This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/CD58C016F98011F0A50135134F6F56BC.roa
File:                     CD58C016F98011F0A50135134F6F56BC.roa (raw, json)
Hash identifier:          WgbBegcXtuLajd68s6jhkFjYtGrfcRJvzcXwpj9KLWg=
Subject key identifier:   D0:E1:A8:9C:B9:87:6E:4D:1B:75:D2:58:18:83:42:C2:A6:4F:03:E4
Certificate issuer:       /CN=A91A3AD9/serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
Certificate serial:       03
Authority key identifier: EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/CD58C016F98011F0A50135134F6F56BC.roa
Signing time:             Sun 25 Jan 2026 00:00:04 +0000
ROA not before:           Sun 25 Jan 2026 00:00:04 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     4766
IP address blocks:        151.158.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AD9, serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
        Validity
            Not Before: Jan 25 00:00:04 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69755d04-f7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:91:d2:61:19:ae:e6:18:96:f1:c4:cd:4e:
                    2f:b2:e8:91:64:b7:8f:5b:6b:23:cc:97:dc:82:69:
                    72:51:e2:42:1b:d7:25:7a:65:6c:57:d4:b1:55:fc:
                    3e:5e:fa:0b:9a:b8:a6:8d:9d:cc:9b:8e:25:cd:04:
                    d4:24:c2:21:69:1d:4d:4e:48:81:8d:66:2c:76:25:
                    ac:b4:01:9b:42:cb:20:a3:b2:6b:6b:5c:29:f7:a5:
                    c8:99:9e:94:6e:fb:1d:7e:a4:99:10:c1:76:a0:9b:
                    da:17:f2:00:49:7d:02:40:bb:a9:30:f6:c7:e0:bb:
                    e0:6a:8f:5d:7c:80:76:b3:d4:13:9d:4e:f7:11:04:
                    e0:1e:1d:4b:c1:2c:2f:36:e3:70:92:6a:fb:9f:5f:
                    f0:4c:b2:95:81:f6:69:d1:db:19:07:56:d0:0c:81:
                    31:59:c3:01:50:5a:a0:1e:6a:a9:6b:82:e9:f6:82:
                    6e:33:45:84:1b:44:1a:77:de:e0:b8:8a:41:da:c4:
                    92:ba:a0:53:64:e7:bd:68:cc:37:5f:1a:47:3e:d8:
                    a9:86:86:ca:53:c1:0b:15:04:1e:1e:fe:eb:23:0d:
                    92:77:aa:78:7a:b7:9b:8d:17:23:86:4a:1e:80:f0:
                    87:37:4f:c7:f2:c9:72:1d:6c:e3:5e:c9:61:1a:50:
                    ae:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E1:A8:9C:B9:87:6E:4D:1B:75:D2:58:18:83:42:C2:A6:4F:03:E4
            X509v3 Authority Key Identifier:
                keyid:EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/CD58C016F98011F0A50135134F6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:77:10:aa:bf:28:7b:5d:f6:ba:3d:e3:69:17:2c:ad:7e:c4:
         17:6e:a6:68:b1:51:36:1d:8d:c3:d1:f5:29:44:72:08:0e:75:
         2b:59:ae:d7:51:6f:cb:b2:c9:ae:7f:2c:3b:15:ee:56:85:8c:
         f2:4c:4e:25:16:98:ae:39:a0:64:23:ba:c0:17:86:e5:5d:7a:
         ca:ce:fc:83:aa:cf:9c:82:88:02:90:4a:a0:8f:5b:82:a3:86:
         c2:25:53:4e:7d:56:2a:71:36:ce:4b:46:e2:ad:93:3b:53:06:
         db:29:98:0f:8d:c1:ee:47:6b:87:55:ae:fb:82:0b:56:73:7d:
         fb:9f:35:04:43:48:76:fc:9b:64:39:cf:b1:44:c9:af:81:a6:
         f2:18:c8:16:cf:8c:0a:48:8d:a2:c6:0a:87:c2:6f:03:be:b0:
         ee:43:67:2b:68:12:f5:df:6d:75:50:68:2d:e7:e6:11:01:aa:
         98:af:b0:be:f3:18:c0:e4:0a:e5:fe:4d:75:5c:94:b0:67:32:
         0a:82:22:e6:c2:89:b7:39:6c:60:07:ab:e1:d4:6a:14:94:08:
         08:40:9b:a1:3d:18:9c:0e:b2:4b:fa:96:ac:7b:7f:28:df:e7:
         f5:98:67:a4:de:09:27:22:b1:99:42:9e:04:fb:bc:ad:af:42:
         f0:66:3c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:18:16 2026 by rpki-client