This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/403398AA233111EEAF768F66C4F9AE02.roa
File:                     403398AA233111EEAF768F66C4F9AE02.roa (raw, json)
Hash identifier:          /9KNQkM//D8vUx3gi/fFvf18DccyllY4yMf9zti23gE=
Subject key identifier:   FD:E6:2B:FC:7B:E3:E9:F2:CE:0F:94:AF:3B:BC:1E:1F:63:2E:63:8F
Certificate issuer:       /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Certificate serial:       133E
Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/403398AA233111EEAF768F66C4F9AE02.roa
Signing time:             Fri 09 Jan 2026 02:48:46 +0000
ROA not before:           Fri 09 Jan 2026 02:48:46 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     133200
IP address blocks:        167.179.4.0/24 maxlen: 24
                          167.179.6.0/24 maxlen: 24
                          167.179.12.0/24 maxlen: 24
                          167.179.13.0/24 maxlen: 24
                          167.179.14.0/24 maxlen: 24
                          167.179.18.0/24 maxlen: 24
                          167.179.19.0/24 maxlen: 24
                          167.179.37.0/24 maxlen: 24
                          167.179.38.0/24 maxlen: 24
                          167.179.39.0/24 maxlen: 24
                          167.179.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
                          rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4926 (0x133e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191436, serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
        Validity
            Not Before: Jan  9 02:48:46 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69606c8e-fbb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:34:80:1f:23:53:8f:d7:6c:a1:f2:01:f8:7d:
                    26:3e:b3:a0:64:6a:ca:0f:e9:c1:ab:b8:c3:e6:4f:
                    ea:7d:63:5b:c8:ea:5b:d2:70:85:3c:66:da:35:85:
                    49:b2:6b:e9:88:f5:3c:f8:d0:0e:50:57:0d:a7:ef:
                    f4:50:d7:9d:ec:d8:c0:fc:68:df:d3:95:53:44:19:
                    76:d8:c7:71:9b:e7:fe:8b:e4:64:25:20:aa:b9:5a:
                    2c:f6:b4:02:42:5f:84:8a:54:de:c6:88:1f:37:ae:
                    81:75:3f:f7:0b:16:61:20:71:ec:76:f0:dc:53:61:
                    50:90:c3:63:d4:0a:c1:83:ab:92:de:f9:c6:64:3d:
                    46:1a:e3:5b:c7:92:cb:39:66:7e:0d:f7:28:4b:e2:
                    0a:ed:51:12:02:1d:3f:8d:c9:d2:ba:a7:3f:68:86:
                    41:50:4b:cc:cb:61:9e:e9:19:4f:3e:68:e0:dd:d8:
                    26:f4:1f:61:f0:ce:d8:74:54:ad:d5:5b:16:b9:e8:
                    71:7a:53:a0:fa:f8:a9:f3:8b:23:c9:60:9b:4b:ad:
                    fa:80:09:f4:cd:6d:5a:53:7a:37:70:93:39:82:cb:
                    a6:63:e1:cf:7d:80:a4:03:f4:bf:ae:04:a9:5a:8d:
                    4e:96:97:70:9f:a3:7b:b8:c6:35:c5:d8:ee:54:40:
                    8a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E6:2B:FC:7B:E3:E9:F2:CE:0F:94:AF:3B:BC:1E:1F:63:2E:63:8F
            X509v3 Authority Key Identifier:
                keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/403398AA233111EEAF768F66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.4.0/24
                  167.179.6.0/24
                  167.179.12.0-167.179.14.255
                  167.179.18.0/23
                  167.179.37.0-167.179.47.255

    Signature Algorithm: sha256WithRSAEncryption
         c6:87:4f:26:c9:41:a4:8c:c1:17:db:ac:00:e7:55:02:d0:f0:
         83:e0:0b:1d:66:62:8c:b2:cf:cb:9b:0f:93:a9:c6:1d:fb:f1:
         cb:69:69:e2:2b:d9:5f:ba:9a:fb:fd:dc:62:61:68:a8:15:d9:
         ff:f6:4a:da:e7:ba:98:28:e3:e4:0d:08:1b:78:b8:2d:3f:dd:
         35:9d:28:6f:63:ed:2c:4f:16:99:57:c6:26:b9:19:6e:13:43:
         ab:95:66:65:5a:41:89:94:f3:69:56:14:6b:47:46:9e:f9:8e:
         d9:75:74:85:0d:96:e5:b3:00:c4:12:ad:0b:e1:39:f4:b0:95:
         3a:ff:21:15:0b:65:29:bf:b1:d2:3c:dc:3c:10:5e:90:9f:f9:
         c0:32:29:c1:d7:13:83:5e:59:e4:4e:31:68:fa:c5:bc:6b:28:
         5d:62:4a:40:37:9e:6a:70:fb:23:71:c8:cc:13:25:a6:ad:e1:
         ed:2c:30:b9:de:5f:50:40:fa:1b:99:f0:ff:82:56:9d:e2:68:
         21:4e:95:2d:66:e3:6a:d7:52:a4:ca:db:63:11:1b:85:ae:59:
         b1:1d:cf:53:2d:6b:f0:0a:75:9a:d7:20:05:6a:85:ad:56:bd:
         8c:c6:22:18:d5:b1:37:3d:aa:37:6b:55:bc:4e:48:56:a0:11:
         ad:47:d5:3b
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgICEz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTE0MzYxMTAvBgNVBAUTKEFEM0JCNjAzQjE0RUZCMjZENzE1NjgyRkIwNDEzNTFF
QzhGOUQzNjcwHhcNMjYwMTA5MDI0ODQ2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDDA02OTYwNmM4ZS1mYmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6zSAHyNTj9dsofIB+H0mPrOgZGrKD+nBq7jD5k/qfWNbyOpb0nCFPGbaNYVJ
smvpiPU8+NAOUFcNp+/0UNed7NjA/Gjf05VTRBl22Mdxm+f+i+RkJSCquVos9rQC
Ql+EilTexogfN66BdT/3CxZhIHHsdvDcU2FQkMNj1ArBg6uS3vnGZD1GGuNbx5LL
OWZ+DfcoS+IK7VESAh0/jcnSuqc/aIZBUEvMy2Ge6RlPPmjg3dgm9B9h8M7YdFSt
1VsWuehxelOg+vip84sjyWCbS636gAn0zW1aU3o3cJM5gsumY+HPfYCkA/S/rgSp
Wo1Olpdwn6N7uMY1xdjuVECKSQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFP3mK/x7
4+nyzg+Urzu8Hh9jLmOPMB8GA1UdIwQYMBaAFK07tgOxTvsm1xVoL7BBNR7I+dNn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BMzBCNUE0QUM3
OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15YlhGV2d2c0VFMUhzajUw
MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JUdTJBN0ZPLXliWEZXZ3ZzRUUxSHNqNTAyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTE0MzYvQTMwQjVBNEFDNzhDMTFFOEE3NkNEOTE0QzRGOUFFMDIvNDAzMzk4QUEy
MzMxMTFFRUFGNzY4RjY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E
ODA2MDQEAgABMC4DBACnswQDBACnswYwDAMEAqezDAMEAKezDgMEAaezEjAMAwQA
p7MlAwQEp7MgMA0GCSqGSIb3DQEBCwUAA4IBAQDGh08myUGkjMEX26wA51UC0PCD
4AsdZmKMss/Lmw+TqcYd+/HLaWniK9lfupr7/dxiYWioFdn/9kra57qYKOPkDQgb
eLgtP901nShvY+0sTxaZV8YmuRluE0OrlWZlWkGJlPNpVhRrR0ae+Y7ZdXSFDZbl
swDEEq0L4Tn0sJU6/yEVC2Upv7HSPNw8EF6Qn/nAMinB1xODXlnkTjFo+sW8ayhd
YkpAN55qcPsjccjMEyWmreHtLDC53l9QQPobmfD/glad4mghTpUtZuNq11Kkyttj
ERuFrlmxHc9TLWvwCnWa1yAFaoWtVr2MxiIY1bE3Pao3a1W8TkhWoBGtR9U7
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:01 2026 by rpki-client