This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/E6F0F39214CE11EA9E740182C4F9AE02.roa
File:                     E6F0F39214CE11EA9E740182C4F9AE02.roa (raw, json)
Hash identifier:          q0g05GgKYjCwgrzaPkpBrbZSSk5mmMAzTCuEcNwRvwI=
Subject key identifier:   CD:5E:82:D0:57:97:D6:21:4B:EC:CC:17:0A:66:41:EB:C7:C9:8C:E2
Certificate issuer:       /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60
Certificate serial:       0DCD
Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/E6F0F39214CE11EA9E740182C4F9AE02.roa
Signing time:             Wed 14 Jan 2026 18:14:54 +0000
ROA not before:           Wed 14 Jan 2026 18:14:54 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     4637
IP address blocks:        134.159.0.0/16 maxlen: 24
                          192.154.16.0/24 maxlen: 24
                          192.154.24.0/23 maxlen: 23
                          192.154.24.0/24 maxlen: 24
                          192.154.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3533 (0xdcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFA0, serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60
        Validity
            Not Before: Jan 14 18:14:54 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6967dd1e-34ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:11:84:4c:82:16:6f:f4:42:07:57:bf:86:e2:
                    b9:bc:56:6e:fb:6b:7a:cd:87:08:14:b1:8f:c8:ea:
                    09:e4:30:6e:7d:50:2e:a0:21:fd:0c:ab:04:2f:53:
                    8c:60:fc:b8:14:64:73:6c:39:f8:3f:88:3a:c0:b1:
                    d6:d5:9f:0c:2f:6b:ae:dd:52:0e:fd:10:b7:d7:49:
                    61:d2:53:61:a2:8c:e7:9d:ac:13:66:4b:eb:5c:21:
                    f9:09:e5:b9:c8:57:65:10:ec:3a:05:80:4c:00:46:
                    57:9d:56:39:f1:83:89:af:25:67:83:d7:b6:72:d9:
                    13:59:ce:83:b5:3c:d2:3f:8f:dd:bd:bc:38:85:dc:
                    ae:b1:bf:cc:40:2b:43:9c:09:44:1f:02:e5:9e:03:
                    7b:60:ac:0a:ee:c3:aa:ee:d4:ce:b1:50:ac:25:95:
                    a6:0a:28:74:ab:07:94:fa:0f:1d:40:63:09:a7:6f:
                    97:ab:de:8e:77:fb:3a:b8:f5:5a:f3:07:88:20:e8:
                    8c:36:bb:b2:52:c8:b6:e3:d2:f8:c1:c0:2b:88:59:
                    b4:23:f4:c9:8d:c0:fa:d5:64:b3:dc:fa:97:fd:86:
                    da:43:19:34:e0:25:c8:4d:bd:52:a5:76:92:48:83:
                    3a:12:33:19:92:f6:35:06:a6:db:03:46:29:4f:06:
                    70:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5E:82:D0:57:97:D6:21:4B:EC:CC:17:0A:66:41:EB:C7:C9:8C:E2
            X509v3 Authority Key Identifier:
                keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/E6F0F39214CE11EA9E740182C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.159.0.0/16
                  192.154.16.0/24
                  192.154.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:20:98:ce:8d:b1:f8:cb:ce:fc:53:4a:ce:4c:c8:91:a2:c3:
         90:df:5c:22:a9:a1:ba:5b:8b:b1:d1:46:76:97:e2:b0:f2:ba:
         15:1f:71:f3:0c:79:46:f7:e3:7a:9e:ef:16:ad:de:c9:d4:c4:
         63:9f:a7:99:c3:f1:a5:60:bc:0b:a9:09:9e:10:30:ab:93:b8:
         11:66:85:62:90:77:69:ab:70:80:1f:ee:e0:a0:b5:9a:11:18:
         e1:46:7f:b5:09:24:89:73:a1:01:19:8d:41:83:2f:df:62:22:
         12:21:3d:c9:73:e8:cf:85:a5:27:64:2b:ce:83:f3:3f:56:3e:
         63:bc:c1:0b:c1:ea:38:c9:e4:bb:b8:35:a3:c9:46:b6:96:65:
         43:eb:17:3b:3f:ad:4b:71:8e:35:a7:db:77:ef:6c:5e:7a:ef:
         47:9c:56:58:da:07:01:d4:ec:ca:67:be:4c:09:90:55:4a:2b:
         a6:67:6a:3a:76:b1:7d:f1:da:31:05:73:08:f2:46:34:28:80:
         e5:18:0e:28:1c:b2:f5:4f:36:5e:c5:28:19:e6:9f:b5:14:c8:
         50:ce:91:2c:75:6c:76:11:24:26:9a:1a:c6:47:c2:58:9c:0b:
         4a:a2:3a:06:d2:10:5c:4b:99:ca:9c:ef:fe:16:18:64:87:11:
         b1:fc:b6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:19:38 2026 by rpki-client