This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/E13D8940342E11EF84328672C4F9AE02.roa
File:                     E13D8940342E11EF84328672C4F9AE02.roa (raw, json)
Hash identifier:          AqmSo+omsJDW3m7Q6QrgfhcFggvVu5zVAqb+d9Qm5/A=
Subject key identifier:   1B:1A:54:29:A3:D4:CA:CD:B8:12:21:4C:A8:61:F1:E5:BF:34:6D:BC
Certificate issuer:       /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial:       0196
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/E13D8940342E11EF84328672C4F9AE02.roa
Signing time:             Mon 19 Jan 2026 04:01:16 +0000
ROA not before:           Mon 19 Jan 2026 04:01:16 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     134078
IP address blocks:        45.112.76.0/22 maxlen: 22
                          61.13.2.0/24 maxlen: 24
                          61.13.16.0/20 maxlen: 21
                          61.13.32.0/21 maxlen: 21
                          61.13.128.0/22 maxlen: 22
                          61.13.128.0/24 maxlen: 24
                          61.13.136.0/23 maxlen: 23
                          61.13.138.0/23 maxlen: 23
                          61.14.64.0/19 maxlen: 19
                          61.14.90.0/24 maxlen: 24
                          61.14.91.0/24 maxlen: 24
                          61.14.95.0/24 maxlen: 24
                          61.16.0.0/22 maxlen: 22
                          61.16.4.0/22 maxlen: 22
                          61.16.8.0/22 maxlen: 22
                          61.16.12.0/22 maxlen: 22
                          61.16.16.0/22 maxlen: 22
                          61.16.32.0/22 maxlen: 22
                          103.51.160.0/22 maxlen: 22
                          103.51.160.0/24 maxlen: 24
                          103.51.163.0/24 maxlen: 24
                          103.227.88.0/22 maxlen: 22
                          103.227.88.0/23 maxlen: 23
                          103.227.90.0/23 maxlen: 23
                          103.250.56.0/22 maxlen: 22
                          103.250.58.0/24 maxlen: 24
                          202.52.64.0/23 maxlen: 23
                          202.52.66.0/23 maxlen: 23
                          202.52.68.0/22 maxlen: 22
                          202.52.72.0/21 maxlen: 21
                          202.52.80.0/21 maxlen: 21
                          202.52.92.0/22 maxlen: 22
                          202.52.96.0/19 maxlen: 19
                          202.52.104.0/22 maxlen: 22
                          202.52.112.0/20 maxlen: 20
                          202.136.16.0/20 maxlen: 20
                          202.148.160.0/20 maxlen: 20
                          203.31.234.0/24 maxlen: 24
                          203.149.128.0/24 maxlen: 24
                          203.149.140.0/22 maxlen: 22
                          203.149.168.0/22 maxlen: 22
                          203.149.184.0/21 maxlen: 21
                          2404:1100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
        Validity
            Not Before: Jan 19 04:01:16 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=696dac8c-67c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c6:54:1a:81:e7:40:11:16:e3:12:e3:80:08:
                    ac:c2:25:44:ed:6f:42:46:29:a7:17:05:7e:33:ff:
                    a7:24:89:15:52:88:3f:ae:03:2b:9b:5c:a5:24:b5:
                    06:5d:4d:b2:1b:b8:d2:ea:ec:5a:4b:d4:58:b4:5c:
                    00:18:1a:34:9a:c1:b2:95:d4:fe:de:7e:eb:c7:6f:
                    b7:f1:15:01:f1:4f:68:62:08:bd:3b:07:13:fe:e0:
                    39:9c:e7:9f:a7:b8:67:51:45:04:48:65:cc:ea:c8:
                    b1:57:f6:a0:cc:71:47:c7:4d:8f:a0:dc:b9:3f:0e:
                    0a:ad:76:e9:97:cd:6d:e6:ea:07:8e:a2:3d:8f:fa:
                    29:92:15:06:27:60:91:4b:65:d2:31:00:a1:90:49:
                    9e:52:54:92:65:85:19:49:64:06:b5:04:3c:7b:dc:
                    e1:e6:89:52:56:5e:cf:0e:f1:62:db:d4:e2:75:4b:
                    a7:12:38:b5:30:9f:7e:2f:da:2b:55:9b:44:72:a0:
                    9b:8b:31:6c:4b:30:a8:f7:a0:79:b6:3d:9c:f6:d7:
