This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/54338F04B19111F0A5C55920C4F9AE02.roa
File:                     54338F04B19111F0A5C55920C4F9AE02.roa (raw, json)
Hash identifier:          E8A0MxozIFUmVWJ+acYyHfG7aVRBN/Bhnpnj79WBN6c=
Subject key identifier:   40:2D:6C:DD:BE:CD:D2:D4:F3:1F:EE:C5:DA:17:AD:06:2B:8B:08:48
Certificate issuer:       /CN=A91C5727/serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E
Certificate serial:       44
Authority key identifier: DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/54338F04B19111F0A5C55920C4F9AE02.roa
Signing time:             Thu 22 Jan 2026 08:03:32 +0000
ROA not before:           Thu 22 Jan 2026 08:03:32 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     154223
IP address blocks:        123.253.180.0/24 maxlen: 24
                          123.253.181.0/24 maxlen: 24
                          2402:2b20::/48 maxlen: 48
                          2402:2b20:1::/48 maxlen: 48
                          2402:2b20:2::/48 maxlen: 48
                          2402:2b20:3::/48 maxlen: 48
                          2402:2b20:4::/48 maxlen: 48
                          2402:2b20:5::/48 maxlen: 48
                          2402:2b20:6::/48 maxlen: 48
                          2402:2b20:7::/48 maxlen: 48
                          2402:2b20:8::/48 maxlen: 48
                          2402:2b20:80::/48 maxlen: 48
                          2402:2b20:81::/48 maxlen: 48
                          2402:2b20:82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl
                          rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5727, serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E
        Validity
            Not Before: Jan 22 08:03:32 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6971d9d4-7dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:00:8d:49:ef:3b:d2:ed:62:08:40:07:ff:8a:
                    2d:11:aa:6c:a0:72:ad:f3:d4:3d:8d:25:54:b0:2f:
                    a9:45:8b:e7:19:9d:c9:0b:91:b2:f1:24:e9:cd:00:
                    33:b7:7b:51:0e:00:36:fe:20:58:27:ba:91:67:14:
                    3b:b4:e9:07:e9:a4:d2:28:41:e8:3d:99:87:aa:6b:
                    8a:62:cc:ef:37:24:17:49:d3:6e:c7:0e:70:36:01:
                    ca:a9:64:fa:a8:f9:85:19:ae:cb:78:78:74:27:a2:
                    a3:f5:97:a7:80:e9:b5:5f:4e:5a:0d:11:28:db:d5:
                    29:ff:2b:46:42:7c:a0:6d:3d:36:79:82:7a:1d:0d:
                    f5:aa:a3:4b:e6:8e:af:ac:be:56:6a:b2:c7:3e:b9:
                    83:8b:fb:a1:ea:a0:cf:73:a1:5f:18:b6:0b:8c:71:
                    18:e2:58:78:91:f7:1c:bc:73:d2:3f:0b:90:4a:73:
                    00:ad:35:75:f5:fa:e6:dd:16:4d:34:58:f2:33:2e:
                    9e:a3:db:bf:e9:6a:a8:82:42:47:02:32:fc:a4:17:
                    f3:74:c1:8a:0f:5d:eb:c7:62:2b:b6:b3:ef:c0:43:
                    ba:b6:7e:2b:ec:db:8a:b7:41:a6:39:cc:b7:40:39:
                    84:04:cd:ff:90:46:be:42:c8:ab:d2:ca:2c:71:93:
                    c5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2D:6C:DD:BE:CD:D2:D4:F3:1F:EE:C5:DA:17:AD:06:2B:8B:08:48
            X509v3 Authority Key Identifier:
                keyid:DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/54338F04B19111F0A5C55920C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.180.0/23
                IPv6:
                  2402:2b20::-2402:2b20:8:ffff:ffff:ffff:ffff:ffff
                  2402:2b20:80::-2402:2b20:82:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4e:d7:8a:44:34:f0:8f:be:6f:5f:7a:d7:93:e6:bd:22:28:26:
         c2:a8:09:a7:b9:21:d3:26:b3:6b:be:a3:f9:4b:64:77:d2:cc:
         91:9d:38:1c:ab:e2:22:b9:02:42:e9:61:fa:a9:01:3f:b7:4a:
         8d:e4:89:e7:d8:d3:d6:83:b7:09:f1:39:d8:08:ff:0e:6b:c8:
         5b:3a:f3:9c:3d:d4:e8:fc:7a:d3:3c:c9:1f:4e:a8:cf:23:9b:
         51:3c:60:a6:29:98:0b:99:cd:f6:ce:6d:e8:ed:25:4b:0e:d3:
         74:0e:98:6e:82:b6:00:1f:17:90:db:aa:48:a4:b8:9a:0a:db:
         48:22:07:19:c8:3c:b0:b6:8a:24:3f:e4:e3:71:01:b1:de:da:
         b5:00:27:3e:aa:2b:1f:26:66:b9:0d:4a:d4:94:59:a4:7c:83:
         f5:6f:3b:f0:2e:44:fa:3d:a6:df:fa:55:79:a2:9f:7f:a2:6b:
         ca:3b:56:bd:c7:ee:d4:9d:c9:17:72:0a:af:da:43:12:a2:fb:
         d1:c7:05:82:16:34:b0:15:0a:fd:a0:96:ea:a9:43:65:4f:d2:
         6f:bb:c5:fd:68:29:3b:16:94:bd:c6:4e:0d:71:da:c6:ba:1c:
         3c:ce:8b:f9:49:e5:5d:4f:5b:eb:b3:f6:0b:dc:cb:71:be:d6:
         55:45:40:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:22 2026 by rpki-client