This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/13C4E664EB7C11F08E054CC1506F56BC.roa
File:                     13C4E664EB7C11F08E054CC1506F56BC.roa (raw, json)
Hash identifier:          6xVYzQM8Eb1mvwufHwgYrxGdqGXxNd9DEw8Rio98SHU=
Subject key identifier:   12:03:49:3D:AF:D9:6D:23:28:02:1B:31:D2:05:29:1E:52:EC:C6:76
Certificate issuer:       /CN=A91CF188/serialNumber=EA5A603FFB2A040E3B384B2061B722272F0A9630
Certificate serial:       06
Authority key identifier: EA:5A:60:3F:FB:2A:04:0E:3B:38:4B:20:61:B7:22:27:2F:0A:96:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/13C4E664EB7C11F08E054CC1506F56BC.roa
Signing time:             Wed 07 Jan 2026 05:19:02 +0000
ROA not before:           Wed 07 Jan 2026 05:19:02 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     5065
IP address blocks:        103.37.116.0/24 maxlen: 24
                          103.37.117.0/24 maxlen: 24
                          103.37.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.crl
                          rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF188, serialNumber=EA5A603FFB2A040E3B384B2061B722272F0A9630
        Validity
            Not Before: Jan  7 05:19:02 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=695decc6-f2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1b:1a:47:ed:83:a2:15:2e:4c:73:7f:81:94:
                    52:3b:52:3c:83:4d:3d:00:41:0d:7d:c3:0e:c4:79:
                    6b:ec:73:7b:d9:cd:45:ee:dd:c1:e9:95:0b:2a:07:
                    d0:ce:e0:f5:d4:9f:4e:ac:f2:a7:a4:be:67:3f:96:
                    fa:96:57:74:4f:e3:32:31:3e:9d:13:ec:27:36:74:
                    fb:85:ba:71:04:41:af:03:b0:a0:9f:62:9e:6f:34:
                    08:d4:c8:c6:2f:76:53:6c:fe:67:b3:49:c7:fa:ff:
                    6b:4d:4c:a2:61:76:bd:2a:cd:a5:cb:6b:9e:6e:c6:
                    15:83:ef:6d:70:7c:9d:5a:b7:74:93:b7:40:1f:45:
                    f5:f6:f5:7e:0c:e6:ae:27:04:cc:58:fa:91:5f:27:
                    b3:8d:2f:a7:a9:47:5a:89:c4:d0:bd:68:81:d9:18:
                    32:b5:f5:33:64:ab:bb:86:c7:ce:95:5d:09:a0:03:
                    df:7d:58:63:e7:77:10:b2:fd:31:67:24:56:62:c5:
                    e4:57:32:67:7c:0b:a2:dd:e2:6e:ef:e1:60:7e:37:
                    cc:dd:57:dc:f3:aa:5b:43:01:9c:9c:93:ed:db:e7:
                    92:d6:62:89:f7:da:f9:ea:b1:9c:29:9f:b4:71:14:
                    66:99:62:46:e2:88:39:91:c0:59:ea:fa:78:ac:83:
                    98:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:03:49:3D:AF:D9:6D:23:28:02:1B:31:D2:05:29:1E:52:EC:C6:76
            X509v3 Authority Key Identifier:
                keyid:EA:5A:60:3F:FB:2A:04:0E:3B:38:4B:20:61:B7:22:27:2F:0A:96:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/13C4E664EB7C11F08E054CC1506F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.116.0/23
