This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
File:                     CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (raw, json)
Hash identifier:          HsIba3Vn2KDyjN1fLbCY3eco8tWxf11MfX9b79gT5bQ=
Subject key identifier:   23:EB:23:2A:17:E7:35:FE:73:27:11:CA:FB:73:93:02:B5:42:24:AB
Certificate issuer:       /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Certificate serial:       2982
Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
Signing time:             Tue 13 Jan 2026 11:19:52 +0000
ROA not before:           Tue 13 Jan 2026 11:19:52 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     24440
IP address blocks:        36.255.44.0/22 maxlen: 24
                          43.242.100.0/22 maxlen: 24
                          58.65.192.0/19 maxlen: 24
                          61.5.128.0/19 maxlen: 24
                          101.53.224.0/19 maxlen: 24
                          103.7.60.0/22 maxlen: 24
                          103.18.8.0/22 maxlen: 24
                          103.18.12.0/22 maxlen: 24
                          103.18.20.0/22 maxlen: 24
                          103.26.80.0/22 maxlen: 24
                          103.26.84.0/22 maxlen: 24
                          103.31.92.0/22 maxlen: 24
                          103.31.100.0/22 maxlen: 24
                          103.31.104.0/22 maxlen: 24
                          103.244.172.0/22 maxlen: 24
                          103.244.176.0/22 maxlen: 24
                          103.245.132.0/22 maxlen: 24
                          103.245.192.0/22 maxlen: 24
                          119.13.184.0/21 maxlen: 24
                          124.29.192.0/18 maxlen: 24
                          175.107.192.0/18 maxlen: 24
                          202.47.32.0/19 maxlen: 24
                          202.163.64.0/19 maxlen: 24
                          202.163.96.0/19 maxlen: 24
                          203.101.160.0/19 maxlen: 24
                          218.100.85.0/24 maxlen: 24
                          2001:4538::/32 maxlen: 32
                          2001:4538:41::/48 maxlen: 48
                          2400:adc0:9::/64 maxlen: 64
                          2400:adc0:200::/48 maxlen: 48
                          2400:adc0:201::/48 maxlen: 48
                          2400:adc0:4005::/48 maxlen: 48
                          2400:adc0:4006::/48 maxlen: 48
                          2400:adc0:4013::/48 maxlen: 48
                          2400:adc0:4104::/48 maxlen: 48
                          2400:adc0:4203::/48 maxlen: 48
                          2400:adc0:4204::/48 maxlen: 48
                          2400:adc0:4302::/48 maxlen: 48
                          2400:adc0:4303::/48 maxlen: 48
                          2400:adc0:4500::/48 maxlen: 48
                          2400:adc0:4611::/48 maxlen: 48
                          2400:adc0:4700::/48 maxlen: 48
                          2400:adc0:4710::/48 maxlen: 48
                          2400:adc0:4711::/48 maxlen: 48
                          2400:adc0:4900::/48 maxlen: 48
                          2400:adc0:4910::/48 maxlen: 48
                          2400:adc0:4a10::/48 maxlen: 48
                          2400:adc0:4b10::/48 maxlen: 48
                          2400:adc0:c001::/48 maxlen: 48
                          2400:adc0:c003::/48 maxlen: 48
                          2400:adc0:c030::/48 maxlen: 48
                          2400:adc0:c102::/48 maxlen: 48
                          2400:adc0:c103::/48 maxlen: 48
                          2400:adc0:c210::/48 maxlen: 48
                          2400:adc0:c211::/48 maxlen: 48
                          2400:adc0:c310::/48 maxlen: 48
                          2400:adc0:c410::/48 maxlen: 48
                          2400:adc0:c510::/48 maxlen: 48
                          2400:adc2:100::/48 maxlen: 48
                          2400:adc2:300::/40 maxlen: 40
