This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/F550BA02768A11F081B6114EC4F9AE02.roa
File:                     F550BA02768A11F081B6114EC4F9AE02.roa (raw, json)
Hash identifier:          vjf6s0WckIOnw6RS4RFXugTG7+ioBExQoIxHaxpFjXU=
Subject key identifier:   09:8F:A1:86:AB:D6:52:6D:1A:75:5E:49:A2:2C:DC:EE:E8:63:E0:05
Certificate issuer:       /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial:       3535
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/F550BA02768A11F081B6114EC4F9AE02.roa
Signing time:             Wed 04 Feb 2026 15:09:26 +0000
ROA not before:           Wed 04 Feb 2026 15:09:26 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136468
IP address blocks:        103.35.251.0/24 maxlen: 24
                          103.35.251.16/28 maxlen: 28
                          103.35.251.32/28 maxlen: 28
                          103.35.251.48/28 maxlen: 28
                          103.35.251.64/28 maxlen: 28
                          2402:cf80:100a::/48 maxlen: 48
                          2402:cf80:100b::/48 maxlen: 48
                          2402:cf80:7ffd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Feb 2026 14:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13621 (0x3535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
        Validity
            Not Before: Feb  4 15:09:26 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69836126-83a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fc:52:a5:39:c3:03:47:90:64:b8:f5:8b:df:
                    72:bf:1a:5e:73:9f:fe:54:a0:ca:83:2e:5a:41:a7:
                    4a:d9:86:7a:cc:54:ca:22:3c:54:63:d3:ea:d7:13:
                    3d:52:53:88:bc:77:e5:5f:56:52:ae:78:60:b3:81:
                    65:77:f2:86:53:60:0e:ec:9d:53:62:08:d6:1e:7b:
                    f6:16:bc:a3:af:c6:ed:50:1a:15:49:f2:2f:fc:a2:
                    97:4b:10:36:52:d7:1d:fb:03:b6:75:e3:8d:88:fe:
                    fd:a9:bc:cc:42:84:2b:aa:81:67:05:f0:a3:42:7f:
                    26:97:dd:6e:8e:f2:9e:2b:c5:70:90:8a:29:ff:88:
                    dd:53:9b:bc:e5:34:c4:b3:c6:5e:22:ab:84:6e:f3:
                    9f:0b:67:76:ad:53:58:2c:e8:14:0d:fb:a4:09:d4:
                    36:b7:67:43:38:dc:70:81:5f:cf:8f:49:86:80:6e:
                    d2:41:bf:be:e2:27:9a:3a:8f:c2:9b:3c:5d:8d:b9:
                    46:9a:10:b7:fa:5d:f2:1c:50:07:c7:12:ba:ad:c2:
                    7d:06:77:28:44:81:25:d6:69:9e:0c:a5:dd:13:13:
                    15:84:6e:03:d1:f0:d5:c0:dc:a0:98:88:8c:f2:91:
                    51:7d:73:01:94:51:c4:72:c8:3e:6d:de:1d:95:03:
                    fc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8F:A1:86:AB:D6:52:6D:1A:75:5E:49:A2:2C:DC:EE:E8:63:E0:05
            X509v3 Authority Key Identifier:
                keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/F550BA02768A11F081B6114EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.251.0/24
                IPv6:
                  2402:cf80:100a::/47
                  2402:cf80:7ffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:c0:5d:c4:bc:ad:d2:6e:ac:e1:b9:4a:d6:ad:d7:79:97:63:
         86:62:ec:3d:fd:4e:e9:50:eb:96:48:35:8b:fa:ba:d4:e9:02:
         9b:0b:05:5b:5d:d6:76:ff:8f:51:d5:43:44:6f:32:7f:28:e5:
         fa:32:b0:9a:9a:95:3d:fb:58:3c:83:7c:c5:a7:44:cc:e7:7d:
         b3:cb:0e:42:7c:0c:e9:09:c4:28:f1:65:c4:f3:92:f9:d0:c3:
         d9:78:8f:ca:f8:b4:c8:c8:22:51:81:7b:90:fc:85:4b:83:9c:
         b8:62:f2:34:fc:13:99:97:a0:42:ed:c2:9a:5e:c2:94:dc:95:
         74:07:20:33:67:58:f4:47:7c:39:3a:aa:01:fb:8a:fa:0a:9c:
         b8:6b:79:83:90:60:03:2d:97:7c:86:c2:93:18:e1:5c:bb:50:
         a2:fb:ef:44:10:e2:bb:cd:a9:71:77:b7:32:dd:61:93:c0:a1:
         7f:6a:7d:75:d1:04:c9:ff:03:fd:a3:74:e1:2a:e9:bf:68:61:
         50:75:80:e8:1b:4b:e7:2c:63:ac:c3:00:4a:47:41:d8:1f:08:
         4a:5b:0c:a4:15:7e:ba:ca:43:8e:50:6c:ef:66:dc:31:98:b1:
         1e:61:e5:7b:a1:39:59:7c:a6:e7:ab:85:48:f6:f9:e0:b3:00:
         c5:e4:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 19:38:46 2026 by rpki-client