This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EC690734721A11EFBDE87567C4F9AE02.roa
File:                     EC690734721A11EFBDE87567C4F9AE02.roa (raw, json)
Hash identifier:          m/ie0Aw7pkPyDajFHmZfLIc/bItBj9MNhbKm4oE/D8c=
Subject key identifier:   7E:F2:38:43:C5:30:DC:4E:89:43:93:BF:AC:23:B6:2E:88:4E:D6:E1
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       01A4
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EC690734721A11EFBDE87567C4F9AE02.roa
Signing time:             Wed 31 Dec 2025 04:24:03 +0000
ROA not before:           Wed 31 Dec 2025 04:24:03 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     131246
IP address blocks:        202.29.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: Dec 31 04:24:03 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6954a563-556d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:f7:04:40:e6:db:0a:56:55:3b:57:7c:18:
                    5d:72:e6:6d:78:ef:b3:6a:d7:f1:1c:25:42:09:33:
                    2c:7f:c6:4b:f7:d2:81:10:89:e3:e4:70:46:7e:1b:
                    19:82:c8:58:fe:c2:4f:d1:03:9b:eb:f7:7e:ef:7f:
                    58:7b:f9:84:e0:eb:df:69:54:da:d8:4f:0d:27:62:
                    54:74:7f:a4:25:ae:cd:23:4d:5b:64:b8:92:46:12:
                    23:f1:34:79:cb:c8:6f:20:c3:1f:b3:10:c3:33:2b:
                    17:a4:c1:8c:d9:c1:f0:b0:b8:3d:ae:4d:93:b8:a3:
                    d2:49:5b:4e:ab:ff:87:9d:3a:6b:7c:aa:c6:39:79:
                    31:b8:19:34:21:1d:8a:c7:95:8b:50:5a:40:62:16:
                    18:04:8d:a7:93:96:5f:2e:35:44:12:36:aa:69:c3:
                    6c:86:cd:ad:2f:bc:55:75:44:64:8f:59:dd:b9:73:
                    bc:1d:7f:31:b4:4f:26:48:47:54:d5:b0:b6:f5:26:
                    de:9c:0d:98:1c:6c:30:37:59:19:79:e5:e2:dc:ca:
                    85:b0:f3:6c:a5:ab:37:df:ba:b3:c9:6d:92:1b:5c:
                    7d:66:6e:1f:6e:84:ec:41:a4:78:42:0b:3e:96:5c:
                    ec:ff:ca:f2:92:1a:d5:13:30:bd:2a:76:e6:e4:f2:
                    60:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F2:38:43:C5:30:DC:4E:89:43:93:BF:AC:23:B6:2E:88:4E:D6:E1
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EC690734721A11EFBDE87567C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.29.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:29:cc:c1:73:02:81:42:95:16:eb:a0:f2:43:93:13:7e:a3:
         cc:48:12:33:35:89:af:a6:4b:51:a1:c3:e9:bb:ae:22:e3:a1:
         a7:a7:37:5f:1a:ee:44:c6:9b:ad:03:a7:c7:5e:cf:49:73:fe:
         a0:93:19:07:3d:6a:3a:72:92:cc:cc:25:3d:55:ca:37:a0:23:
         ce:c5:d9:68:fd:c8:fa:45:9f:91:a4:33:b2:4c:95:b4:18:b1:
         48:4c:c9:40:a0:e9:dc:89:1d:a2:e1:e5:c7:4d:ba:ab:ac:17:
         41:f9:9a:e9:78:b3:fd:c2:0f:15:ad:c4:05:3b:fe:30:c2:57:
         5d:bc:98:a8:45:c3:a5:f3:2b:4a:91:5d:51:8b:4e:b7:aa:d8:
         40:ce:bd:f1:bb:97:ce:98:59:a8:1c:c5:47:a2:90:ab:f5:3f:
         e7:05:c9:3d:4a:9b:11:0e:62:dd:f4:b2:4e:e8:22:02:1a:63:
         a3:1f:e5:c5:c2:b1:20:61:f8:9b:af:85:d1:e6:50:f9:80:93:
         6a:69:4d:a8:c7:9d:21:20:1a:d0:03:8d:d2:b8:86:e5:f7:20:
         11:1f:ee:23:c0:a9:60:da:2b:ae:a8:26:39:05:da:7c:7c:d4:
         82:e7:35:65:29:9b:2a:f0:dc:4e:49:27:8b:d9:4f:da:02:93:
         4d:ad:5d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:23:44 2026 by rpki-client