This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/50A2F64264BC11E8ACC7951EC4F9AE02.roa
File:                     50A2F64264BC11E8ACC7951EC4F9AE02.roa (raw, json)
Hash identifier:          Qe8Z5XoAAZPAzkcOqgnWDrYPcnTBD4PQknNeITp/hJQ=
Subject key identifier:   1B:86:7B:0C:DF:DA:6D:22:6E:34:C0:7F:96:85:EA:22:26:C3:C6:01
Certificate issuer:       /CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C
Certificate serial:       2526
Authority key identifier: 40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/50A2F64264BC11E8ACC7951EC4F9AE02.roa
Signing time:             Mon 19 Jan 2026 07:07:41 +0000
ROA not before:           Mon 19 Jan 2026 07:07:41 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     24218
IP address blocks:        61.11.208.0/20 maxlen: 20
                          116.0.96.0/19 maxlen: 19
                          116.0.107.0/24 maxlen: 24
                          119.110.0.0/18 maxlen: 18
                          119.110.128.0/18 maxlen: 18
                          124.158.224.0/19 maxlen: 19
                          124.158.224.0/22 maxlen: 22
                          202.76.224.0/20 maxlen: 20
                          202.76.235.0/24 maxlen: 24
                          203.223.128.0/19 maxlen: 19
                          203.223.141.0/24 maxlen: 24
                          203.223.145.0/24 maxlen: 24
                          203.223.153.0/24 maxlen: 24
                          203.223.154.0/24 maxlen: 24
                          2001:4498::/32 maxlen: 32
                          2401:5000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl
                          rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9510 (0x2526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650A5, serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C
        Validity
            Not Before: Jan 19 07:07:41 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=696dd83d-0835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:88:df:9f:ba:f9:a8:75:d0:e1:1c:9c:ea:30:
                    e0:d3:88:db:3e:1b:05:ba:86:fb:2e:bf:78:3f:7a:
                    14:64:b9:fa:3a:f3:60:59:37:50:8a:5f:f1:30:d9:
                    43:35:c9:0e:27:5d:98:ba:ed:b6:bf:7a:08:82:72:
                    4d:60:58:87:56:b3:52:b1:e4:87:ff:65:0d:8e:65:
                    b3:45:fd:20:de:b2:a1:6a:88:5f:26:4b:b8:97:c5:
                    b4:b5:a8:c5:7b:11:d4:02:a4:38:81:c1:1b:b4:4d:
                    e3:bc:6c:13:66:3d:40:b3:09:d8:36:3b:a3:8f:2c:
                    6b:50:d6:8b:03:b3:95:02:03:19:70:4f:e3:9e:c3:
                    51:cd:82:b9:97:10:d4:54:bf:66:06:0b:bb:11:be:
                    31:30:03:0c:8c:5e:23:bb:4d:ab:4f:96:19:f3:f5:
                    d0:96:41:f0:a7:13:43:41:97:b8:a1:82:59:79:fd:
                    7a:8c:5b:c5:85:e4:a5:25:1a:ad:2f:d0:d7:20:2f:
                    af:e7:c7:84:1a:c3:a7:b8:76:8d:71:80:14:33:9d:
                    86:ac:1d:d8:09:83:61:46:4e:1f:f7:a2:aa:e7:ad:
                    5a:d8:3b:c3:41:02:64:f9:45:97:44:f3:c1:75:8b:
                    90:46:1e:91:d8:5f:e4:aa:e9:9c:de:d0:5a:f9:f1:
                    6a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:86:7B:0C:DF:DA:6D:22:6E:34:C0:7F:96:85:EA:22:26:C3:C6:01
            X509v3 Authority Key Identifier:
                keyid:40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/50A2F64264BC11E8ACC7951EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.11.208.0/20
                  116.0.96.0/19
                  119.110.0.0/18
                  119.110.128.0/18
                  124.158.224.0/19
                  202.76.224.0/20
                  203.223.128.0/19
                IPv6:
                  2001:4498::/32
                  2401:5000::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:e2:1a:9d:b3:e0:48:d3:04:81:a4:94:d6:21:e7:40:ea:24:
         ff:0c:5e:a1:87:d1:a5:31:e3:7b:f7:17:b1:95:bb:3f:2c:a4:
         35:4d:5f:b0:c2:9d:62:60:15:f1:56:f4:3b:9b:d0:c9:db:d2:
         6c:29:2b:e8:d5:e9:ad:2a:69:2f:e3:53:7e:75:57:43:99:71:
         19:a0:c6:cf:6f:97:88:40:3d:05:07:fc:99:3d:05:ca:44:91:
         9d:f8:c3:72:b5:e7:63:9f:63:6e:a6:d9:f8:64:1c:cd:d9:e4:
         49:04:bb:f5:29:7b:ed:48:40:1c:b0:83:ec:c8:bd:99:b0:58:
         10:62:f7:c2:fd:4e:17:3c:04:be:ff:93:02:67:ef:53:70:c7:
         15:69:22:9d:de:59:db:e9:57:bc:fb:b6:f1:49:f1:92:e5:23:
         4f:a4:03:5c:43:04:c2:24:4f:6b:f4:95:30:18:37:48:bb:2c:
         6f:d9:8a:cb:65:20:52:8c:7e:cb:3f:a9:4b:9f:57:4b:7f:11:
         6b:b0:f0:2e:0a:c2:44:ab:81:8c:61:ef:1f:89:e4:03:4c:d1:
         83:a5:50:35:2f:c0:00:92:e3:7f:06:b1:75:14:5e:ed:5a:54:
         68:78:41:75:fc:dc:20:f5:a7:db:5e:a2:e8:e1:66:4c:f6:13:
         a0:a6:b1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:32:20 2026 by rpki-client