This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/61491434F5DE11F0B5B96D914B6F56BC.roa
File:                     61491434F5DE11F0B5B96D914B6F56BC.roa (raw, json)
Hash identifier:          dq1WlNZtzt3FloO83Ge6lefNhYL4hNeWMNh4deaJHus=
Subject key identifier:   73:B5:0C:34:0D:5C:E3:9B:C2:0D:71:75:94:CB:59:0A:19:05:74:B9
Certificate issuer:       /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
Certificate serial:       6A
Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/61491434F5DE11F0B5B96D914B6F56BC.roa
Signing time:             Tue 20 Jan 2026 08:59:51 +0000
ROA not before:           Tue 20 Jan 2026 08:59:51 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     9247
IP address blocks:        155.69.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl
                          rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
        Validity
            Not Before: Jan 20 08:59:51 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=696f4407-8a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:eb:6a:e8:b4:d5:4e:02:ec:6b:0a:05:15:5a:
                    45:d6:76:9b:1f:a0:3b:9d:3f:87:4e:6e:6c:7a:b9:
                    c7:99:0f:df:a6:0a:33:d7:53:eb:54:58:2b:0f:24:
                    c6:b6:61:92:fc:a6:a6:c8:d9:42:2e:48:05:4a:0d:
                    bd:bc:48:29:58:68:04:b8:67:d1:f6:f4:32:ec:6f:
                    d7:a3:3a:26:90:c6:8f:3f:a8:13:87:b9:cf:4a:48:
                    d6:5e:ee:8d:f2:bb:66:df:47:52:aa:58:a6:3a:1a:
                    32:25:69:5d:23:ff:82:4d:8b:a4:1e:cc:3c:1d:61:
                    98:98:ed:4a:24:ce:92:6c:8d:8e:e3:3c:4d:74:76:
                    e0:9e:58:64:f4:90:e6:51:85:0d:da:d7:41:f8:c1:
                    ec:b5:61:40:b7:ab:a8:3e:f2:bd:17:bc:d0:d0:76:
                    0c:50:d0:93:3c:f4:fb:73:8f:45:ad:36:da:9c:bc:
                    14:34:82:91:33:a9:ac:ae:a9:f1:32:77:0d:1b:8a:
                    d6:c2:f9:e6:a3:98:43:77:47:bb:f7:82:cc:bd:d1:
                    6a:39:87:6f:d9:e2:7f:d3:81:f3:f2:05:40:f7:cf:
                    d1:ba:3d:2b:85:bc:65:af:84:08:bc:43:5c:30:f0:
                    3f:54:ca:bc:96:84:8e:ac:73:fa:5b:2e:da:62:06:
                    39:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B5:0C:34:0D:5C:E3:9B:C2:0D:71:75:94:CB:59:0A:19:05:74:B9
            X509v3 Authority Key Identifier:
                keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/61491434F5DE11F0B5B96D914B6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.69.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:8f:8b:ac:08:aa:ea:e0:3f:f4:b9:9b:22:ad:f5:be:ce:00:
         78:cf:d7:28:53:ad:63:26:6b:29:5c:98:0e:f6:11:10:5f:12:
         92:02:06:1c:7d:eb:be:92:e8:f2:41:ba:a5:37:91:c8:5a:d0:
         3f:ca:09:07:9e:60:09:42:fe:24:c8:e4:e6:22:9c:c1:46:02:
         f2:bf:ae:3f:7c:c1:4f:2c:fe:5a:b3:27:de:5e:fb:21:39:e2:
         c2:32:b2:59:ab:10:eb:48:de:75:53:72:10:fc:79:55:33:3b:
         d5:e7:a6:0f:a0:4c:d0:26:2e:b9:90:4e:2f:89:d5:b1:4b:6a:
         23:4d:d1:72:6b:82:b5:ab:0d:d7:ec:18:60:ec:5c:a5:57:25:
         dc:47:2e:49:75:52:ba:6f:bb:29:22:50:1f:05:ea:a3:12:11:
         c3:20:7e:da:dd:1e:e4:ed:23:ce:f2:b4:98:d9:93:e3:3b:97:
         d8:78:e2:29:5d:ef:00:e5:27:b2:14:77:8c:54:d8:fa:3f:cf:
         d2:21:16:4e:fb:d0:56:1b:52:a2:c8:8f:2b:c5:ab:76:2e:43:
         db:8e:a7:06:78:85:39:79:e5:b7:59:48:3e:b0:17:48:d2:92:
         c1:45:d9:56:6f:8d:9a:38:e9:e9:a0:e4:f9:4d:36:cb:e0:42:
         b7:16:16:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:01:20 2026 by rpki-client