This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/4CB6FAD482E511F0B57EE434C4F9AE02.roa
File:                     4CB6FAD482E511F0B57EE434C4F9AE02.roa (raw, json)
Hash identifier:          qEttsKTy0YlbcbZ2+nMKSb+a0PhaVmMWhX0B06sJToY=
Subject key identifier:   7D:37:46:89:48:0B:A9:BC:A4:97:90:A3:DF:9C:27:53:86:25:51:02
Certificate issuer:       /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
Certificate serial:       02E2
Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/4CB6FAD482E511F0B57EE434C4F9AE02.roa
Signing time:             Wed 31 Dec 2025 01:20:50 +0000
ROA not before:           Wed 31 Dec 2025 01:20:50 +0000
ROA not after:            Thu 30 Apr 2026 00:00:00 +0000
asID:                     45867
IP address blocks:        140.168.64.0/18 maxlen: 20
                          140.168.66.0/24 maxlen: 24
                          140.168.67.0/24 maxlen: 24
                          140.168.78.0/24 maxlen: 24
                          140.168.79.0/24 maxlen: 24
                          140.168.80.0/24 maxlen: 24
                          140.168.81.0/24 maxlen: 24
                          140.168.87.0/24 maxlen: 24
                          140.168.128.0/18 maxlen: 20
                          140.168.135.0/24 maxlen: 24
                          140.168.138.0/24 maxlen: 24
                          140.168.139.0/24 maxlen: 24
                          140.168.166.0/24 maxlen: 24
                          140.168.236.0/22 maxlen: 24
                          140.168.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:48:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738 (0x2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
        Validity
            Not Before: Dec 31 01:20:50 2025 GMT
            Not After : Apr 30 00:00:00 2026 GMT
        Subject: CN=69547a72-fcce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:55:5a:50:58:b6:8a:c7:4c:6f:23:00:b8:96:
                    ae:3a:20:8a:eb:5e:bd:66:47:f3:1a:09:c5:17:26:
                    73:a2:1d:b6:17:2f:68:07:13:6b:49:40:d0:26:03:
                    84:62:69:71:1e:c8:c8:4d:a2:57:29:92:aa:46:66:
                    41:bb:f9:26:2e:82:06:9f:3a:c7:a6:0d:d9:02:24:
                    94:b9:ac:b4:ab:f7:89:b4:be:34:01:a1:76:de:e0:
                    5d:28:96:98:cb:f1:39:21:ce:00:fa:48:bb:e3:59:
                    90:79:f3:67:09:e7:5e:7f:41:81:41:ad:f7:e3:ab:
                    6c:bc:65:58:4c:8a:bb:64:e5:df:38:24:12:4b:c5:
                    b5:c8:6e:4d:42:6b:a4:14:d3:bc:65:09:fe:64:16:
                    52:bb:5f:79:97:71:54:85:27:69:43:00:03:a2:00:
                    d5:d8:60:a5:42:7c:d1:8a:91:a3:1e:ae:e4:d5:70:
                    bc:2b:f2:07:46:b9:fe:e7:b1:d4:e1:26:e1:00:00:
                    d6:02:8f:a0:5f:f2:99:59:af:3a:ac:24:83:0e:65:
                    2f:e8:18:1a:0e:2f:48:79:f8:9f:86:70:9b:56:50:
                    f4:86:6e:e0:3a:a4:07:b4:09:23:98:74:fa:a1:6b:
                    e9:af:77:68:e1:9f:f6:70:a5:0d:c7:ce:9a:73:62:
                    37:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:37:46:89:48:0B:A9:BC:A4:97:90:A3:DF:9C:27:53:86:25:51:02
            X509v3 Authority Key Identifier:
                keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/4CB6FAD482E511F0B57EE434C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.168.64.0-140.168.191.255
                  140.168.236.0/22
                  140.168.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:45:84:06:99:0a:71:f6:5e:e4:43:65:ab:c9:25:8a:a0:6a:
         26:14:18:c9:8b:55:d3:30:95:da:dc:bc:6c:57:98:e1:e8:74:
         8b:96:fd:7a:b1:17:a7:6e:ae:77:f1:a5:1e:1d:7b:49:56:a2:
         fe:c4:ee:12:cb:f9:db:cb:12:58:68:63:28:39:42:a4:e4:17:
         2a:5c:f9:80:20:1a:03:16:fd:62:b7:56:a9:4f:54:18:35:9a:
         48:00:7e:f7:b3:9e:cc:c3:ee:1e:47:86:0d:63:05:e0:ec:99:
         f8:af:51:43:49:22:bb:e1:b7:46:b9:f3:94:6e:cb:39:c2:f8:
         13:05:8b:de:94:25:5e:67:6d:e6:6f:d1:cf:96:47:50:2e:01:
         03:20:bc:52:0e:cb:4b:e7:0a:23:6e:dc:30:e4:60:a0:09:39:
         33:cd:5e:93:a3:69:ba:83:a9:82:cc:f7:e7:dd:04:cc:c9:e5:
         d5:fc:67:99:af:67:05:14:fa:0f:18:00:a2:cd:a8:37:da:32:
         5d:c0:c0:4c:7a:b5:bd:0a:b7:27:2e:ce:65:71:a3:63:fe:85:
         4f:70:fa:3c:79:c6:4a:30:d2:12:41:2c:a9:39:6b:4b:e8:ee:
         8d:fa:d2:8f:7f:5e:ff:1f:48:23:54:e6:f7:2d:fc:42:17:1b:
         4e:f0:94:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:27:39 2026 by rpki-client