                  103.37.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:2d:4d:4c:e5:7b:dd:00:73:56:23:4c:10:d4:40:75:25:3a:
         76:82:cb:6f:79:19:48:7a:8c:cc:56:4e:c0:9c:9d:4b:de:ae:
         8b:13:3f:6f:f5:30:dc:cb:9d:e0:cb:e0:d7:24:4e:36:b6:19:
         c0:9c:22:17:ec:06:d3:41:25:d6:e4:66:74:9a:65:1f:46:21:
         23:46:48:73:18:03:c5:bc:0a:46:15:bf:f0:5b:04:45:3b:e6:
         a4:35:d9:cc:57:3d:2a:84:05:f2:05:63:11:5d:87:bd:f1:94:
         8c:22:7d:d7:a3:81:ba:e0:e9:c1:55:e9:c3:08:46:3c:f9:45:
         f4:a4:6d:b0:53:6c:fc:9d:53:bd:bf:4d:ce:4a:36:fc:87:8f:
         ed:1a:3d:66:96:d3:03:65:82:15:d3:8c:2b:2a:be:83:e0:31:
         ac:b2:6d:e1:15:32:00:40:2a:91:8a:4b:e5:a8:9e:b9:1b:b8:
         bd:28:1d:8a:82:f0:eb:4d:aa:0f:f9:79:a5:c7:8e:89:b4:5c:
         73:58:5c:9f:27:04:85:72:6c:9f:9a:70:5b:42:23:c6:83:51:
         6c:8d:7d:08:c2:48:52:19:2b:eb:ff:7f:0d:b4:a3:e7:1a:c2:
         67:b0:98:59:2a:d1:3c:9e:c6:b3:1b:45:30:a5:a9:73:aa:56:
         ea:44:76:3f
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFD
RjE4ODExMC8GA1UEBRMoRUE1QTYwM0ZGQjJBMDQwRTNCMzg0QjIwNjFCNzIyMjcy
RjBBOTYzMDAeFw0yNjAxMDcwNTE5MDJaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NWRlY2M2LWYyYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLGxpH7YOiFS5Mc3+BlFI7UjyDTT0AQQ19ww7EeWvsc3vZzUXu3cHplQsqB9DO
4PXUn06s8qekvmc/lvqWV3RP4zIxPp0T7Cc2dPuFunEEQa8DsKCfYp5vNAjUyMYv
dlNs/mezScf6/2tNTKJhdr0qzaXLa55uxhWD721wfJ1at3STt0AfRfX29X4M5q4n
BMxY+pFfJ7ONL6epR1qJxNC9aIHZGDK19TNkq7uGx86VXQmgA999WGPndxCy/TFn
JFZixeRXMmd8C6Ld4m7v4WB+N8zdV9zzqltDAZyck+3b55LWYon32vnqsZwpn7Rx
FGaZYkbiiDmRwFnq+nisg5j1AgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUEgNJPa/Z
bSMoAhsx0gUpHlLsxnYwHwYDVR0jBBgwFoAU6lpgP/sqBA47OEsgYbciJy8KljAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGMTg4L0UyRUU1QzZBRUI3
QTExRjA4MUFBNTc5MjUwNkY1NkJDLzZscGdQX3NxQkE0N09Fc2dZYmNpSnk4S2xq
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNmxwZ1Bfc3FCQTQ3T0VzZ1liY2lKeThLbGpBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RjE4OC9FMkVFNUM2QUVCN0ExMUYwODFBQTU3OTI1MDZGNTZCQy8xM0M0RTY2NEVC
N0MxMUYwOEUwNTRDQzE1MDZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAWcldAMEAGcldzANBgkqhkiG9w0BAQsFAAOCAQEAIy1NTOV7
3QBzViNMENRAdSU6doLLb3kZSHqMzFZOwJydS96uixM/b/Uw3Mud4Mvg1yRONrYZ
wJwiF+wG00El1uRmdJplH0YhI0ZIcxgDxbwKRhW/8FsERTvmpDXZzFc9KoQF8gVj
EV2HvfGUjCJ916OBuuDpwVXpwwhGPPlF9KRtsFNs/J1Tvb9Nzko2/IeP7Ro9ZpbT
A2WCFdOMKyq+g+AxrLJt4RUyAEAqkYpL5aieuRu4vSgdioLw602qD/l5pceOibRc
c1hcnycEhXJsn5pwW0IjxoNRbI19CMJIUhkr6/9/DbSj5xrCZ7CYWSrRPJ7GsxtF
MKWpc6pW6kR2Pw==
-----END CERTIFICATE-----
Generated at Mon Jan 19 11:25:05 2026 by rpki-client