This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE58B136F52611F088DCF32D5C6F56BC.roa
File:                     DE58B136F52611F088DCF32D5C6F56BC.roa (raw, json)
Hash identifier:          VqTsqO2pnJBNYzQH+hnmURFeli2/kqvnbcHbhctBkq4=
Subject key identifier:   8B:32:7E:E8:96:82:EA:A9:F3:FA:F5:04:3D:0C:45:46:6B:41:A6:63
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       CE10
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE58B136F52611F088DCF32D5C6F56BC.roa
Signing time:             Mon 19 Jan 2026 11:06:14 +0000
ROA not before:           Mon 19 Jan 2026 11:06:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150605
IP address blocks:        103.66.236.0/24 maxlen: 24
                          103.66.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 11:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52752 (0xce10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jan 19 11:06:14 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=696e1025-3f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:97:b7:ec:b2:10:b6:41:ec:39:b8:22:82:
                    a6:e7:32:b3:fb:6a:f8:12:93:95:24:3b:73:68:d4:
                    ad:17:aa:be:a2:21:87:68:eb:d7:b7:09:81:3d:79:
                    3c:1b:ea:c5:b6:8e:79:21:2d:5a:1d:51:ca:c7:09:
                    3a:84:e5:1e:fe:0b:3c:06:43:e6:f9:63:bd:00:ec:
                    a7:98:35:6a:af:e9:0b:73:9b:af:f6:8c:20:45:95:
                    98:22:34:c1:90:85:9c:15:38:e2:5c:31:d0:a2:06:
                    ec:c0:65:eb:55:70:4b:89:de:6c:fa:12:a5:87:5d:
                    b9:ab:89:e9:54:56:5a:64:96:b2:6f:6f:31:9d:7d:
                    88:f5:fe:9d:04:c8:25:10:ff:a7:65:e4:58:d8:bd:
                    ee:92:d3:40:a4:b1:c6:43:fa:e1:5e:67:b8:11:70:
                    55:93:11:8c:a0:7d:20:f1:65:ce:01:e2:db:35:ae:
                    db:23:d4:3d:2f:c1:f5:98:a8:26:e9:c8:74:8a:11:
                    be:09:4e:b7:a3:87:ea:a9:e2:72:e0:6d:b9:c3:6c:
                    b4:e3:1a:6e:2e:17:7c:73:bb:99:01:10:42:4f:da:
                    66:01:f8:37:25:3d:82:a3:49:e5:db:d3:d2:cb:7f:
                    a3:d2:70:0a:3d:a6:87:24:32:7d:b8:67:72:f1:a0:
                    dd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:32:7E:E8:96:82:EA:A9:F3:FA:F5:04:3D:0C:45:46:6B:41:A6:63
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE58B136F52611F088DCF32D5C6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:a6:71:3c:07:e4:e4:a9:e5:a6:1b:5c:28:0d:a1:aa:14:a4:
         94:11:b4:23:aa:40:92:e3:8e:1e:f0:56:b0:d8:48:34:e1:f5:
         55:56:c5:68:1d:09:31:22:e7:6e:1c:99:bb:72:c2:d8:cb:6b:
         3c:ae:c6:ce:22:04:c9:ea:01:56:df:43:16:bb:e4:78:2b:e3:
         15:56:d9:29:46:26:66:32:32:5f:f6:98:b7:f1:ff:80:af:b6:
         0c:9f:6f:e4:b0:a3:3d:41:df:84:ad:b5:b0:f4:a0:10:4c:0a:
         77:1b:f8:45:94:27:92:47:80:45:bb:b3:a5:b8:47:cc:03:8d:
         93:77:ab:e2:0a:38:bb:11:f4:0a:fa:0d:38:2a:20:c5:87:5f:
         ce:1f:49:22:a6:88:66:51:47:8a:c0:e0:22:bc:7a:72:87:16:
         87:21:5e:4b:94:0f:18:0a:9c:65:3c:59:78:0a:42:f6:5a:69:
         b1:de:97:cd:c6:e2:c6:1b:d9:8d:ae:99:9d:3d:5a:48:c7:80:
         86:4d:7e:0c:da:d9:37:69:8c:c8:da:0b:28:23:af:f4:ff:6b:
         c6:f1:f9:0e:f8:6e:cd:fa:09:95:a7:b5:69:13:ba:eb:fc:01:
         c9:8a:51:58:b0:b5:1d:bf:fc:27:a2:46:c2:9b:fe:ca:a7:24:
         cd:76:10:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 21:43:02 2026 by rpki-client