This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/AFF169A0F34111F0B7AB4BD35C6F56BC.roa
File:                     AFF169A0F34111F0B7AB4BD35C6F56BC.roa (raw, json)
Hash identifier:          xgLtW76MmnPlrBwpNDs13VQLfyrLcwzm2q1UY5AfPA0=
Subject key identifier:   21:C7:62:EE:F4:F0:DA:59:C6:10:4A:0B:44:E3:18:7C:8D:89:40:0B
Certificate issuer:       /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial:       04B1
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/AFF169A0F34111F0B7AB4BD35C6F56BC.roa
Signing time:             Sat 17 Jan 2026 01:13:10 +0000
ROA not before:           Sat 17 Jan 2026 01:13:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134134
IP address blocks:        116.204.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201 (0x4b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
        Validity
            Not Before: Jan 17 01:13:10 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=696ae226-a11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:28:53:9b:21:45:e8:2c:be:a6:5f:8f:b8:
                    3f:db:26:cb:71:eb:94:c1:cd:e5:95:cf:d4:92:f0:
                    61:2c:62:62:4b:67:3e:63:7f:8f:ac:46:d1:20:cd:
                    df:d0:11:8c:12:db:80:9c:82:12:36:5c:a6:94:ea:
                    a2:63:8e:2c:13:45:8a:f2:cb:a1:46:ad:64:3a:62:
                    8f:95:50:52:d7:1c:10:dd:e2:ae:bc:4d:47:9f:a2:
                    fc:ce:54:ec:0c:15:cf:f4:14:13:3d:b8:88:ea:90:
                    30:8d:8c:81:c3:0e:0d:37:c2:5e:b4:ad:ca:51:0c:
                    91:97:50:9c:be:3b:62:4c:e7:84:dc:d2:fa:ba:ef:
                    e3:c1:3f:36:a9:7a:bc:fb:29:fb:46:b9:67:68:f6:
                    e7:9b:47:cf:14:0a:97:21:97:b9:4c:c6:d2:38:ef:
                    df:19:fe:a1:8b:63:f7:b0:48:36:b3:fa:01:63:9e:
                    56:c1:28:dd:0a:4f:0c:e8:74:f4:75:b2:d0:20:6a:
                    b4:26:41:6a:90:a8:2f:b4:56:ab:2f:82:6f:6a:75:
                    6c:bf:6f:78:fe:94:66:00:75:81:26:c9:aa:f9:68:
                    0a:fb:bd:37:f9:a2:de:43:4a:73:18:d2:41:97:d5:
                    e5:da:24:82:cb:25:af:2c:9d:0a:3a:e8:ac:0d:b8:
                    93:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C7:62:EE:F4:F0:DA:59:C6:10:4A:0B:44:E3:18:7C:8D:89:40:0B
            X509v3 Authority Key Identifier:
                keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/AFF169A0F34111F0B7AB4BD35C6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:4d:b4:a5:5c:45:95:f6:60:b9:da:f9:38:bd:1a:55:27:6a:
         db:56:9e:4a:e7:b8:d8:d7:a5:b7:60:5f:6e:6f:04:e8:f5:18:
         75:5a:7b:34:7b:0b:9d:02:6d:9b:57:1f:b7:dc:45:26:9b:f2:
         eb:ff:60:a0:31:c6:c2:09:3f:fd:8d:9d:c8:bd:69:19:71:90:
         86:27:97:50:d0:03:2e:f1:77:55:d5:37:76:71:ba:c1:91:57:
         9a:8b:e2:71:38:c0:c4:55:6f:11:ab:27:9a:e1:6d:a5:9b:b5:
         63:81:81:2b:db:d8:a5:3e:7e:12:5e:37:97:4e:11:5a:96:70:
         40:41:db:64:eb:80:7e:20:ba:c2:e1:87:93:b2:85:29:fd:01:
         ee:84:c0:1c:2e:04:e6:2b:24:2d:53:e4:98:71:f2:35:55:0f:
         25:cb:61:74:ef:45:aa:18:10:59:fb:a6:df:25:18:51:50:52:
         20:af:70:dd:4b:69:8d:9a:1f:03:dd:9b:d8:8b:82:c8:24:66:
         0f:c2:14:7e:5a:0c:c1:24:3f:c8:ca:36:d4:d3:da:30:44:10:
         3a:fb:30:bb:43:7f:cd:4b:d8:ad:e0:1e:62:e9:bc:87:c1:bf:
         28:23:d3:b2:c2:77:03:84:c7:84:09:34:5b:3e:53:c2:c2:7a:
         73:07:f1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:00:53 2026 by rpki-client