This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/76D77AC4DEE211F08292771D536F56BC.roa
File:                     76D77AC4DEE211F08292771D536F56BC.roa (raw, json)
Hash identifier:          Hnw6CDGrIMImCIdWX9jKEXHdyO2vHr/ax7YfwkVJVgg=
Subject key identifier:   14:E4:F6:C5:6A:79:2E:64:5C:BE:57:E3:9C:0C:F2:01:D9:7C:B4:4B
Certificate issuer:       /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial:       0113
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/76D77AC4DEE211F08292771D536F56BC.roa
Signing time:             Mon 22 Dec 2025 03:01:09 +0000
ROA not before:           Mon 22 Dec 2025 03:01:09 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     20473
IP address blocks:        45.121.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:33:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
        Validity
            Not Before: Dec 22 03:01:09 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6948b474-647a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:18:18:52:45:ca:85:df:3f:89:ec:7f:7f:
                    13:da:b2:63:eb:bf:3d:e6:e2:03:02:27:63:df:56:
                    82:ad:b2:1c:a8:f4:cc:10:d5:24:61:47:96:57:81:
                    14:b8:cd:9d:a2:84:fa:26:2f:2b:fe:21:3f:2c:50:
                    5e:31:1e:03:4d:36:fa:1e:8f:5f:5a:d1:d9:57:02:
                    fd:4b:55:21:83:d9:04:c6:2f:57:4b:43:fa:aa:f6:
                    21:da:2a:80:e8:1c:c4:5f:19:1b:fd:4e:49:c0:cd:
                    ef:fc:54:76:62:1e:ec:b3:32:3b:28:07:d4:10:1b:
                    21:81:30:d3:d7:67:64:15:43:08:64:19:a3:26:36:
                    fb:46:5b:61:ce:85:46:9b:e7:0d:23:05:16:d7:c9:
                    7d:07:08:61:c5:d3:90:6c:6f:f0:d1:53:cb:ba:6a:
                    b8:97:61:4c:d6:8c:de:a7:27:21:e7:18:69:cd:68:
                    81:0b:5d:44:75:9f:8e:35:23:a5:6e:9e:c1:21:27:
                    18:08:66:21:13:23:54:79:6e:e2:30:70:d2:4a:e9:
                    16:7d:f4:eb:06:b9:9a:ae:9f:1b:12:cb:fb:1c:c9:
                    5e:d7:06:7c:71:c6:9a:46:20:bc:ec:18:a7:4e:21:
                    ca:29:85:2f:e3:f4:2b:86:c8:16:f8:57:1a:05:22:
                    10:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E4:F6:C5:6A:79:2E:64:5C:BE:57:E3:9C:0C:F2:01:D9:7C:B4:4B
            X509v3 Authority Key Identifier:
                keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/76D77AC4DEE211F08292771D536F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.121.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f9:c6:bf:24:a9:4f:f8:bd:d5:56:ed:58:90:f1:4d:86:50:
         26:2f:93:e1:c1:4b:dd:e9:34:51:2b:21:ed:97:11:1c:7c:cc:
         64:1a:3d:c1:9f:4d:99:19:e8:0d:e8:b4:61:41:d9:83:44:fd:
         00:5d:58:b7:32:5e:7a:8d:ba:33:25:4c:03:48:c4:75:4b:d7:
         69:09:5b:6a:43:91:37:cc:53:e2:a4:67:c0:ad:5d:cf:a8:86:
         cd:e7:ef:51:2b:f9:25:f4:05:4f:7a:0c:8c:f6:d7:9a:83:10:
         55:19:22:fd:8d:8d:87:18:5d:bf:60:c7:12:5d:1e:16:fb:1c:
         53:56:65:a1:58:20:05:0b:03:fe:b0:90:73:0a:0b:16:56:bc:
         c5:02:1b:b5:cd:20:a4:a8:26:60:e8:70:70:1b:83:b4:87:d0:
         d4:59:14:cb:6f:54:25:73:6b:9c:24:8a:50:58:b5:db:da:53:
         0f:f7:12:a1:e8:9d:54:cb:39:b5:2f:49:1d:18:ef:96:d2:8c:
         dc:57:05:ef:30:6a:a8:16:dc:01:24:72:9a:e6:0e:a1:f2:73:
         4d:58:9f:29:98:77:fe:7a:c1:8b:fc:2d:af:2e:23:3d:3e:7f:
         6c:7b:c8:f3:d9:36:fb:d4:d7:23:79:53:aa:2d:c2:a8:70:30:
         40:e0:21:80
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU1Q0UxMTAvBgNVBAUTKDgyOEE0N0QzQUM2RTZCMDM2MDExQzIzMzIzMTcwQTk3
MzFCQUQyMjQwHhcNMjUxMjIyMDMwMTA5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQ4YjQ3NC02NDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyngYGFJFyoXfP4nsf38T2rJj67895uIDAidj31aCrbIcqPTMENUkYUeWV4EU
uM2dooT6Ji8r/iE/LFBeMR4DTTb6Ho9fWtHZVwL9S1Uhg9kExi9XS0P6qvYh2iqA
6BzEXxkb/U5JwM3v/FR2Yh7sszI7KAfUEBshgTDT12dkFUMIZBmjJjb7RlthzoVG
m+cNIwUW18l9BwhhxdOQbG/w0VPLumq4l2FM1ozepych5xhpzWiBC11EdZ+ONSOl
bp7BIScYCGYhEyNUeW7iMHDSSukWffTrBrmarp8bEsv7HMle1wZ8ccaaRiC87Bin
TiHKKYUv4/QrhsgW+FcaBSIQAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBTk9sVq
eS5kXL5X45wM8gHZfLRLMB8GA1UdIwQYMBaAFIKKR9OsbmsDYBHCMyMXCpcxutIk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTVDRS80NTFBODIzQThC
N0IxMUVGODI5MDMyN0ZDNEY5QUUwMi9nb3BIMDZ4dWF3TmdFY0l6SXhjS2x6RzYw
aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dvcEgwNnh1YXdOZ0VjSXpJeGNLbHpHNjBpUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzU1Q0UvNDUxQTgyM0E4QjdCMTFFRjgyOTAzMjdGQzRGOUFFMDIvNzZENzdBQzRE
RUUyMTFGMDgyOTI3NzFENTM2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtedcwDQYJKoZIhvcNAQELBQADggEBAIL5xr8kqU/4vdVW
7ViQ8U2GUCYvk+HBS93pNFErIe2XERx8zGQaPcGfTZkZ6A3otGFB2YNE/QBdWLcy
XnqNujMlTANIxHVL12kJW2pDkTfMU+KkZ8CtXc+ohs3n71Er+SX0BU96DIz215qD
EFUZIv2NjYcYXb9gxxJdHhb7HFNWZaFYIAULA/6wkHMKCxZWvMUCG7XNIKSoJmDo
cHAbg7SH0NRZFMtvVCVza5wkilBYtdvaUw/3EqHonVTLObUvSR0Y75bSjNxXBe8w
aqgW3AEkcprmDqHyc01YnymYd/56wYv8La8uIz0+f2x7yPPZNvvU1yN5U6otwqhw
MEDgIYA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:54 2026 by rpki-client