This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/90C06632E59811F0B79FD920496F56BC.roa
File:                     90C06632E59811F0B79FD920496F56BC.roa (raw, json)
Hash identifier:          mIrTGUcycuuZeuCddW2iOQRr7UqM2beJ2HOVK6YXv/g=
Subject key identifier:   05:D2:C2:56:9F:FA:2F:BC:6A:DC:D9:71:71:6B:25:CD:4D:31:68:BC
Certificate issuer:       /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Certificate serial:       0100
Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/90C06632E59811F0B79FD920496F56BC.roa
Signing time:             Tue 30 Dec 2025 15:59:47 +0000
ROA not before:           Tue 30 Dec 2025 15:59:47 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     151133
IP address blocks:        160.191.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
                          rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
        Validity
            Not Before: Dec 30 15:59:47 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6953f6f3-1c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9d:e9:22:92:b6:4b:a9:1b:17:ae:b2:37:4b:
                    ed:09:4f:06:31:b4:f2:92:36:27:77:67:7c:32:55:
                    8a:ea:5a:fd:0a:86:c0:f8:d8:05:20:25:5a:3e:7a:
                    2a:22:b4:7f:87:16:ec:84:09:61:6f:9d:98:30:d8:
                    9e:98:ce:6c:0f:4f:e6:84:68:b8:9b:fa:a8:80:1b:
                    ea:f2:98:bf:7f:02:7c:a8:f3:c2:9f:2c:12:e3:94:
                    4f:f9:4f:1e:fa:62:02:c7:bb:da:6d:ec:e6:db:ff:
                    fb:b9:07:d5:54:86:d8:3b:24:29:41:9a:08:b5:cd:
                    04:4c:9b:6e:05:b6:b3:28:e0:f6:2d:45:e2:e0:92:
                    85:a4:12:1f:31:b9:df:19:c7:50:44:52:44:70:2d:
                    b2:49:28:cc:00:a8:9e:3a:04:f6:a3:50:c7:98:17:
                    e6:b0:64:8e:a6:1f:72:a4:91:d6:38:01:02:a0:55:
                    ab:e8:40:dd:08:76:02:aa:33:76:64:15:0a:11:71:
                    3a:cd:77:17:cf:35:e1:68:a9:34:6a:a0:e1:b1:49:
                    60:20:9c:98:ea:a6:c1:ca:35:ff:5e:c4:81:cd:54:
                    0f:ae:c2:19:fa:6d:04:39:18:f3:a2:a2:53:ce:22:
                    52:69:e9:a6:ae:ad:88:43:bb:0a:f7:37:1d:65:9b:
                    85:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D2:C2:56:9F:FA:2F:BC:6A:DC:D9:71:71:6B:25:CD:4D:31:68:BC
            X509v3 Authority Key Identifier:
                keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/90C06632E59811F0B79FD920496F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:1e:d1:6f:ac:1c:71:cd:c5:81:57:44:62:ff:f9:43:a3:58:
         19:79:da:80:c4:66:1c:1d:95:7d:3b:88:2a:3f:ad:39:13:aa:
         78:94:19:8c:98:76:43:da:c1:f2:65:b7:09:3d:7e:ec:12:4d:
         41:51:77:8f:01:21:cb:66:3c:68:23:82:eb:75:e3:bf:c7:c7:
         09:bb:92:f8:8b:ca:a0:c1:72:e3:3c:2b:b0:ff:c6:bf:fe:e7:
         1d:be:99:db:7d:01:a8:25:cc:f9:f1:13:21:f2:bd:6c:1f:85:
         55:b6:44:3d:67:50:16:5d:0b:d2:d1:3e:1a:e4:8e:46:f9:77:
         5f:55:19:69:98:af:23:58:44:ee:bc:b3:61:0b:56:4d:30:3b:
         e7:4a:87:5d:a6:99:cb:13:f7:68:d9:33:03:53:47:43:03:58:
         6a:c9:17:dd:42:f5:fd:bd:f3:fd:b0:c3:fc:0f:7d:bd:c7:2b:
         b5:1a:c4:28:ae:c8:b9:7a:ac:4d:dd:e9:2a:7f:7f:62:37:05:
         07:03:de:eb:49:99:a5:5a:0b:72:f0:54:1d:d0:72:d4:22:81:
         b9:7a:66:7a:62:cd:5c:51:be:dc:00:90:9e:66:44:b3:70:3b:
         cc:ab:7a:55:42:a3:e4:3b:6e:7c:5d:f5:84:b6:42:51:97:cb:
         00:0b:01:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:32:03 2026 by rpki-client