                    7c:fd:53:fa:ef:2a:73:c2:8a:3a:66:02:ae:ca:ab:
                    af:41:f3:18:a6:5a:ec:d1:ea:48:6a:0a:b5:b2:3a:
                    cb:49:5d:cd:f8:e4:ea:df:c1:bd:87:95:23:10:7a:
                    ac:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1A:54:29:A3:D4:CA:CD:B8:12:21:4C:A8:61:F1:E5:BF:34:6D:BC
            X509v3 Authority Key Identifier:
                keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/E13D8940342E11EF84328672C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.76.0/22
                  61.13.2.0/24
                  61.13.16.0-61.13.39.255
                  61.13.128.0/22
                  61.13.136.0/22
                  61.14.64.0/19
                  61.16.0.0-61.16.19.255
                  61.16.32.0/22
                  103.51.160.0/22
                  103.227.88.0/22
                  103.250.56.0/22
                  202.52.64.0-202.52.87.255
                  202.52.92.0-202.52.127.255
                  202.136.16.0/20
                  202.148.160.0/20
                  203.31.234.0/24
                  203.149.128.0/24
                  203.149.140.0/22
                  203.149.168.0/22
                  203.149.184.0/21
                IPv6:
                  2404:1100::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:85:a1:29:e2:14:b7:8e:c1:e3:12:84:77:84:6c:e2:65:56:
         f5:a6:9b:cb:4e:65:c6:f4:92:8c:1e:97:3e:82:28:0a:eb:2f:
         2e:43:8c:6a:fa:bd:97:b6:5c:96:c3:7b:67:77:4b:18:77:35:
         54:8a:da:ed:39:4b:30:f7:a5:7e:30:fd:f7:c3:ce:c5:59:7f:
         3a:35:40:0e:df:ff:87:07:e9:8f:d2:78:b6:40:87:d7:3f:88:
         66:ae:21:9b:fa:de:79:02:93:36:1a:b3:38:88:2f:77:24:75:
         30:ec:94:b2:97:77:98:77:b3:36:13:3b:70:00:b5:80:ae:ee:
         33:d5:a8:21:06:72:5f:51:34:ce:7b:41:a9:f3:9e:13:1f:0b:
         99:e0:32:e4:44:f7:36:b7:7a:4b:25:d6:2f:95:0f:45:48:04:
         6f:98:c6:70:b3:31:a6:ae:4a:44:4e:1c:1f:92:f7:81:23:ab:
         cc:46:b4:b9:a8:c5:e3:a9:ac:0e:3a:f0:17:f7:58:1e:ab:8f:
         93:7b:9b:14:e5:80:23:e8:a9:05:0c:72:b1:3c:e5:ad:f8:c7:
         72:90:75:40:4e:4b:4b:7a:f2:b0:50:74:65:cb:d1:9a:53:96:
         9e:40:54:10:9d:51:3f:46:a5:e7:e0:22:e9:39:ad:f0:db:cd:
         37:65:48:45
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE3NkQxMTAvBgNVBAUTKEFBMDE3OEVBNzg1MTFBMTVCMTQ3MEVCRkMwQzU3MjFB
NzBFMjc2OUYwHhcNMjYwMTE5MDQwMTE2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZkYWM4Yy02N2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlsZUGoHnQBEW4xLjgAiswiVE7W9CRimnFwV+M/+nJIkVUog/rgMrm1ylJLUG
XU2yG7jS6uxaS9RYtFwAGBo0msGyldT+3n7rx2+38RUB8U9oYgi9OwcT/uA5nOef
p7hnUUUESGXM6sixV/agzHFHx02PoNy5Pw4KrXbpl81t5uoHjqI9j/opkhUGJ2CR
S2XSMQChkEmeUlSSZYUZSWQGtQQ8e9zh5olSVl7PDvFi29TidUunEji1MJ9+L9or
VZtEcqCbizFsSzCo96B5tj2c9td8/VP67ypzwoo6ZgKuyquvQfMYplrs0epIagq1
sjrLSV3N+OTq38G9h5UjEHqsvQIDAQABo4IDOjCCAzYwHQYDVR0OBBYEFBsaVCmj
1MrNuBIhTKhh8eW/NG28MB8GA1UdIwQYMBaAFKoBeOp4URoVsUcOv8DFchpw4naf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTc2RC9GMDJBMzVFOEE5
MTQxMUVFQjI3MTJEM0ZDNEY5QUUwMi9xZ0Y0Nm5oUkdoV3hSdzZfd01WeUduRGlk
cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FnRjQ2bmhSR2hXeFJ3Nl93TVZ5R25EaWRwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDE3NkQvRjAyQTM1RThBOTE0MTFFRUIyNzEyRDNGQzRGOUFFMDIvRTEzRDg5NDAz
NDJFMTFFRjg0MzI4NjcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgcMGCCsGAQUFBwEHAQH/
BIGzMIGwMIGeBAIAATCBlwMEAi1wTAMEAD0NAjAMAwQEPQ0QAwQDPQ0gAwQCPQ2A
AwQCPQ2IAwQFPQ5AMAsDAwQ9EAMEAj0QEAMEAj0QIAMEAmczoAMEAmfjWAMEAmf6
ODAMAwQGyjRAAwQDyjRQMAwDBALKNFwDBAfKNAADBATKiBADBATKlKADBADLH+oD
BADLlYADBALLlYwDBALLlagDBAPLlbgwDQQCAAIwBwMFACQEEQAwDQYJKoZIhvcN
AQELBQADggEBAHqFoSniFLeOweMShHeEbOJlVvWmm8tOZcb0kowelz6CKArrLy5D
jGr6vZe2XJbDe2d3Sxh3NVSK2u05SzD3pX4w/ffDzsVZfzo1QA7f/4cH6Y/SeLZA
h9c/iGauIZv63nkCkzYasziIL3ckdTDslLKXd5h3szYTO3AAtYCu7jPVqCEGcl9R
NM57QanznhMfC5ngMuRE9za3eksl1i+VD0VIBG+YxnCzMaauSkROHB+S94Ejq8xG
tLmoxeOprA468Bf3WB6rj5N7mxTlgCPoqQUMcrE85a34x3KQdUBOS0t68rBQdGXL
0ZpTlp5AVBCdUT9GpefgIuk5rfDbzTdlSEU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:57:54 2026 by rpki-client