This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/C2A2E774EEC311EE8832C93AC4F9AE02.roa
File:                     C2A2E774EEC311EE8832C93AC4F9AE02.roa (raw, json)
Hash identifier:          2Un6YsYPXGpz+6JSiwjCWLL69u4Bm0U2HappuHiY6lU=
Subject key identifier:   CC:50:98:B6:84:19:83:EC:75:6A:6C:FE:81:6D:7D:34:F1:83:73:B6
Certificate issuer:       /CN=A91486D3/serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3
Certificate serial:       014D
Authority key identifier: EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/C2A2E774EEC311EE8832C93AC4F9AE02.roa
Signing time:             Wed 07 Jan 2026 04:23:01 +0000
ROA not before:           Wed 07 Jan 2026 04:23:01 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152131
IP address blocks:        210.79.145.0/24 maxlen: 24
                          2001:df3:36c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl
                          rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91486D3, serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3
        Validity
            Not Before: Jan  7 04:23:01 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=695ddfa5-89c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:7e:9b:5a:44:96:82:9e:c5:37:c1:a9:5d:
                    53:f0:6f:17:d0:fd:0a:6f:a0:3e:dc:c8:f4:fd:a2:
                    94:99:52:89:07:c5:6d:33:3f:fa:2b:ac:18:ee:8d:
                    3d:df:f7:37:39:f5:58:17:45:20:43:97:9f:d2:5b:
                    1f:46:04:68:ff:fe:6b:04:a8:13:6f:13:a2:76:da:
                    b8:d7:97:12:3e:e4:8d:fb:3e:e3:ee:0a:62:39:94:
                    5f:2c:1a:bc:87:df:67:d8:3a:0b:e2:35:dc:0d:3e:
                    18:5e:a8:34:45:15:ad:4f:52:da:7d:4c:9b:d0:d8:
                    38:a9:f9:7e:38:e5:d5:9e:0b:74:c0:34:f5:cd:bf:
                    71:8c:3c:11:e8:43:e5:ca:45:e4:e4:8e:61:00:71:
                    78:41:ff:b5:c1:45:d5:e4:9b:de:36:2c:dd:79:8b:
                    c8:4f:d8:c9:01:ba:a5:47:8f:41:62:a4:87:c4:27:
                    0c:18:2d:94:e9:f2:e5:51:95:c4:8a:94:f9:0c:8b:
                    4a:16:a3:f7:d6:96:43:19:d9:65:50:15:20:ab:d2:
                    b1:26:41:d6:24:8b:0d:76:13:4e:ba:28:f1:25:3d:
                    fd:fd:92:2d:3a:0a:42:cd:c9:2a:4c:fc:6a:74:43:
                    c8:75:c9:86:86:64:e1:2b:19:b9:8e:08:64:e9:94:
                    a2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:50:98:B6:84:19:83:EC:75:6A:6C:FE:81:6D:7D:34:F1:83:73:B6
            X509v3 Authority Key Identifier:
                keyid:EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/C2A2E774EEC311EE8832C93AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.145.0/24
                IPv6:
                  2001:df3:36c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:11:96:9c:c6:ed:cc:95:dc:4a:67:ef:b2:2a:d5:18:92:b0:
         74:de:2f:10:66:ae:21:be:88:bb:7f:25:d5:0b:d1:ed:2d:55:
         d0:18:6a:fe:ed:3f:7a:af:dc:8d:3d:59:89:21:f4:3b:66:0f:
         dd:0b:b3:35:c2:db:f7:99:8d:77:43:1c:53:7a:88:62:6f:4c:
         bc:c4:75:11:28:a3:e2:d8:61:7c:ac:3b:dc:fd:31:b7:ed:e0:
         0d:65:cb:70:5b:16:93:7c:f4:6b:d6:20:c4:52:c9:b4:35:51:
         41:12:39:c6:e5:70:7d:b6:f7:fb:5e:28:19:6e:60:f0:ab:a0:
         b2:df:f3:76:0f:0b:34:6b:e1:72:b1:8f:93:ed:28:83:4e:d0:
         90:1f:e5:76:0e:ac:c4:f6:02:1c:25:bf:f7:47:39:31:64:ac:
         cb:fe:67:af:a7:72:5a:a9:e7:e7:49:ae:ed:ce:95:f2:de:38:
         b2:84:b1:6a:aa:a0:1e:f0:bb:e1:38:f5:4d:fc:04:61:0d:e8:
         71:56:69:58:0b:88:23:fe:7b:ff:f3:63:d8:d4:1b:c4:5b:7d:
         95:d6:d1:19:ad:fe:57:64:17:fe:7a:cb:95:f4:a3:8c:b7:ff:
         66:ff:38:f2:fb:3e:c3:96:bc:f7:cd:6c:98:29:5d:7a:b1:83:
         57:bc:b9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:47:24 2026 by rpki-client