This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/486020FAF24811F08C4BA3F45A6F56BC.roa
File:                     486020FAF24811F08C4BA3F45A6F56BC.roa (raw, json)
Hash identifier:          2IrRPPLsJdZHNiusO1kaOjKLJN4G/VTO25tG6k4yaK8=
Subject key identifier:   2F:06:D4:A7:76:45:70:ED:05:73:3D:B1:B8:20:41:EC:40:7A:9C:86
Certificate issuer:       /CN=A91CCCF4/serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED
Certificate serial:       0A
Authority key identifier: AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/486020FAF24811F08C4BA3F45A6F56BC.roa
Signing time:             Thu 15 Jan 2026 19:28:46 +0000
ROA not before:           Thu 15 Jan 2026 19:28:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17994
IP address blocks:        110.34.48.0/22 maxlen: 24
                          2401:4540::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.crl
                          rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 07:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCCF4, serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED
        Validity
            Not Before: Jan 15 19:28:46 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69693fee-6a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:96:94:9d:80:e0:35:04:e9:a6:cd:6d:4a:
                    b1:b9:43:18:18:60:31:fb:2d:7c:d4:a5:ba:d2:23:
                    2c:23:d7:74:9c:09:2e:60:17:91:1a:30:42:7e:9b:
                    21:08:ad:59:0c:8e:62:46:84:48:74:55:68:c5:ce:
                    1b:b9:ea:4a:8b:5a:ad:25:9f:1a:3f:39:4e:54:84:
                    d9:1d:4e:f9:5b:a7:d7:e0:19:f5:22:52:61:8e:3c:
                    ca:da:b4:7d:cf:e2:a6:bd:28:03:15:c7:26:79:29:
                    93:90:5f:19:51:04:a4:e2:94:2a:dd:98:4c:9e:50:
                    a3:4a:7f:14:dd:16:04:a1:b6:d0:ca:e3:a3:e0:20:
                    c9:f5:b6:1a:cc:37:9b:8e:74:6b:e4:6c:29:6a:8d:
                    6b:a0:70:8f:f1:9a:94:6f:25:fb:4d:17:1e:73:f5:
                    2d:6a:10:a2:af:e5:4d:a3:f9:f0:c6:30:b3:bb:26:
                    e5:ed:73:5e:79:9e:09:61:7d:82:f9:26:9d:05:1e:
                    05:ba:b2:25:ff:90:ee:88:16:84:1d:d0:27:3f:83:
                    ef:64:1c:20:87:eb:5e:f0:bf:8c:fa:d0:d8:f3:d1:
                    e0:c7:10:ed:3c:4c:07:18:f8:1e:b8:b7:3c:f0:24:
                    b7:be:b5:4e:f8:60:77:71:64:16:78:25:23:ea:cb:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:06:D4:A7:76:45:70:ED:05:73:3D:B1:B8:20:41:EC:40:7A:9C:86
            X509v3 Authority Key Identifier:
                keyid:AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/486020FAF24811F08C4BA3F45A6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.34.48.0/22
                IPv6:
                  2401:4540::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:f2:83:ff:3f:f3:e1:4f:05:4c:4c:22:d0:66:01:fb:60:13:
         1c:1a:21:9d:c6:e4:4c:e7:3a:57:f9:c3:e4:8c:7b:ea:81:ad:
         ad:5e:3a:bd:80:31:7d:7a:56:6f:c9:57:f6:90:19:73:4f:d7:
         8e:cc:94:9d:a5:0d:b6:3c:10:13:66:10:37:54:9a:1f:5a:fd:
         b3:ec:df:9f:02:73:ac:b6:26:b9:82:58:0e:f5:bd:61:f5:13:
         e6:b8:9c:e7:1d:1a:bc:01:04:10:e2:79:39:4b:4a:2a:99:a5:
         05:4d:a8:73:d3:50:29:36:7e:ce:55:db:e1:f2:07:3a:88:09:
         4d:2c:d2:a0:5e:5d:2a:e5:dc:08:c2:d6:fe:ce:3b:1c:9b:9b:
         c9:6c:41:39:e6:8c:d5:f8:d9:fe:a8:ae:5d:6a:de:10:11:57:
         86:e0:e7:7a:a5:90:68:4b:d9:e1:b1:c1:06:ec:48:4a:eb:f9:
         bc:07:6e:9c:92:f4:27:4b:74:d0:56:e3:c1:b2:1d:c0:9e:06:
         8d:25:75:18:91:0b:31:cd:73:d9:2e:45:e7:13:07:1e:c2:b3:
         b5:ba:74:b2:ba:94:dd:bd:73:56:f5:9d:c3:89:c3:cb:e3:58:
         98:80:98:c8:a3:29:d2:40:f1:ec:07:ff:87:e8:ae:5b:52:36:
         6a:12:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:15:57 2026 by rpki-client