                          2400:adc2:400::/40 maxlen: 40
                          2400:adc2:600::/40 maxlen: 40
                          2400:adc2:700::/40 maxlen: 40
                          2400:adc2:900::/40 maxlen: 40
                          2400:adc2:a00::/40 maxlen: 40
                          2400:adc4::/40 maxlen: 40
                          2400:adc4:100::/40 maxlen: 40
                          2400:adc4:800::/40 maxlen: 40
                          2400:adc4:900::/40 maxlen: 40
                          2400:adc5::/42 maxlen: 42
                          2400:adc5:40::/42 maxlen: 42
                          2400:adc5:80::/42 maxlen: 42
                          2400:adc5:c0::/42 maxlen: 42
                          2400:adc5:100::/42 maxlen: 42
                          2400:adc5:140::/42 maxlen: 42
                          2400:adc5:180::/42 maxlen: 42
                          2400:adc5:1c0::/42 maxlen: 42
                          2400:adc5:300::/42 maxlen: 42
                          2400:adc5:340::/42 maxlen: 42
                          2400:adc5:380::/42 maxlen: 42
                          2400:adc5:3c0::/42 maxlen: 42
                          2400:adc5:400::/42 maxlen: 42
                          2400:adc5:440::/42 maxlen: 42
                          2400:adc5:480::/42 maxlen: 42
                          2400:adc5:4c0::/42 maxlen: 42
                          2400:adca::/40 maxlen: 40
                          2400:adca:100::/40 maxlen: 40
                          2400:add9::/40 maxlen: 40
                          2400:add9:100::/40 maxlen: 40
                          2400:add9:200::/40 maxlen: 40
                          2400:add9:300::/40 maxlen: 40
                          2400:addb:800::/40 maxlen: 40
                          2400:addb:900::/40 maxlen: 40
                          2400:addd:2000::/40 maxlen: 40
                          2400:addd:2100::/40 maxlen: 40
                          2400:addd:2800::/40 maxlen: 40
                          2400:addd:2900::/40 maxlen: 40
                          2400:addd:4900::/40 maxlen: 40
                          2400:adde::/40 maxlen: 40
                          2400:adde:100::/40 maxlen: 40
                          2400:addf:800::/40 maxlen: 40
                          2400:addf:900::/40 maxlen: 40
                          2400:addf:1000::/40 maxlen: 40
                          2400:addf:1100::/40 maxlen: 40
                          2400:addf:2900::/40 maxlen: 40
                          2400:addf:3900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
                          rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10626 (0x2982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
        Validity
            Not Before: Jan 13 11:19:52 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69662a58-e8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:d8:22:b4:89:2a:ff:f2:e5:34:ce:13:c2:
                    fc:a9:8e:c8:63:6e:24:f8:2d:73:f9:6e:71:34:b5:
                    4f:56:c8:ae:bc:84:78:3d:3a:b9:3d:fe:cd:ab:ab:
                    1e:1a:61:49:b5:40:6f:c3:e0:83:e4:5c:43:25:89:
                    89:28:ed:85:3d:ee:4a:93:1b:b8:7e:0f:5b:dc:ae:
                    0c:fa:77:92:d6:aa:7c:fe:b9:05:64:11:26:93:1b:
                    2a:10:80:d1:ed:02:7a:d3:fe:b0:b2:eb:ed:46:88:
                    87:88:49:bf:54:71:8c:a8:c6:0b:1f:a5:4b:91:19:
                    d7:c9:1a:36:cd:89:e9:56:9b:c9:15:c9:a2:89:05:
                    51:61:3b:25:29:b2:3a:75:74:e2:70:59:be:49:46:
                    bc:d8:91:0f:c3:39:87:e5:9b:fa:12:24:7c:2b:21:
                    3c:42:ec:eb:32:a9:ec:fd:76:8d:54:f3:2b:59:2b:
                    c3:62:c4:95:77:ae:fa:fb:78:73:8e:6a:da:39:fd:
                    7a:c7:3d:10:97:09:4b:63:e9:5d:db:a0:f5:87:69:
                    3e:ba:23:f3:a2:81:a5:31:95:7e:e5:bd:f4:e3:aa:
