This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/2AECA58494EE11EE84F9D73CC4F9AE02.roa
File:                     2AECA58494EE11EE84F9D73CC4F9AE02.roa (raw, json)
Hash identifier:          ahURvf3WgTOlPvJ2Yvz5ikj2GmylBcCLMIT4Gjnelzo=
Subject key identifier:   87:A8:D0:FE:B6:90:58:66:07:BF:04:F6:2E:3D:7F:9C:C3:5B:A4:2A
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       07AE
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/2AECA58494EE11EE84F9D73CC4F9AE02.roa
Signing time:             Thu 13 Nov 2025 14:31:45 +0000
ROA not before:           Thu 13 Nov 2025 14:31:45 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     19551
IP address blocks:        166.81.2.0/24 maxlen: 24
                          166.81.5.0/24 maxlen: 24
                          166.81.6.0/24 maxlen: 24
                          166.81.32.0/24 maxlen: 24
                          166.81.33.0/24 maxlen: 24
                          166.81.34.0/24 maxlen: 24
                          166.81.38.0/24 maxlen: 24
                          166.81.39.0/24 maxlen: 24
                          166.81.40.0/24 maxlen: 24
                          166.81.51.0/24 maxlen: 24
                          166.81.52.0/24 maxlen: 24
                          166.81.53.0/24 maxlen: 24
                          166.81.54.0/24 maxlen: 24
                          166.81.56.0/24 maxlen: 24
                          166.81.57.0/24 maxlen: 24
                          166.81.61.0/24 maxlen: 24
                          166.81.62.0/24 maxlen: 24
                          166.81.63.0/24 maxlen: 24
                          166.81.81.0/24 maxlen: 24
                          166.81.83.0/24 maxlen: 24
                          166.81.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
                          rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1966 (0x7ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Nov 13 14:31:45 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6915ebd1-c750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:00:5f:15:a9:de:c9:d2:f5:ae:f3:fd:c2:
                    fa:73:27:06:9d:a9:df:f6:b7:c6:df:ba:7a:59:b9:
                    90:a9:6b:03:1c:58:e2:7e:b1:91:c0:28:96:1c:88:
                    aa:7f:18:79:b8:be:ca:7b:4e:2e:04:f6:9a:8b:e5:
                    54:cc:57:3a:c9:0e:fe:12:44:42:e5:c5:d2:e6:89:
                    fb:63:0f:a9:2a:d4:79:2a:7c:a2:2c:8f:20:0b:5a:
                    69:8a:b1:4b:8e:24:c4:ce:15:02:7d:54:2b:1b:a3:
                    23:05:64:96:9b:cb:76:4b:1d:ff:5b:ee:28:05:de:
                    81:8e:8d:bd:15:99:25:23:7d:08:34:bc:93:f0:30:
                    7f:f0:8c:5b:d5:c6:ac:ba:d5:f5:6d:0a:14:a4:37:
                    34:81:c5:58:71:f7:01:55:2f:ae:da:61:f1:90:ca:
                    28:bc:7d:a2:0f:d4:52:ba:e8:55:97:e8:72:e4:1c:
                    6e:d1:06:7b:e9:a5:42:d0:8f:93:f0:fb:b8:1d:f5:
                    59:a0:b5:65:ff:6f:02:a5:e0:3b:21:5b:71:18:92:
                    c4:5e:20:f9:fc:35:fa:e2:00:75:44:87:f6:88:62:
                    ac:f1:16:fb:02:20:33:c5:18:59:88:40:9f:d6:07:
                    5c:6b:ea:8d:39:07:89:b7:22:b0:04:d2:0f:4f:dc:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A8:D0:FE:B6:90:58:66:07:BF:04:F6:2E:3D:7F:9C:C3:5B:A4:2A
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/2AECA58494EE11EE84F9D73CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.81.2.0/24
                  166.81.5.0-166.81.6.255
                  166.81.32.0-166.81.34.255
                  166.81.38.0-166.81.40.255
                  166.81.51.0-166.81.54.255
                  166.81.56.0/23
                  166.81.61.0-166.81.63.255
                  166.81.81.0/24
                  166.81.83.0-166.81.84.255

    Signature Algorithm: sha256WithRSAEncryption
         44:f9:c8:9c:ac:a4:58:33:96:a0:21:5b:7f:21:ba:b7:b1:15:
         77:d8:e7:1b:a7:b3:2f:e1:45:69:03:93:59:9f:e7:7e:db:4f:
         88:88:5f:1e:80:a0:68:71:a7:0b:80:85:38:3b:fa:82:07:4e:
         eb:dc:57:3d:7d:20:3c:8f:53:62:13:0d:bc:a4:f2:34:b0:42:
         2d:e3:03:75:57:36:14:7d:8e:f1:44:98:02:ff:4c:ea:97:66:
         bb:56:c7:53:20:24:7e:96:a6:a8:03:64:57:3c:4c:e9:bd:29:
         43:d2:99:d4:bb:d4:5b:11:cc:c4:36:4d:59:dc:24:b7:9a:d5:
         ec:34:89:7a:b9:da:c2:18:27:05:9f:b2:9d:2e:a1:51:e4:59:
         b4:22:23:97:cf:33:1a:c9:47:db:c2:84:ab:f0:a4:91:a2:7a:
         90:9e:5e:47:29:6d:ad:e0:65:7d:36:a5:a5:bb:9d:f6:01:2e:
         eb:01:b4:3c:72:8a:81:6e:7c:80:18:3c:0c:47:22:9a:77:d2:
         52:18:b2:e7:b4:6f:c9:83:f8:54:7f:68:31:52:2c:04:fb:6f:
         a0:2f:0f:91:15:2b:64:90:bc:6d:b8:b9:a9:3c:bf:d4:76:82:
         45:93:8c:d7:de:74:31:0c:70:e4:7f:25:0f:5a:41:73:7c:4f:
         97:13:e0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:21:35 2025 by rpki-client