This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/24661146FA7311EFB58C366CC4F9AE02.roa
File:                     24661146FA7311EFB58C366CC4F9AE02.roa (raw, json)
Hash identifier:          txLNKah7itTjrJcRd69nJemO1MKJNqH1mqPEunQ9S/M=
Subject key identifier:   0A:A8:9B:DD:CE:FB:83:60:16:31:C6:CC:25:C8:0C:38:F5:D4:5E:5A
Certificate issuer:       /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Certificate serial:       01E8
Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/24661146FA7311EFB58C366CC4F9AE02.roa
Signing time:             Mon 29 Dec 2025 02:22:21 +0000
ROA not before:           Mon 29 Dec 2025 02:22:21 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     151326
IP address blocks:        101.1.6.0/24 maxlen: 24
                          101.1.7.0/24 maxlen: 24
                          101.101.98.0/24 maxlen: 24
                          101.101.99.0/24 maxlen: 24
                          2401:44c0::/32 maxlen: 32
                          2401:44c0::/48 maxlen: 48
                          2401:44c0:1::/48 maxlen: 48
                          2401:44c0:2::/48 maxlen: 48
                          2401:44c0:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
                          rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
        Validity
            Not Before: Dec 29 02:22:21 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6951e5dd-3852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:74:72:fe:42:3b:fd:a7:3a:d6:2b:b7:01:1d:
                    54:c9:13:5a:f4:f5:cb:69:ce:28:24:6d:75:d6:87:
                    25:e8:ea:4f:91:40:36:ff:f0:7c:37:e3:6b:e6:7f:
                    29:bb:32:e9:1a:3b:2a:f7:04:fc:2f:48:21:9e:de:
                    14:00:d2:39:f5:d9:d2:9a:48:34:e8:ae:00:f3:6c:
                    aa:ff:44:63:30:3b:4d:28:9b:7f:70:13:29:3b:2e:
                    ee:cc:c4:ee:5d:42:30:d3:ee:43:66:d5:ae:40:a7:
                    95:b7:56:17:f3:ef:03:36:dc:64:96:bf:86:9f:58:
                    cc:33:91:56:d6:d1:ad:34:d2:b6:e4:82:70:3d:1a:
                    ee:4a:ae:06:d0:05:8b:d8:c3:05:68:c9:04:9d:cd:
                    b4:9e:ca:5f:0a:6a:86:79:65:eb:ac:c1:2c:2d:18:
                    30:0a:c6:20:54:ca:25:ff:12:26:f8:0e:b6:87:28:
                    33:a7:9c:05:25:33:c5:3c:f4:0c:bd:af:41:5b:b5:
                    64:cf:5d:2d:60:74:b3:e4:45:87:50:f3:a2:39:72:
                    46:af:0b:13:8e:38:8e:3c:95:8c:d0:7e:cd:81:fe:
                    25:dd:03:e5:6b:d8:84:46:4f:15:06:12:1d:d2:45:
                    f8:46:0e:7d:02:bb:ab:42:e9:1b:e3:f2:37:41:a9:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A8:9B:DD:CE:FB:83:60:16:31:C6:CC:25:C8:0C:38:F5:D4:5E:5A
            X509v3 Authority Key Identifier:
                keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/24661146FA7311EFB58C366CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.1.6.0/23
                  101.101.98.0/23
                IPv6:
                  2401:44c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:49:09:86:80:16:8f:3f:19:4a:2b:58:1b:f7:1e:f6:1f:78:
         d7:85:09:98:2d:92:42:2a:f5:bc:b3:3f:2e:9e:11:2d:27:8e:
         aa:ea:b0:5e:5f:83:3b:49:06:2a:03:3e:60:3d:37:00:bd:be:
         04:b3:3c:9c:5d:f9:fe:68:16:60:89:21:90:2d:a6:61:77:0f:
         dd:5b:b0:21:df:f4:c3:29:1b:78:b6:95:9a:87:fc:a1:2b:b6:
         96:96:00:f8:9b:2c:ab:a8:7f:aa:5b:ab:92:e4:7c:a8:15:0a:
         21:ac:c8:a9:c6:79:d4:43:c1:d5:bd:e4:c0:13:bd:8f:fe:e7:
         52:5c:2c:21:8a:3d:54:2c:00:8e:d2:3e:1b:21:7e:8c:56:75:
         da:f9:d1:8f:2b:73:9d:fa:fd:5d:50:52:a3:38:c2:82:39:1f:
         04:66:12:05:4e:ce:02:2e:0a:1c:46:ba:36:a3:f3:11:f7:04:
         5a:5a:cf:9b:af:c2:c0:3d:d3:1e:9b:6c:9a:67:8c:ff:19:11:
         af:0f:c6:4c:c6:8e:5d:c7:da:fd:f6:c2:2a:75:18:64:ba:f0:
         e0:94:dd:90:35:c7:7c:7d:7a:12:00:1a:68:ef:20:f3:68:f2:
         f6:15:47:e0:c4:b3:d6:90:f7:f3:b5:7b:70:a0:f0:e3:93:57:
         39:6b:3a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:42:28 2026 by rpki-client