:e8:ff:4b:d9:91:cd:98:b5:11:15:b9:b3:
                    b6:89:c0:f7:5d:53:58:9b:90:e9:19:66:c0:20:cc:
                    35:bb:a7:a5:f3:3f:28:45:4f:94:8c:d4:2b:ee:04:
                    fa:b2:73:fe:b8:c4:8f:06:4d:c4:b4:c4:04:1e:18:
                    0d:12:7d:c3:f5:78:7e:a9:7a:58:b5:b0:73:7c:9c:
                    4c:c8:a4:ec:fd:43:76:fa:5e:cc:b1:29:32:5f:78:
                    1a:34:78:5b:2c:6e:49:03:81:c3:1c:dc:33:bf:44:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E4:9E:36:91:F7:6B:95:90:A7:A8:5B:5F:DB:50:C8:55:0F:00:6D
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/807F931E2B4011F092798182C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:31:bb:3d:02:7d:b0:52:8b:9c:2b:03:b3:2d:21:fc:ee:66:
         cb:e5:60:f3:26:fc:67:46:6c:93:3a:58:fb:4c:d0:99:0e:4d:
         d4:1f:be:84:72:ee:9d:ee:54:3c:51:08:15:62:f0:0c:42:78:
         24:c4:9b:4d:46:66:33:20:82:6a:a4:92:71:d8:58:ae:c7:8f:
         6e:03:4c:93:42:2b:19:b4:73:fb:26:08:87:0a:bc:3a:ec:81:
         47:72:5d:0d:9e:f3:5b:2d:49:78:01:58:f5:5b:1b:e1:33:71:
         40:0a:ae:a5:51:10:28:17:e5:01:a4:9c:fd:10:e2:17:c5:86:
         f4:4a:f4:35:05:cd:d8:72:6e:68:23:a6:de:67:d2:25:ad:14:
         6c:8d:8d:bf:a8:41:31:19:7c:4e:67:9f:ab:ec:fd:bb:2e:3b:
         44:8e:8d:2e:e8:d6:0a:79:85:6c:8f:38:30:f4:19:b1:93:6e:
         62:aa:68:f3:88:b8:db:5d:db:91:03:05:88:95:60:c3:46:aa:
         74:72:67:67:f7:98:2e:10:0f:81:9c:0f:7b:62:17:9d:e7:dc:
         ba:05:62:ca:9a:ce:4a:63:ff:a5:0f:7b:ee:cf:b8:0a:ad:06:
         2f:71:14:e4:e5:62:22:53:3d:81:03:74:d7:21:3b:7b:21:52:
         76:af:8e:14
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICN3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzE3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZhNjM5Yy1hYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzYPS3USu5SVF0k//EeDck5NMkrjfdMAhYFFkQj8Q7PH4qC/wDBtr9M0ACJAE
uowwsxngyFQuQV6FHcKNllnAk978DOKkBbOgnNWLXVu6/2kYVZhWrjgBCzkjpB/C
N2QHWGXe3StJ2W9YTDsHCvAOa5Ut0AzokI3rWJ9gtBEChLMVmMq1fBPuUWvDXBW8
mcpmSsXShF8LX47o/0vZkc2YtREVubO2icD3XVNYm5DpGWbAIMw1u6el8z8oRU+U
jNQr7gT6snP+uMSPBk3EtMQEHhgNEn3D9Xh+qXpYtbBzfJxMyKTs/UN2+l7MsSky
X3gaNHhbLG5JA4HDHNwzv0QdqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFP7knjaR
92uVkKeoW1/bUMhVDwBtMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvODA3RjkzMUUy
QjQwMTFGMDkyNzk4MTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnkzQwDQYJKoZIhvcNAQELBQADggEBAEcxuz0CfbBSi5wr
A7MtIfzuZsvlYPMm/GdGbJM6WPtM0JkOTdQfvoRy7p3uVDxRCBVi8AxCeCTEm01G
ZjMggmqkknHYWK7Hj24DTJNCKxm0c/smCIcKvDrsgUdyXQ2e81stSXgBWPVbG+Ez
cUAKrqVRECgX5QGknP0Q4hfFhvRK9DUFzdhybmgjpt5n0iWtFGyNjb+oQTEZfE5n
n6vs/bsuO0SOjS7o1gp5hWyPODD0GbGTbmKqaPOIuNtd25EDBYiVYMNGqnRyZ2f3
mC4QD4GcD3tiF53n3LoFYsqazkpj/6UPe+7PuAqtBi9xFOTlYiJTPYEDdNchO3sh
UnavjhQ=
-----END CERTIFICATE-----
Generated at Mon Jan 26 16:27:08 2026 by rpki-client