This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/0B931E94FB6611F099070A594B6F56BC.roa
File:                     0B931E94FB6611F099070A594B6F56BC.roa (raw, json)
Hash identifier:          zUvvOrn/a5exd5n6fEmKPxfsBW76vttS36spmOBIuGg=
Subject key identifier:   BF:F4:80:87:26:C3:D8:EA:24:7E:E6:2D:22:46:10:B4:EC:88:9E:5F
Certificate issuer:       /CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Certificate serial:       0652
Authority key identifier: C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/0B931E94FB6611F099070A594B6F56BC.roa
Signing time:             Tue 27 Jan 2026 10:02:19 +0000
ROA not before:           Tue 27 Jan 2026 10:02:19 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     13150
IP address blocks:        103.203.220.0/24 maxlen: 24
                          103.203.221.0/24 maxlen: 24
                          103.203.222.0/24 maxlen: 24
                          103.203.223.0/24 maxlen: 24
                          113.30.128.0/24 maxlen: 24
                          113.30.130.0/24 maxlen: 24
                          113.30.131.0/24 maxlen: 24
                          113.30.132.0/24 maxlen: 24
                          123.253.152.0/24 maxlen: 24
                          123.253.153.0/24 maxlen: 24
                          123.253.154.0/24 maxlen: 24
                          123.253.155.0/24 maxlen: 24
                          150.195.208.0/24 maxlen: 24
                          150.195.209.0/24 maxlen: 24
                          150.195.210.0/24 maxlen: 24
                          150.195.211.0/24 maxlen: 24
                          150.195.212.0/24 maxlen: 24
                          150.195.214.0/24 maxlen: 24
                          150.195.217.0/24 maxlen: 24
                          150.195.218.0/24 maxlen: 24
                          150.195.219.0/24 maxlen: 24
                          150.195.220.0/24 maxlen: 24
                          150.195.221.0/24 maxlen: 24
                          150.195.222.0/24 maxlen: 24
                          150.195.223.0/24 maxlen: 24
                          202.75.242.0/24 maxlen: 24
                          202.75.243.0/24 maxlen: 24
                          202.75.244.0/24 maxlen: 24
                          202.75.246.0/24 maxlen: 24
                          202.75.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
                          rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 22:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1618 (0x652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4D3D, serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
        Validity
            Not Before: Jan 27 10:02:19 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69788d2b-a472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:47:0b:6e:0a:32:63:b5:46:14:ae:d3:26:e8:
                    12:55:86:ec:29:83:50:5f:5c:32:35:6e:6a:c6:d2:
                    1b:d2:ab:82:4d:92:0e:43:c4:b6:ac:20:f9:90:71:
                    57:73:52:da:fa:be:92:2c:84:c5:de:49:af:de:0e:
                    a1:f1:dc:07:4e:ce:ee:45:15:9f:26:5f:16:6a:fa:
                    e6:1c:a1:7b:a1:07:21:54:a8:68:fe:5b:e4:6a:73:
                    22:9b:7d:53:57:d2:02:2a:b9:ab:b8:32:ed:8f:40:
                    dd:a9:f4:74:e5:c4:bb:4c:c9:b3:d1:73:30:e0:87:
                    fb:d7:48:c9:fd:88:b8:f0:f9:d8:6d:36:40:8d:66:
                    75:fc:a7:3c:e6:e6:72:2d:ce:4c:10:d3:df:cb:71:
                    e9:65:ac:89:ba:9a:ed:67:24:5a:58:18:93:c7:25:
                    ea:75:f3:56:7c:42:af:33:13:ae:66:6c:ee:bb:e1:
                    f9:96:45:0e:72:cd:ec:03:cb:9c:5f:e0:bd:ce:0d:
                    8a:87:38:a4:02:98:6f:50:2b:68:c8:65:1d:d8:2e:
                    3e:87:4a:eb:ac:dc:df:e0:f3:f0:48:3c:d1:8d:0d:
                    34:ac:b2:ba:bb:55:49:2f:67:26:84:83:39:88:f1:
                    d7:40:66:e5:f6:81:2b:c6:d3:40:13:8b:9b:cd:f7:
                    8b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F4:80:87:26:C3:D8:EA:24:7E:E6:2D:22:46:10:B4:EC:88:9E:5F
            X509v3 Authority Key Identifier:
                keyid:C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/0B931E94FB6611F099070A594B6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.220.0/22
                  113.30.128.0/24
                  113.30.130.0-113.30.132.255
                  123.253.152.0/22
                  150.195.208.0-150.195.212.255
                  150.195.214.0/24
                  150.195.217.0-150.195.223.255
                  202.75.242.0-202.75.244.255
                  202.75.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:e2:bc:da:69:f1:dc:0a:f5:2f:0f:66:3d:83:8a:dd:11:5a:
         51:c5:aa:f7:dc:9f:22:f8:32:29:1c:1d:06:b7:ef:b3:e4:1d:
         e5:b5:1a:11:4c:fd:43:d9:58:64:b8:d3:ef:09:5b:4a:92:ed:
         55:0c:a2:dd:03:b3:a7:0f:56:af:fb:11:f8:48:30:89:b4:ad:
         ea:19:45:37:65:9d:6d:ee:49:bd:d2:20:fd:9c:d7:e6:06:52:
         fe:5a:87:97:d4:8b:53:98:e3:04:6d:f4:d1:2e:55:58:64:a9:
         26:1f:77:c3:79:33:8b:fb:93:b2:68:f4:b4:e9:a9:4b:8f:88:
         87:19:bf:44:79:83:fc:e9:01:10:8d:b8:3f:66:e8:b7:fe:83:
         bb:6a:33:67:6a:aa:a7:ed:21:23:91:0f:12:51:86:79:e5:af:
         2c:8f:5f:cf:97:3d:91:09:84:9d:e1:55:e8:8e:68:e0:95:f9:
         59:25:76:16:dd:64:ce:9e:0f:78:9e:a2:97:f8:0f:2c:9e:07:
         88:b4:59:57:cc:9a:89:02:07:52:c7:b2:ec:c6:46:55:82:b3:
         ba:31:46:f7:9a:7c:95:a3:9c:5f:a7:60:d0:28:c0:20:66:5a:
         21:97:df:f1:44:53:ed:5b:6a:32:71:e0:48:0f:ff:f7:fa:a4:
         08:01:ee:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:51:40 2026 by rpki-client