This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/FEB0698C941C11EE89E27567C4F9AE02.roa
File:                     FEB0698C941C11EE89E27567C4F9AE02.roa (raw, json)
Hash identifier:          yNdVzH3HdB63UCbWPFMEPvOsKtNIenc6n4m6zaf/MtA=
Subject key identifier:   72:95:D9:5B:6E:74:12:05:25:EB:A4:D7:32:E3:AE:4D:03:90:03:F2
Certificate issuer:       /CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Certificate serial:       0194
Authority key identifier: 53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/FEB0698C941C11EE89E27567C4F9AE02.roa
Signing time:             Sat 03 Jan 2026 03:25:29 +0000
ROA not before:           Sat 03 Jan 2026 03:25:29 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152180
IP address blocks:        210.79.184.0/23 maxlen: 23
                          210.79.184.0/24 maxlen: 24
                          210.79.185.0/24 maxlen: 24
                          2401:5660:100::/40 maxlen: 40
                          2401:5660:fc00::/40 maxlen: 40
                          2401:5660:fd00::/40 maxlen: 40
                          2401:5660:fe00::/40 maxlen: 40
                          2401:5660:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
                          rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91109A3, serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
        Validity
            Not Before: Jan  3 03:25:29 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69588c29-5c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c8:aa:84:41:a5:d3:4c:94:3b:fd:f4:3e:89:
                    97:57:71:0d:91:8e:86:dc:cd:63:a9:52:4f:42:ce:
                    f4:95:aa:5f:e4:b9:95:18:10:fe:8a:51:b9:66:41:
                    e0:12:05:3f:fc:19:a5:67:57:97:ff:65:a9:a2:68:
                    7a:46:4a:56:f9:ef:f2:e7:5e:c0:ad:cb:00:b9:1e:
                    da:a1:41:b8:09:55:99:c3:1d:31:56:83:1b:ca:3e:
                    ab:3b:79:a0:f8:bb:f0:32:47:5a:d9:34:80:5d:37:
                    92:94:89:5b:14:c7:00:2f:40:7f:ef:ea:74:f1:26:
                    37:00:d2:58:fc:9d:10:b1:b6:cc:ad:c1:52:f6:ad:
                    92:8d:79:61:54:ca:16:7e:d2:a5:fd:9f:d8:99:1b:
                    fa:d3:6a:2a:3e:97:7f:79:e6:77:6b:04:d6:e8:b2:
                    b8:92:e1:de:3b:51:e0:75:8a:fc:c3:74:41:7d:21:
                    ee:36:fb:cb:43:8f:5d:67:7d:48:18:9d:a5:91:88:
                    68:d0:3c:72:2b:d6:25:33:c6:8d:10:6b:3f:4b:e8:
                    90:00:b2:e9:36:42:5d:ec:ad:1e:9a:fa:9c:3d:69:
                    dc:37:cf:f2:06:98:6c:81:8a:48:78:73:14:d9:ca:
                    a1:7b:3c:dd:ec:17:a0:2e:c9:c4:ea:94:19:02:0e:
                    32:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:95:D9:5B:6E:74:12:05:25:EB:A4:D7:32:E3:AE:4D:03:90:03:F2
            X509v3 Authority Key Identifier:
                keyid:53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/FEB0698C941C11EE89E27567C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.184.0/23
                IPv6:
                  2401:5660:100::/40
                  2401:5660:fc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         99:fc:3d:57:ba:fe:2f:56:56:7a:5b:fe:c3:15:ab:d4:b9:75:
         59:b2:4e:f3:f9:2a:7d:86:95:d8:c2:45:05:11:a6:26:b5:0a:
         92:7b:53:e3:9f:fd:dd:6c:7d:41:bc:e6:35:a8:c3:06:31:bc:
         48:33:67:67:f2:6a:0f:b7:8e:62:dd:ad:ab:e9:00:48:a8:96:
         ae:8a:11:e2:d6:aa:f0:8c:6c:6c:09:f5:a5:46:2a:18:2c:f7:
         7c:30:b9:34:0d:d4:f6:27:be:f1:42:b3:8a:70:e8:a6:49:b6:
         ec:b8:3c:b7:96:e6:bb:cc:dd:42:c3:39:12:25:2a:9e:8b:4d:
         74:ac:d3:7c:98:0e:7e:8f:d0:00:12:c7:b3:8d:49:92:1c:d5:
         2e:4f:e2:b1:e7:eb:14:0f:0d:2c:94:34:bf:e1:3e:bb:08:ef:
         d5:9b:65:b1:76:c9:da:54:68:e9:05:a1:b2:b3:95:9a:d1:ac:
         2b:d5:96:93:db:78:ad:32:9e:c8:9a:a3:7a:25:c4:a5:e3:12:
         87:98:35:57:db:4a:e8:74:0a:00:d2:8d:a7:72:75:a2:53:68:
         9f:f2:30:a9:d4:8c:05:cb:16:cc:7a:e6:8a:e3:22:d4:2c:9d:
         f7:c9:5c:d7:aa:f0:da:c7:f0:75:8d:33:d2:97:91:2a:05:d5:
         60:10:9d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:57:42 2026 by rpki-client