This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/9C454274FB7711EDA78AAC1DC4F9AE02.roa
File:                     9C454274FB7711EDA78AAC1DC4F9AE02.roa (raw, json)
Hash identifier:          wqjouZNcwnh2SGiZG/2AbocejjI+RqJ9dsDedmDpq0o=
Subject key identifier:   C7:8C:16:35:DE:5A:6D:FF:9B:60:46:00:FE:2C:23:BB:C3:1B:BB:5B
Certificate issuer:       /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Certificate serial:       099B
Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/9C454274FB7711EDA78AAC1DC4F9AE02.roa
Signing time:             Thu 08 Jan 2026 20:16:47 +0000
ROA not before:           Thu 08 Jan 2026 20:16:47 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        113.212.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
                          rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2459 (0x99b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
        Validity
            Not Before: Jan  8 20:16:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696010ae-4286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:c6:38:cc:29:b9:fd:02:ae:cf:da:d4:73:a3:
                    0b:00:cd:f2:f2:cc:eb:cf:4b:16:9e:6f:87:ba:c3:
                    bc:e8:4d:36:7a:5e:c4:8d:c8:66:6e:33:5d:23:57:
                    31:24:38:29:d9:17:3a:0e:44:0d:60:2d:3b:f2:54:
                    a0:22:dd:f1:7d:cb:95:6e:ea:58:b9:e9:a1:0f:d6:
                    a0:86:94:1f:8b:26:5b:1c:5a:f0:e9:5b:67:f7:ed:
                    4d:29:08:d8:b2:94:72:85:35:12:97:9c:ed:a4:5d:
                    64:22:d4:2d:a8:bd:3f:a0:bd:7f:36:39:f1:b2:1a:
                    b5:35:d5:87:7e:14:3b:5e:8b:f7:3c:9a:13:e2:13:
                    e2:fe:51:d8:a0:43:ce:47:67:c6:9d:cf:f4:b2:d2:
                    28:e5:7a:8f:7d:e6:e1:78:53:c6:b8:0d:e1:ca:ce:
                    0e:25:c9:c7:9a:21:e5:f9:4c:09:2c:f1:2b:ef:3a:
                    0f:3b:ff:bb:b8:e1:d0:e5:ab:f0:4a:53:77:30:07:
                    d7:62:69:a0:ae:03:e6:c3:54:3a:e4:b9:83:52:ea:
                    19:0e:11:2e:d7:04:95:3e:6c:75:53:b8:ce:f3:31:
                    94:be:67:f8:0a:70:25:80:17:b7:28:54:4d:ff:5b:
                    99:2e:c0:21:20:a7:40:b1:f2:58:c1:2c:6f:8c:29:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8C:16:35:DE:5A:6D:FF:9B:60:46:00:FE:2C:23:BB:C3:1B:BB:5B
            X509v3 Authority Key Identifier:
                keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/9C454274FB7711EDA78AAC1DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:54:f8:95:30:7e:80:7c:53:fb:fd:5f:53:0c:fa:74:66:5a:
         6c:ee:a9:33:db:79:33:c9:ed:92:64:6b:24:9a:e5:54:e2:ed:
         62:53:de:7e:41:4a:c9:d2:b6:2a:5e:7e:7f:38:f3:ad:9f:38:
         3c:ba:10:62:a8:d9:8d:ed:6d:40:c2:ec:f2:9a:bf:46:f0:b8:
         7d:04:3e:0e:fb:a9:12:0c:4b:2e:9c:f9:eb:98:bc:e0:b8:e6:
         3a:02:2b:64:4f:81:52:da:c9:50:b2:96:39:03:bf:e3:90:b0:
         43:3b:fe:bb:96:8c:e2:93:67:2d:3a:b6:1e:3d:ea:9f:98:97:
         74:a7:c2:4d:d8:09:d6:21:07:9a:ca:a8:68:72:c5:22:a0:66:
         c5:ea:a0:38:31:52:e3:05:63:22:2a:ab:03:df:d2:ea:56:45:
         69:da:a5:0b:f0:b9:cb:66:40:56:cc:85:55:8f:b4:a3:70:d1:
         c7:4e:6c:9d:b7:c2:6b:83:ed:ed:28:2e:0a:05:65:fb:64:41:
         f9:6a:c0:ec:34:1f:3c:b7:61:95:39:76:8b:10:65:7d:47:76:
         9e:ee:12:a1:1e:89:e5:df:60:c1:82:31:62:b1:3e:72:a8:b2:
         da:fa:75:a4:5a:49:4f:b4:ef:80:77:22:01:dc:45:e6:e7:00:
         9d:7b:62:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:22:20 2026 by rpki-client