This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EBDC8598721A11EFBDE87567C4F9AE02.roa
File:                     EBDC8598721A11EFBDE87567C4F9AE02.roa (raw, json)
Hash identifier:          LN9AZc67IwEZ5bt3kClNFSKtE9M7+bsy20Xp1u+l3U4=
Subject key identifier:   EA:D4:53:1A:D7:B6:2D:CB:4F:14:4E:81:67:E5:64:36:CC:D6:65:5F
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       01A3
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EBDC8598721A11EFBDE87567C4F9AE02.roa
Signing time:             Wed 31 Dec 2025 04:24:02 +0000
ROA not before:           Wed 31 Dec 2025 04:24:02 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     131221
IP address blocks:        202.29.64.0/24 maxlen: 24
                          202.29.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: Dec 31 04:24:02 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6954a562-6570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6c:a6:c7:8c:d0:77:fb:ef:34:e0:34:b5:12:
                    c4:13:58:eb:e4:40:cc:6f:43:da:8a:bc:80:93:2b:
                    1e:df:99:45:fa:6a:c9:7e:15:59:a3:f5:15:1d:9a:
                    4c:be:95:71:47:26:9b:c7:92:9d:95:2c:40:b0:85:
                    58:08:4f:18:a1:d3:fa:2e:06:d0:d0:4d:d2:9d:c1:
                    8c:e1:41:97:15:fb:1c:2d:33:d4:c5:af:88:27:cf:
                    9b:a3:7b:be:3a:db:a4:8c:45:92:f5:4f:e7:dd:95:
                    cf:a9:c0:66:43:e1:ce:22:7b:2e:bb:0b:5e:5a:de:
                    4e:30:f1:ab:e0:a9:3c:e4:64:7e:2a:ee:ca:fd:11:
                    31:49:ff:20:5e:07:0c:bd:58:60:3b:15:f3:d6:41:
                    a7:14:9d:a1:02:6e:58:60:e4:3b:cf:c6:11:a8:ac:
                    67:18:8a:67:3d:b8:94:30:12:59:3b:6b:b7:20:23:
                    ab:2c:0f:6e:08:df:42:28:87:c7:bb:16:25:58:3a:
                    b1:0c:d5:12:17:3c:01:9e:5c:e4:0a:c6:77:e4:f9:
                    7f:b0:6b:bf:da:99:7c:f6:4d:f4:88:27:c1:10:ee:
                    b9:b0:da:6c:21:5f:7a:21:f0:17:8f:f5:38:c7:de:
                    07:ee:0f:ad:2b:47:b2:fa:aa:91:e7:a8:c3:de:78:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D4:53:1A:D7:B6:2D:CB:4F:14:4E:81:67:E5:64:36:CC:D6:65:5F
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EBDC8598721A11EFBDE87567C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.29.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:86:bd:04:8d:63:51:18:bb:26:23:32:6b:1f:2e:f7:e2:f9:
         d4:8f:88:9c:11:24:39:fc:d0:f5:2b:c5:65:40:60:ae:d0:11:
         01:cc:d1:f0:40:63:15:10:15:14:b8:7a:37:4d:3d:f0:05:92:
         3c:34:f4:c6:3b:d2:18:d3:dd:2b:51:fd:92:46:c1:e5:08:cd:
         17:6e:0a:f1:1f:62:bd:37:64:c3:00:ff:f8:70:5c:77:92:2d:
         08:e9:46:71:88:ac:92:af:47:60:4d:60:fd:26:8e:fa:53:2e:
         20:71:b6:b7:e9:c3:92:55:0e:25:d4:3c:17:b1:fc:c8:66:40:
         4f:f9:18:ac:ba:96:1e:f0:a8:b0:f1:3a:72:e1:7f:38:3d:fe:
         6c:d7:ca:cd:5c:3c:6f:34:56:a2:36:dd:dd:d0:f4:6f:c8:c8:
         d9:c0:13:39:4f:df:ce:be:1c:0c:c4:f8:ca:df:fe:77:ab:98:
         ca:4d:17:e5:30:78:a0:80:8a:18:cc:1f:49:26:78:c8:f5:65:
         21:cc:7b:a7:3a:22:d7:b9:a5:8a:49:0c:5e:b6:82:81:35:6b:
         4b:56:a2:da:1d:24:9b:14:e0:2c:58:94:e0:54:67:42:4f:8f:
         81:53:c9:ab:b2:54:da:f8:fc:8b:9e:76:51:fc:87:5c:b9:70:
         09:65:13:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:43:21 2026 by rpki-client