                    06:e9:de:af:59:83:c4:de:2d:f7:bc:01:31:2b:2a:
                    2b:9c:2a:d9:48:83:52:80:11:d4:ca:04:a7:e8:c5:
                    53:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EB:23:2A:17:E7:35:FE:73:27:11:CA:FB:73:93:02:B5:42:24:AB
            X509v3 Authority Key Identifier:
                keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.44.0/22
                  43.242.100.0/22
                  58.65.192.0/19
                  61.5.128.0/19
                  101.53.224.0/19
                  103.7.60.0/22
                  103.18.8.0/21
                  103.18.20.0/22
                  103.26.80.0/21
                  103.31.92.0/22
                  103.31.100.0-103.31.107.255
                  103.244.172.0-103.244.179.255
                  103.245.132.0/22
                  103.245.192.0/22
                  119.13.184.0/21
                  124.29.192.0/18
                  175.107.192.0/18
                  202.47.32.0/19
                  202.163.64.0/18
                  203.101.160.0/19
                  218.100.85.0/24
                IPv6:
                  2001:4538::/32
                  2400:adc0:9::/64
                  2400:adc0:200::/47
                  2400:adc0:4005::-2400:adc0:4006:ffff:ffff:ffff:ffff:ffff
                  2400:adc0:4013::/48
                  2400:adc0:4104::/48
                  2400:adc0:4203::-2400:adc0:4204:ffff:ffff:ffff:ffff:ffff
                  2400:adc0:4302::/47
                  2400:adc0:4500::/48
                  2400:adc0:4611::/48
                  2400:adc0:4700::/48
                  2400:adc0:4710::/47
                  2400:adc0:4900::/48
                  2400:adc0:4910::/48
                  2400:adc0:4a10::/48
                  2400:adc0:4b10::/48
                  2400:adc0:c001::/48
                  2400:adc0:c003::/48
                  2400:adc0:c030::/48
                  2400:adc0:c102::/47
                  2400:adc0:c210::/47
                  2400:adc0:c310::/48
                  2400:adc0:c410::/48
                  2400:adc0:c510::/48
                  2400:adc2:100::/48
                  2400:adc2:300::-2400:adc2:4ff:ffff:ffff:ffff:ffff:ffff
                  2400:adc2:600::/39
                  2400:adc2:900::-2400:adc2:aff:ffff:ffff:ffff:ffff:ffff
                  2400:adc4::/39
                  2400:adc4:800::/39
                  2400:adc5::/39
                  2400:adc5:300::-2400:adc5:4ff:ffff:ffff:ffff:ffff:ffff
                  2400:adca::/39
                  2400:add9::/38
                  2400:addb:800::/39
                  2400:addd:2000::/39
                  2400:addd:2800::/39
                  2400:addd:4900::/40
                  2400:adde::/39
                  2400:addf:800::/39
                  2400:addf:1000::/39
                  2400:addf:2900::/40
                  2400:addf:3900::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:40:56:93:20:ab:67:5a:46:d1:11:5a:e8:97:08:69:64:b6:
         4b:db:fb:b3:7f:70:95:cf:dd:56:15:69:4c:dc:90:a7:1f:58:
         9b:4f:8a:59:2f:78:5c:66:23:23:31:fb:82:92:53:01:32:e4:
         b2:14:30:7b:69:36:f5:e3:22:42:b7:22:ff:b4:e1:10:0e:53:
         05:89:18:da:01:ee:96:12:bd:3e:22:b5:4c:99:86:55:5b:e8:
         b5:8b:90:f4:f6:77:87:7c:a7:8c:fa:57:9f:2d:52:7d:90:19:
         4e:fa:00:a7:c2:ba:23:d9:5a:b9:e1:98:9c:b2:7b:26:ee:95:
         75:93:71:aa:58:1d:64:a1:49:03:87:d4:9d:68:94:78:c8:78:
         fd:c1:ac:af:28:fb:14:4e:3c:9d:9e:fa:72:9f:02:18:8d:3a:
         09:86:22:13:0f:fc:92:69:08:ee:08:89:ea:13:c9:08:27:3a:
         5d:21:3b:1c:fc:a5:5d:0a:a5:40:20:92:06:56:bf:df:56:2f:
         56:62:97:63:2f:66:bd:75:06:c0:6b:e7:df:c8:1f:07:c4:8e:
         7d:e2:36:f1:eb:68:8f:40:55:de:c0:cf:21:79:c7:97:d3:8d:
         75:47:90:c7:6f:9a:a5:cd:ee:b7:3c:f5:12:23:36:5a:af:62:
         b1:42:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:46:11 2026 by rpki-client