This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa
File:                     1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (raw, json)
Hash identifier:          q9NaxFoh7uNUufd619+t7d7AzpZNB0LE/R3Fb4zOy54=
Subject key identifier:   36:D0:41:A0:84:B3:13:DE:46:C6:42:B2:BC:CA:D5:91:1D:58:B9:0D
Certificate issuer:       /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial:       05AC
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa
Signing time:             Fri 02 Jan 2026 23:19:17 +0000
ROA not before:           Fri 02 Jan 2026 23:19:17 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     216458
IP address blocks:        117.55.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1452 (0x5ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
        Validity
            Not Before: Jan  2 23:19:17 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69585275-6675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:b6:73:b4:cb:42:7e:17:75:01:e6:73:7b:
                    fa:ac:8c:1d:fa:f9:97:a4:d0:8f:55:86:90:8c:83:
                    ce:3a:32:28:4a:3f:3e:88:98:f9:ae:fc:3c:87:83:
                    7f:4c:79:d2:b8:b2:91:af:b7:08:96:45:b7:13:33:
                    ee:1b:2e:d8:27:b6:50:f6:f4:de:32:9f:ab:1c:cb:
                    b3:be:b7:34:00:88:f1:5e:03:87:c1:50:54:52:c3:
                    a8:fa:0c:97:78:96:b1:63:32:7b:80:fd:3f:eb:8e:
                    81:eb:9f:09:d5:06:81:f5:ac:08:82:af:0b:18:13:
                    c9:75:b3:fd:a5:7e:c1:e6:5b:8b:a6:da:1f:b3:3e:
                    a8:8c:05:6f:cb:ff:45:5f:43:28:22:43:02:14:6b:
                    f4:08:89:35:b8:27:4b:bd:7e:aa:5a:80:04:88:a6:
                    cc:eb:ef:58:35:5e:fb:3b:71:2b:92:32:68:b6:19:
                    25:a3:23:e6:3b:54:c7:d6:b0:63:a4:81:9b:fa:26:
                    b7:b8:4d:5e:7a:40:c3:23:ed:71:a7:d4:07:1e:be:
                    15:70:06:7a:b8:fd:88:33:64:e7:c8:10:07:54:38:
                    dc:78:32:80:2e:58:e0:05:24:b1:55:b2:4d:ea:a3:
                    63:dd:f6:dc:27:cd:67:a8:f0:97:88:1b:65:f1:0c:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D0:41:A0:84:B3:13:DE:46:C6:42:B2:BC:CA:D5:91:1D:58:B9:0D
            X509v3 Authority Key Identifier:
                keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.55.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:94:af:85:5d:1b:f8:3a:f4:25:8b:c0:a4:55:ce:ed:f2:46:
         26:3a:09:c6:dc:af:d5:d8:25:2f:b4:14:a0:2b:33:a3:ea:ff:
         b0:4b:83:4b:12:39:bd:f3:c2:99:7a:53:ce:f1:4d:96:a0:6a:
         37:d0:b8:43:e2:c7:25:93:2b:79:de:19:85:30:3c:22:75:b8:
         9c:6f:8d:c6:ad:18:02:51:88:79:01:54:a2:0a:5c:07:bf:b2:
         d7:84:2a:55:34:4b:33:52:42:b4:07:61:d9:80:02:79:86:39:
         39:83:e9:64:be:33:78:6c:e0:df:c4:61:98:88:41:d8:fd:fc:
         bf:62:bc:12:bb:85:63:de:f0:be:ac:ce:46:49:41:e8:8e:38:
         7a:43:e3:e3:07:9b:f2:9b:b5:0a:0f:ee:15:59:10:1f:10:94:
         1b:5c:96:82:60:3a:fb:59:9a:1c:ae:55:bc:8a:91:77:ae:3c:
         1f:d2:29:c9:5c:eb:9b:62:b9:87:e1:b2:0b:fa:85:9e:9f:e4:
         d0:11:c8:6c:11:00:dc:e8:9a:79:8b:31:3e:84:8e:73:24:01:
         54:c4:11:b0:8e:03:59:69:70:3c:c5:58:0a:91:9e:23:62:71:
         19:56:13:be:d8:da:85:6a:c7:e5:e1:22:9e:f1:03:74:c1:76:
         51:ca:c7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:21:41 2026 by rpki-client