This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/1A760026E06311EFB6B86F0AC4F9AE02.roa
File:                     1A760026E06311EFB6B86F0AC4F9AE02.roa (raw, json)
Hash identifier:          wyVzttpkaLuZeExQoAvI9kABFCUdp6NpHgSJPUujnAY=
Subject key identifier:   9D:22:AB:47:72:60:1C:4C:FA:1C:1D:2B:B9:A7:D7:CF:72:CC:22:1A
Certificate issuer:       /CN=A91B1AE1/serialNumber=C393FE4E35A26744BF3709BC367660489272D2D1
Certificate serial:       0110
Authority key identifier: C3:93:FE:4E:35:A2:67:44:BF:37:09:BC:36:76:60:48:92:72:D2:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/1A760026E06311EFB6B86F0AC4F9AE02.roa
Signing time:             Fri 09 Jan 2026 05:26:59 +0000
ROA not before:           Fri 09 Jan 2026 05:26:59 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152172
IP address blocks:        36.50.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.crl
                          rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1AE1, serialNumber=C393FE4E35A26744BF3709BC367660489272D2D1
        Validity
            Not Before: Jan  9 05:26:59 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=696091a2-9cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:0d:bf:bb:2b:f6:1a:70:c5:33:8e:8a:53:
                    14:76:43:69:4b:06:c9:26:08:34:89:fd:e3:cb:06:
                    44:9f:40:d4:97:9b:e6:19:d8:00:a4:b7:00:91:f1:
                    4b:8e:60:16:0f:bd:2e:b6:04:11:67:b5:3c:84:20:
                    5c:4b:5b:b2:68:e1:11:b9:fa:20:c5:b9:9d:4f:66:
                    03:85:19:c8:3c:17:97:71:a2:23:33:f2:97:7e:e2:
                    c8:20:20:5e:01:f7:ac:37:08:56:7e:9c:2e:10:89:
                    a9:43:76:75:35:a5:8e:fc:8d:69:95:7a:80:5c:fc:
                    13:37:82:c1:00:06:e5:a4:97:d4:a8:24:a2:e5:1e:
                    e1:2c:7c:6a:19:38:92:2f:b6:44:b1:13:6b:91:f8:
                    58:6b:38:34:89:1c:60:00:88:87:40:29:42:8c:9b:
                    5c:0c:34:64:b4:96:fe:d3:11:ca:b7:98:97:63:9d:
                    6b:ef:74:e8:4f:87:58:fb:14:17:c4:2a:b4:3e:91:
                    cc:d0:ea:84:96:44:32:01:dd:eb:2a:c1:b9:13:71:
                    1d:45:bb:f2:89:08:49:b5:a6:5c:ca:98:01:ca:9e:
                    c3:bc:76:14:c4:98:fa:26:31:ab:a8:88:7b:82:52:
                    3f:b0:0f:61:d3:f5:05:42:8d:ef:f2:2d:7f:dd:fe:
                    92:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:22:AB:47:72:60:1C:4C:FA:1C:1D:2B:B9:A7:D7:CF:72:CC:22:1A
            X509v3 Authority Key Identifier:
                keyid:C3:93:FE:4E:35:A2:67:44:BF:37:09:BC:36:76:60:48:92:72:D2:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/1A760026E06311EFB6B86F0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:65:70:95:3e:f1:7b:7e:9b:a8:67:8d:3d:3b:6e:36:94:20:
         44:0d:8f:9f:43:2b:b9:c4:15:70:70:3d:2b:73:ee:26:d4:9e:
         ad:3b:f6:97:07:05:ea:c8:91:40:07:f7:12:82:d4:da:34:cd:
         67:d8:a8:e9:83:31:75:78:60:7a:4a:a8:ed:ef:d5:28:12:4c:
         d5:c6:a8:fe:46:82:35:9f:1b:05:33:36:c0:2d:1b:7d:93:29:
         83:bb:b4:39:31:c1:6c:c8:e0:1d:8b:87:e4:7e:ad:1a:68:42:
         47:30:20:03:8f:fb:72:5f:9f:c5:81:7f:e4:e1:87:ad:cf:14:
         74:ea:eb:0e:e9:a4:17:fd:0e:02:67:ce:d3:bc:41:fa:44:45:
         46:a5:58:1d:38:ad:c4:93:3e:9e:e2:f5:4c:40:6b:03:8f:71:
         8e:93:5f:ee:92:44:7b:65:7a:d1:39:79:ac:fa:25:e9:05:29:
         38:2d:76:72:60:4b:ee:01:b7:3f:3d:1c:68:c1:db:78:11:90:
         ed:ae:8f:5a:42:78:72:4d:d1:a7:fe:6f:3d:d2:68:7c:c5:c1:
         5c:f9:38:7b:84:f4:02:88:f9:96:dd:e4:94:e1:c5:d5:42:08:
         ab:06:98:bf:3e:59:87:25:21:2d:cd:c1:e1:ef:64:87:f5:5c:
         5c:93:d1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:32:16 2026 by rpki-client