This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5E7453DEF28911F0A11FA9356B6F56BC.roa
File:                     5E7453DEF28911F0A11FA9356B6F56BC.roa (raw, json)
Hash identifier:          YUaOys6YdBxn6NKq0tx1UZ2YrivknVlZRT0ZDWGKzjw=
Subject key identifier:   31:F0:12:99:E8:2F:7A:49:34:4F:50:18:1A:FD:AC:38:1F:0D:FE:9B
Certificate issuer:       /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
Certificate serial:       6C
Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5E7453DEF28911F0A11FA9356B6F56BC.roa
Signing time:             Wed 21 Jan 2026 03:18:02 +0000
ROA not before:           Wed 21 Jan 2026 03:18:02 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     9419
IP address blocks:        155.69.1.0/24 maxlen: 24
                          155.69.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl
                          rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
        Validity
            Not Before: Jan 21 03:18:02 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6970456a-98d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:a9:00:98:cf:60:7c:b3:0a:7d:64:87:60:
                    23:72:6b:a0:c1:90:a8:44:75:3f:32:09:86:d1:3c:
                    2d:a5:96:68:9f:1e:25:fe:09:ab:75:37:53:d9:6c:
                    10:ab:d0:1a:5a:99:9f:a1:61:89:38:e7:da:f8:0e:
                    7d:fb:c7:21:b9:f3:4b:27:b1:1c:2e:c2:09:e3:8d:
                    85:20:f8:f8:83:20:f4:c8:71:91:cc:3e:0f:0c:a4:
                    ab:db:40:40:09:fc:c2:fb:f5:73:22:e9:ee:7e:9b:
                    22:b1:e7:f1:f5:f1:53:87:90:08:de:87:9e:07:5b:
                    79:6a:94:23:2e:43:b5:fd:d9:71:6b:7b:c0:71:23:
                    45:e1:55:d0:22:3c:de:dc:61:1d:e9:53:55:a7:ad:
                    e2:0c:11:cb:7e:af:3b:44:d2:84:89:2b:83:4b:a0:
                    dd:e7:b2:a0:78:00:33:95:39:8f:b3:41:c7:23:df:
                    af:26:bf:4e:d6:45:9f:a3:02:d2:a1:df:fc:35:7c:
                    6b:e8:cb:37:06:21:0a:de:14:49:0b:67:d6:76:48:
                    ef:18:8c:82:ef:6e:ce:66:8e:58:85:2c:ed:61:f6:
                    31:7d:21:5d:eb:eb:7c:7c:2e:0d:cd:b2:e8:df:9b:
                    8b:63:6a:01:98:d4:8c:a4:19:a7:49:56:de:20:c7:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F0:12:99:E8:2F:7A:49:34:4F:50:18:1A:FD:AC:38:1F:0D:FE:9B
            X509v3 Authority Key Identifier:
                keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5E7453DEF28911F0A11FA9356B6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.69.1.0/24
                  155.69.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:7c:9e:5a:ec:7e:f0:a8:f9:5e:67:e7:29:5e:9a:cb:b2:81:
         d9:bd:75:94:57:69:2e:62:50:ca:f9:61:fe:4d:17:b3:2d:89:
         b4:d4:65:af:45:6f:f7:e9:df:16:c3:72:1a:b4:e5:85:44:ec:
         61:c8:0d:68:9b:3d:22:10:f2:98:7c:96:f7:e1:01:f8:d8:66:
         0c:78:01:ee:35:3e:12:c1:55:41:e2:9c:12:2c:55:3b:4e:62:
         0b:16:25:aa:70:88:2c:00:65:06:40:53:76:8d:73:33:03:f8:
         dd:3e:53:92:61:b8:a2:e6:9b:15:5b:2a:02:78:fd:18:62:8b:
         ce:6f:29:8a:2e:be:70:bb:c9:85:fe:1f:ba:99:36:c6:71:4f:
         fa:d7:6c:7d:89:a0:62:ff:fe:6b:b6:58:a9:21:73:36:fd:8c:
         c4:ea:84:b1:11:df:5a:ad:12:36:c3:68:77:05:e2:2a:9a:56:
         d7:0f:2c:b8:a6:19:1d:96:58:a8:01:de:4f:80:e5:35:00:f3:
         59:c8:30:8a:af:c5:68:68:36:66:76:64:1d:f3:28:18:fe:f3:
         14:21:a2:01:91:2a:30:f7:d1:99:fc:ae:8a:12:02:90:22:29:
         70:db:86:76:60:59:3b:45:b0:18:f4:0d:9e:6f:17:ff:7e:68:
         0c:f5:6b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:01:24 2026 by rpki-client