This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/951A6E226D2E11F09539AE2BC4F9AE02.roa
File:                     951A6E226D2E11F09539AE2BC4F9AE02.roa (raw, json)
Hash identifier:          kpyqqv+V4XFIBcNtP7Mt0OeApO1Q2kl+9rznubt/+L4=
Subject key identifier:   A4:7A:12:F8:34:D8:A0:2A:2F:52:C6:EC:01:4C:52:86:73:A2:20:1C
Certificate issuer:       /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial:       02CE
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/951A6E226D2E11F09539AE2BC4F9AE02.roa
Signing time:             Fri 09 Jan 2026 01:20:40 +0000
ROA not before:           Fri 09 Jan 2026 01:20:40 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     134428
IP address blocks:        125.62.68.0/24 maxlen: 24
                          125.62.69.0/24 maxlen: 24
                          125.62.70.0/24 maxlen: 24
                          125.62.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
                          rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
        Validity
            Not Before: Jan  9 01:20:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696057e7-77d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:a1:e0:dc:c1:1d:9c:30:cc:ab:b7:12:39:
                    3c:a2:46:d6:a5:85:89:3b:c2:be:64:52:cc:6b:e6:
                    7a:6d:c3:aa:ad:26:41:0c:f0:f3:15:46:e4:ed:25:
                    07:3c:ca:5b:ed:3b:00:9e:ca:59:38:08:d4:d2:4b:
                    99:19:ae:0a:63:3b:66:ce:92:cb:7d:57:63:9b:39:
                    b6:36:ba:63:8b:60:38:e9:10:57:68:40:33:b3:8a:
                    04:c2:48:c6:33:4f:f8:47:06:be:2b:72:29:5e:e9:
                    7a:fc:da:3e:7e:82:c9:a0:dc:73:14:17:28:47:ba:
                    70:45:12:b1:a3:21:b9:04:56:61:62:18:ea:94:3e:
                    a3:6b:ed:d1:f4:1e:37:23:65:bf:59:40:f9:fa:81:
                    7d:f7:b8:34:7a:6e:b4:01:6c:8d:3b:21:aa:06:61:
                    c0:0c:55:67:fc:d7:15:03:26:94:eb:6c:98:30:c5:
                    77:97:1b:3b:1c:f4:0a:f3:d2:23:8a:99:34:8d:06:
                    d9:76:1f:57:2e:a2:95:eb:15:1e:41:d6:5d:cc:b3:
                    62:4c:98:fd:4b:52:2b:0b:3e:72:d2:99:53:8e:90:
                    3f:c4:3a:37:89:8b:0a:89:9f:af:e7:ae:ce:66:80:
                    4b:7e:2d:43:5a:ea:6f:92:4e:30:06:c3:b7:5b:8d:
                    02:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7A:12:F8:34:D8:A0:2A:2F:52:C6:EC:01:4C:52:86:73:A2:20:1C
            X509v3 Authority Key Identifier:
                keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/951A6E226D2E11F09539AE2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.62.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:3d:99:9a:df:0c:91:92:74:66:1f:dd:db:aa:b5:96:7a:ed:
         ba:10:05:18:ae:36:3f:25:31:24:83:8c:b3:ad:78:b1:c5:8a:
         59:78:67:06:ad:52:40:45:d0:ad:2e:df:8e:e7:8e:7e:4d:3a:
         03:47:2e:ae:29:29:fd:3a:5a:d3:6d:51:86:b9:27:0c:1d:f5:
         5d:1d:52:aa:e2:97:fd:f2:b7:91:e2:2a:98:08:02:bd:6a:3c:
         a2:b7:d0:50:8d:fd:6a:7a:0d:b5:18:91:24:d6:e1:2f:97:fb:
         ce:1c:48:79:a7:e6:30:40:17:06:9c:66:e2:c2:51:7c:60:74:
         f8:ac:f5:9b:d8:b8:7f:71:18:e6:1b:cb:cd:ee:c5:17:d1:8b:
         b1:1b:f4:6a:7b:3d:4f:bf:e4:a5:0f:3a:7b:ed:3c:00:f0:3f:
         d9:d8:31:bf:0a:de:d4:65:8c:52:a4:7b:25:7b:6f:c9:4b:a4:
         35:5b:22:39:3b:f0:28:16:31:97:1b:a9:0a:01:1f:3a:1d:8e:
         e4:50:88:ce:af:e9:03:24:d2:44:17:cf:14:bf:7f:98:c5:3b:
         ff:ff:e8:b1:1a:cd:ca:47:38:bd:75:fd:0b:85:e3:ba:74:93:
         ae:5f:80:56:b0:11:ac:57:c1:95:ee:a8:fc:57:37:16:dc:ab:
         67:3a:10:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:15 2026 by rpki-client