This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/2508F7B8001611F18F2C9137416F56BC.roa
File:                     2508F7B8001611F18F2C9137416F56BC.roa (raw, json)
Hash identifier:          p8jxq1DWplFuw2ZW+5AZmiaZhG3I+xieOdOBdHu5Kpg=
Subject key identifier:   44:CE:09:8F:D9:80:17:D3:D4:7C:A6:2C:5B:56:0A:8B:BB:DF:83:F2
Certificate issuer:       /CN=A91CDC08/serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1
Certificate serial:       02
Authority key identifier: 6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/2508F7B8001611F18F2C9137416F56BC.roa
Signing time:             Mon 02 Feb 2026 09:04:14 +0000
ROA not before:           Mon 02 Feb 2026 09:04:13 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     4686
IP address blocks:        103.253.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl
                          rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 08:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDC08, serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1
        Validity
            Not Before: Feb  2 09:04:13 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6980688d-78ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6f:a6:0a:1c:e2:b8:67:a7:61:c6:61:94:73:
                    1d:08:84:96:ce:89:6f:16:1b:9d:da:8c:5a:b3:b9:
                    4a:27:2b:b8:a3:69:b5:f7:a8:4d:48:95:d8:f4:f8:
                    2b:67:07:24:fc:37:01:d0:24:40:bc:3e:40:9e:5e:
                    bd:2f:16:3c:e1:0b:3a:53:3c:a7:b6:72:51:b7:e1:
                    b7:dd:71:d3:e3:f7:36:41:f1:17:28:14:53:59:ad:
                    24:39:f8:77:82:a1:f0:9b:84:d2:f8:c2:2b:e4:6d:
                    07:01:2a:15:26:29:0a:d9:c0:6c:b9:2d:c2:46:8b:
                    00:d8:28:38:33:b8:d8:f7:5d:f1:fc:49:e7:bc:79:
                    13:1b:4b:a0:98:c5:10:d4:9a:ed:dc:05:d1:3e:a3:
                    89:80:26:2f:d7:85:94:46:ec:56:d0:0b:57:80:01:
                    ba:01:63:d0:27:d1:81:42:21:49:85:3e:1a:21:c5:
                    05:37:0c:11:e5:48:9d:0f:c9:f0:8e:36:10:ab:a3:
                    b0:1e:aa:f3:95:e3:6c:1a:ce:5f:bd:29:7e:d0:f7:
                    f4:af:d3:f3:47:58:5c:c9:39:f3:d1:61:4c:a3:a6:
                    16:78:44:c2:4c:71:63:e4:59:f7:ea:77:89:b3:54:
                    40:bc:30:10:6c:66:7f:77:50:8d:e2:39:e1:12:23:
                    f7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CE:09:8F:D9:80:17:D3:D4:7C:A6:2C:5B:56:0A:8B:BB:DF:83:F2
            X509v3 Authority Key Identifier:
                keyid:6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/2508F7B8001611F18F2C9137416F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:ec:6f:b7:30:53:6b:ab:e1:51:9f:be:71:fa:c9:c3:07:f4:
         fd:59:59:05:7f:f0:0a:d7:c0:4a:02:a7:2d:78:1c:ff:8e:6b:
         ca:ce:48:84:a5:22:47:d6:da:24:a4:62:c6:8e:80:a4:81:e6:
         ee:c7:02:6c:61:7f:d1:71:5a:46:41:40:bc:16:d2:5c:88:3f:
         f3:99:4a:f8:ec:fc:de:80:d0:fa:ab:d8:64:8d:1a:f7:0b:e7:
         84:9e:89:fc:36:4f:27:69:2a:ca:fc:56:19:05:d7:6f:0b:7f:
         98:88:9d:74:46:ed:a6:80:19:43:6d:b3:3e:e1:8b:e0:a6:eb:
         20:85:49:a5:10:29:5a:7a:2e:06:77:00:c8:7c:a1:b0:10:ae:
         00:d4:12:93:a8:98:97:f6:a0:4f:93:94:6b:2f:13:19:5e:7a:
         d9:39:6f:01:eb:1e:a1:31:cc:ff:50:9a:13:25:66:8b:b5:73:
         80:0a:c5:5b:64:7b:db:d3:12:4a:3d:a7:e4:a2:51:2d:46:38:
         f6:e1:f4:4a:3a:45:50:e0:5b:f4:b1:18:8a:94:cd:a6:6a:2d:
         06:10:99:55:eb:7e:09:f5:e1:bc:5d:65:32:89:01:35:58:01:
         75:ad:ec:e6:0d:67:3d:d2:38:d3:8a:74:b4:b8:6f:bb:05:c7:
         c0:2e:e1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 21:17:48 2026 by rpki-client