This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/802EA36AE88B11F09D8DF0484F6F56BC.roa
File:                     802EA36AE88B11F09D8DF0484F6F56BC.roa (raw, json)
Hash identifier:          zCqGlFEtiuWaDyku74flbFtIq+LD7ag6rO52zwCMkI8=
Subject key identifier:   06:1A:4D:68:4A:B9:2D:F6:B1:41:3D:16:4D:52:85:DF:FE:9A:DE:01
Certificate issuer:       /CN=A9141BAE/serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
Certificate serial:       4C
Authority key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/802EA36AE88B11F09D8DF0484F6F56BC.roa
Signing time:             Sat 03 Jan 2026 10:04:12 +0000
ROA not before:           Sat 03 Jan 2026 10:04:12 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154161
IP address blocks:        45.119.120.0/24 maxlen: 24
                          2001:df6:6c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl
                          rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
        Validity
            Not Before: Jan  3 10:04:12 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6958e99c-e5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:3e:ff:9d:49:53:c4:28:d7:96:f5:80:67:
                    b9:6d:4c:fe:73:c3:e5:19:64:ec:73:3f:cd:2e:de:
                    36:7e:e3:76:53:7a:06:1b:6f:2e:c2:d3:af:bc:a7:
                    fe:3e:89:1b:48:87:ed:a9:b4:93:a1:dc:81:cc:c8:
                    20:e4:07:38:be:03:3d:7c:59:59:87:cb:f2:ef:bf:
                    e7:b9:ff:89:db:50:43:56:56:0f:94:c9:56:b5:c2:
                    80:22:9a:52:62:0e:e4:b8:4a:c0:77:b7:60:c2:fd:
                    c5:7a:92:64:f0:43:0d:55:ac:65:52:01:3c:3b:68:
                    30:d8:05:cc:88:a7:5d:1c:b6:26:64:e8:ae:04:62:
                    06:74:af:f1:96:db:f8:4f:61:c3:88:ac:1c:2e:67:
                    64:36:83:b3:61:b4:9a:87:36:0f:04:c5:08:e1:1f:
                    38:a3:23:1a:08:21:3c:a7:55:19:f5:88:f3:23:50:
                    3d:b5:dd:e3:1f:20:b3:ef:b2:f7:36:21:cd:85:8f:
                    25:59:cd:5d:7b:4f:02:bd:eb:06:37:85:2d:f2:cd:
                    13:c1:f5:4f:57:99:8c:83:6a:5d:db:11:96:a9:2a:
                    0d:8b:33:10:8b:8c:4e:92:8f:46:38:e9:84:29:ef:
                    fc:d4:69:fb:1c:78:cb:72:93:ab:b4:5d:97:d4:e9:
                    48:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1A:4D:68:4A:B9:2D:F6:B1:41:3D:16:4D:52:85:DF:FE:9A:DE:01
            X509v3 Authority Key Identifier:
                keyid:AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/802EA36AE88B11F09D8DF0484F6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.119.120.0/24
                IPv6:
                  2001:df6:6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:4f:f4:3c:2d:bd:a7:a9:18:76:d6:77:39:63:f8:fb:ed:d9:
         a8:0a:76:c3:7f:52:59:79:12:36:6e:6e:2f:82:61:9b:dc:82:
         5b:3a:e4:97:bb:ad:fa:96:37:01:e8:e2:d5:4a:99:1d:67:f9:
         c0:06:86:e7:33:59:ab:52:4e:28:93:d9:95:25:35:08:07:e7:
         af:59:5b:f3:dc:2f:eb:dc:d0:d6:35:db:06:75:84:71:bc:f1:
         a9:85:74:42:2b:a2:a9:71:53:28:c2:b8:5c:e7:75:ea:05:b5:
         6e:9a:8f:39:29:2d:7a:a6:55:a0:1b:21:52:a7:0d:1e:6d:c4:
         7a:88:c0:8b:65:3d:d2:12:fd:6d:a1:7e:e2:f1:7b:8d:b8:4f:
         e5:1a:1d:ae:42:64:d6:7c:bc:9a:63:8a:76:4d:97:23:d1:5e:
         94:49:29:59:c5:61:62:ac:2a:25:35:c7:42:41:f3:61:15:05:
         16:2b:90:f0:29:51:d4:2e:2c:3a:cb:33:67:ee:6a:0d:d7:a7:
         f9:92:ee:1b:0a:cd:4a:7d:a2:cd:fc:bc:1d:f5:fd:be:1b:08:
         3d:e2:95:31:c0:d0:e7:f6:25:ed:b3:3b:13:a5:86:17:9b:78:
         05:9f:4a:e6:22:e8:90:55:d9:1d:27:e1:f8:06:88:be:6b:44:
         ff:26:ef:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:01:47 2026 by rpki-client