This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8BEC7D66E54911F091014A6A756F56BC.roa
File:                     8BEC7D66E54911F091014A6A756F56BC.roa (raw, json)
Hash identifier:          w60zjM5Rho09NvawEfZQYqYpztssq7KJEuwPjRdxeWo=
Subject key identifier:   CA:D5:C0:AB:3D:CC:CA:EA:66:8B:85:94:F5:DF:C6:51:DA:AE:5A:EA
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0CD8
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8BEC7D66E54911F091014A6A756F56BC.roa
Signing time:             Tue 30 Dec 2025 06:34:09 +0000
ROA not before:           Tue 30 Dec 2025 06:34:09 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     2497
IP address blocks:        103.26.166.0/24 maxlen: 24
                          103.26.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3288 (0xcd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Dec 30 06:34:09 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69537261-a692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:23:79:c9:40:64:a8:92:6f:d2:c2:97:88:fd:
                    b2:2d:e4:2d:73:30:96:52:40:eb:59:ef:b6:f5:c3:
                    1a:41:91:b2:35:c2:70:13:f7:a6:2b:e4:8d:b7:93:
                    d7:79:1a:49:68:9e:7f:af:06:67:b0:41:fa:78:6e:
                    09:a4:1b:19:4e:93:53:36:c5:61:25:4d:05:0c:55:
                    bd:12:39:64:57:9e:ab:1c:07:94:f9:2c:82:56:69:
                    0a:00:40:86:04:c1:87:6a:c0:4b:8f:4a:aa:02:08:
                    aa:9e:be:78:2e:82:e9:6a:98:fc:e7:aa:60:aa:2f:
                    e3:75:9a:8f:a1:78:d5:23:c8:0d:a6:70:a6:6e:2f:
                    81:63:2e:ee:60:38:79:dc:93:93:dc:02:08:04:82:
                    36:99:61:4f:d8:f8:77:ac:b7:db:4f:13:42:58:ce:
                    79:04:8d:8f:75:d0:ef:5d:e7:5f:e4:97:5a:07:32:
                    ea:2f:76:ba:b6:9a:1a:ea:51:bc:a3:32:87:be:ed:
                    6c:a2:11:79:15:d7:e8:65:49:f1:c1:9c:9e:a2:2a:
                    d4:2c:0d:a5:e3:f9:2a:97:ed:fb:30:29:89:f3:9d:
                    27:a7:e1:93:69:8f:a9:f6:c4:75:6e:49:59:65:38:
                    aa:3d:ca:5e:41:a8:64:a3:a9:5a:f6:70:e5:c1:ce:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D5:C0:AB:3D:CC:CA:EA:66:8B:85:94:F5:DF:C6:51:DA:AE:5A:EA
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8BEC7D66E54911F091014A6A756F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:25:a2:b2:41:f8:8a:20:9e:22:35:8a:ea:80:67:99:a9:64:
         27:a2:07:b5:bc:3d:36:d2:3e:70:06:03:55:0e:6e:3d:db:4f:
         8e:3e:1c:6f:30:c0:cc:38:92:32:2f:9c:13:62:20:2f:7f:7e:
         3d:8f:21:ea:b1:d4:3e:86:da:12:0e:22:78:03:4c:f8:9b:24:
         14:5d:42:90:f0:22:59:7d:d7:b5:5e:31:31:63:fd:b1:f2:4c:
         71:10:f2:e1:43:67:2c:b6:b8:a0:8e:25:ae:6f:d8:37:8f:ff:
         7e:81:b6:91:ac:27:cb:67:be:62:4c:de:54:f1:04:70:d7:03:
         2a:92:5a:78:0e:34:5e:4d:ce:a9:52:18:ee:49:2a:bc:db:09:
         02:bb:21:e0:29:70:3c:65:1a:27:39:6e:9f:c0:86:ad:49:6f:
         34:57:4b:6a:08:10:78:84:70:45:72:cb:ca:22:f3:d3:85:23:
         d6:f9:a9:2a:a6:9d:f9:eb:04:b4:35:ec:b6:bd:1f:09:e5:a9:
         0f:28:93:ba:57:84:09:d8:f5:37:cc:ba:82:10:18:9e:54:5d:
         e2:f6:b1:22:ef:26:3d:22:95:67:dd:58:ff:48:30:d9:6e:18:
         4c:90:8b:9f:a6:f3:47:7b:fb:63:42:0d:25:39:03:34:e7:43:
         29:b5:d6:4a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG
NjlDQkE4NDYwHhcNMjUxMjMwMDYzNDA5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDDA02OTUzNzI2MS1hNjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3CN5yUBkqJJv0sKXiP2yLeQtczCWUkDrWe+29cMaQZGyNcJwE/emK+SNt5PX
eRpJaJ5/rwZnsEH6eG4JpBsZTpNTNsVhJU0FDFW9EjlkV56rHAeU+SyCVmkKAECG
BMGHasBLj0qqAgiqnr54LoLpapj856pgqi/jdZqPoXjVI8gNpnCmbi+BYy7uYDh5
3JOT3AIIBII2mWFP2Ph3rLfbTxNCWM55BI2PddDvXedf5JdaBzLqL3a6tpoa6lG8
ozKHvu1sohF5FdfoZUnxwZyeoirULA2l4/kql+37MCmJ850np+GTaY+p9sR1bklZ
ZTiqPcpeQahko6la9nDlwc7AAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMrVwKs9
zMrqZouFlPXfxlHarlrqMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE
OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx
RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvOEJFQzdENjZF
NTQ5MTFGMDkxMDE0QTZBNzU2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnGqYwDQYJKoZIhvcNAQELBQADggEBAAklorJB+IogniI1
iuqAZ5mpZCeiB7W8PTbSPnAGA1UObj3bT44+HG8wwMw4kjIvnBNiIC9/fj2PIeqx
1D6G2hIOIngDTPibJBRdQpDwIll917VeMTFj/bHyTHEQ8uFDZyy2uKCOJa5v2DeP
/36BtpGsJ8tnvmJM3lTxBHDXAyqSWngONF5NzqlSGO5JKrzbCQK7IeApcDxlGic5
bp/Ahq1JbzRXS2oIEHiEcEVyy8oi89OFI9b5qSqmnfnrBLQ17La9HwnlqQ8ok7pX
hAnY9TfMuoIQGJ5UXeL2sSLvJj0ilWfdWP9IMNluGEyQi5+m80d7+2NCDSU5AzTn
Qym11ko=
-----END CERTIFICATE-----
Generated at Wed Jan 21 08:17:22 2026 by rpki-client