This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/21047C70672211EF998AEF2BC4F9AE02.roa
File:                     21047C70672211EF998AEF2BC4F9AE02.roa (raw, json)
Hash identifier:          oml3CF4psDxkIWKsQkPuNHlhG20UbCTK/gnR4LIPvqM=
Subject key identifier:   76:7B:F1:29:5F:08:87:43:F7:98:5F:66:B4:14:87:62:F3:29:27:A1
Certificate issuer:       /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Certificate serial:       019F
Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/21047C70672211EF998AEF2BC4F9AE02.roa
Signing time:             Tue 13 Jan 2026 03:22:50 +0000
ROA not before:           Tue 13 Jan 2026 03:22:50 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149283
IP address blocks:        113.192.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl
                          rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
        Validity
            Not Before: Jan 13 03:22:50 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6965ba89-bfec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:7c:5b:94:f6:3e:38:e2:b0:52:18:73:17:
                    04:e0:68:b6:d9:0b:3b:97:55:09:c9:20:50:9a:0a:
                    a8:4d:b1:76:83:3c:21:30:be:d2:68:2a:8e:71:60:
                    df:d2:ae:1c:38:54:2f:e5:6e:dc:75:f8:3e:01:54:
                    7a:5f:e2:38:b9:97:89:6a:53:1c:bc:91:98:55:2a:
                    4f:c8:ea:f7:9e:98:0f:33:0c:f3:09:5f:1f:5d:b0:
                    4e:74:de:1c:66:39:0d:c9:f5:c6:74:33:7f:e6:d9:
                    47:45:34:b5:6e:97:5e:fe:53:a1:ac:69:92:c7:37:
                    e4:4f:ea:38:b9:06:d2:a9:d8:f5:ff:a0:90:f2:c0:
                    42:95:95:11:25:56:7b:6a:fd:87:96:c7:98:35:0d:
                    25:43:ca:cb:3d:eb:1d:16:81:56:fb:e7:8e:e2:ad:
                    61:1b:be:f1:f7:77:5d:b0:4a:5d:ab:3f:ff:8c:21:
                    0c:77:17:0f:42:3c:ca:a9:9a:09:ca:df:df:0a:79:
                    da:1c:38:a0:d5:11:46:c1:83:80:5c:bb:bd:70:cd:
                    da:6b:8a:f8:9d:ce:66:4e:c8:00:7e:4d:1f:92:59:
                    d7:fe:1d:f4:aa:38:22:22:a2:54:2f:9e:16:a5:db:
                    e3:9b:8e:0b:0d:47:0f:ef:4a:25:c1:4d:c4:8b:10:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7B:F1:29:5F:08:87:43:F7:98:5F:66:B4:14:87:62:F3:29:27:A1
            X509v3 Authority Key Identifier:
                keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/21047C70672211EF998AEF2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:f4:e0:44:2d:cc:69:90:2b:8a:e1:bd:0d:c1:c9:ba:cd:
         ac:bd:7c:f1:e0:00:6d:e8:c6:c9:99:eb:f8:5a:a7:21:fa:44:
         25:65:cc:60:51:a3:00:e5:f2:c2:2a:48:d4:0c:2e:a4:06:76:
         25:41:9d:46:eb:d6:5e:91:14:e1:35:b5:89:13:9d:1a:21:74:
         af:7a:b7:0e:62:8e:a8:57:80:ea:ef:5d:64:39:65:c9:74:a1:
         ee:99:dc:f4:df:af:2f:34:e2:2a:77:ff:f1:12:50:0e:d3:1d:
         f0:e2:17:f3:24:05:96:83:4a:9a:fd:b9:61:47:8d:69:8d:26:
         e3:6b:67:b6:d2:a5:77:12:74:57:78:97:e8:a2:f2:fe:cd:60:
         dc:c0:15:90:94:b3:95:aa:62:b9:63:cf:35:70:28:1c:bf:5b:
         45:ed:41:c4:1f:96:20:a5:36:43:00:13:63:71:c9:6f:43:78:
         2c:07:25:f0:a1:c0:d3:7c:2d:86:d5:3f:d5:b7:50:bf:a2:49:
         39:41:0a:cb:5e:5e:46:61:25:d4:64:b0:ee:7e:89:46:21:89:
         9b:18:f5:91:f9:77:fa:b0:0d:68:d2:de:6e:d2:a1:35:37:bb:
         4b:64:7d:9c:62:af:fb:11:dc:06:f2:b4:af:65:e8:dc:06:16:
         1e:0d:af:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:37:18 2026 by rpki-client