This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/200677EEE20D11F0A1D1F931636F56BC.roa
File:                     200677EEE20D11F0A1D1F931636F56BC.roa (raw, json)
Hash identifier:          A9TJfeTTGCzUbWIl+PF8tZRdsVm8zwFCg9Xz2ODp3t4=
Subject key identifier:   35:5E:B6:C1:BD:2F:A1:09:60:AA:D9:7B:49:7D:1E:ED:92:20:15:28
Certificate issuer:       /CN=A91DB53B/serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
Certificate serial:       0B
Authority key identifier: 44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/200677EEE20D11F0A1D1F931636F56BC.roa
Signing time:             Fri 26 Dec 2025 03:58:38 +0000
ROA not before:           Fri 26 Dec 2025 03:58:38 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154402
IP address blocks:        144.79.70.0/24 maxlen: 24
                          144.79.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 07:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB53B, serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
        Validity
            Not Before: Dec 26 03:58:38 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=694e07ee-01d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:98:30:df:f2:11:de:ad:40:ca:9f:05:13:
                    08:4e:bc:6e:74:b8:01:fe:65:b1:d3:07:e3:f1:bc:
                    42:38:66:05:b9:0e:d2:ee:3c:b7:c6:9a:86:a0:7d:
                    94:b8:33:31:aa:93:14:18:65:af:0b:d5:77:4a:b0:
                    0e:97:44:3b:26:30:8a:3c:89:1a:a2:59:16:06:02:
                    d0:f6:67:b4:83:0e:06:87:64:01:00:2e:0a:48:29:
                    9e:7a:57:9a:c4:a7:8b:5a:ce:e0:68:20:5d:29:54:
                    3f:8e:de:f1:bf:79:d9:7e:8a:d8:82:aa:33:1b:48:
                    0a:a3:b5:59:d4:90:12:bb:cb:fd:7d:98:ae:b6:ad:
                    c1:8b:e9:a8:d6:f7:cc:5f:d2:68:a6:d9:b1:95:d0:
                    5a:87:cb:f1:16:b6:22:e9:ef:59:e7:c8:81:f4:db:
                    bf:56:23:5a:a7:b8:c8:19:01:6f:12:79:2e:ac:86:
                    b9:23:00:05:8b:a9:a3:67:b7:f4:6d:5e:7f:98:b6:
                    24:bc:b7:f3:a8:ca:ed:03:52:8f:cd:a1:bb:ad:f0:
                    79:b2:e3:e9:d7:91:ee:c8:d7:4a:f4:b6:96:95:0c:
                    75:50:2b:fc:9e:41:6d:71:cf:5c:d0:65:36:5e:fe:
                    01:92:23:73:cb:4d:98:42:5e:d7:76:be:dc:b8:cf:
                    a5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5E:B6:C1:BD:2F:A1:09:60:AA:D9:7B:49:7D:1E:ED:92:20:15:28
            X509v3 Authority Key Identifier:
                keyid:44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/200677EEE20D11F0A1D1F931636F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:e9:5a:13:93:d2:38:16:e8:36:90:70:bc:a8:48:d6:d9:b8:
         d5:af:c2:b5:e1:22:e0:41:81:cf:30:91:c8:4e:61:4c:a4:c6:
         d7:4f:c9:31:e8:02:7e:14:24:36:76:0b:8e:97:c1:23:a3:3e:
         67:82:b1:05:04:2b:c7:2a:8d:94:d5:dd:34:f0:69:d2:56:bf:
         8e:4a:60:23:58:ab:69:4d:87:aa:7c:27:50:f7:f8:78:4c:02:
         04:db:89:b3:6d:2d:33:15:58:02:c0:90:df:3f:d5:b6:e8:1e:
         43:67:b4:f3:f7:eb:a2:3c:13:01:bf:d7:b4:3b:b2:cf:bf:fb:
         22:6f:18:1e:19:d5:1e:b3:2c:3d:c4:a6:ac:37:89:07:81:dc:
         90:a1:c2:0e:22:25:57:8e:ec:62:4e:79:2c:96:5a:33:a8:20:
         cb:7a:80:65:a7:c5:71:f8:4b:de:f3:b5:81:e7:c1:c6:c4:57:
         67:c5:51:e8:22:01:cb:d2:a0:3b:d7:9c:68:a8:4f:d8:5c:80:
         39:52:7c:a2:0a:59:a1:5f:95:cd:39:84:30:36:58:e0:f1:3d:
         66:56:d1:9e:dd:ec:2f:b5:3a:c0:8a:69:bd:49:b7:f2:a1:1f:
         da:c3:a0:8a:1f:8c:83:8e:20:0f:a5:4a:df:96:4b:c1:03:a6:
         1f:2a:dc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:31:56 2026 by rpki-client