This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/119B023E80A111EFAC559545C4F9AE02.roa
File:                     119B023E80A111EFAC559545C4F9AE02.roa (raw, json)
Hash identifier:          1F2PjvvkE2AaSgeG4V1HwpJyJzd9D1cyafOqmUFFDW4=
Subject key identifier:   3A:4F:A6:CA:16:B1:9E:A7:F9:47:2A:3A:F7:18:28:CE:18:91:C2:A9
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       36F3
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/119B023E80A111EFAC559545C4F9AE02.roa
Signing time:             Tue 30 Dec 2025 15:10:14 +0000
ROA not before:           Tue 30 Dec 2025 15:10:14 +0000
ROA not after:            Thu 30 Apr 2026 00:00:00 +0000
asID:                     4608
IP address blocks:        203.30.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14067 (0x36f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Dec 30 15:10:14 2025 GMT
            Not After : Apr 30 00:00:00 2026 GMT
        Subject: CN=6953eb56-cdae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a3:55:e9:e5:5e:e6:3d:d2:98:7a:42:f7:7c:
                    a0:c5:4b:f6:60:5f:ed:2e:46:96:9c:12:50:68:fe:
                    8a:89:bd:1a:69:68:b0:dd:45:bb:ec:30:2a:3a:90:
                    85:3c:36:97:2e:e6:86:7b:45:59:3c:b4:08:2e:48:
                    83:03:b0:32:5d:c8:ab:a4:e5:ee:51:30:9b:2a:18:
                    7e:57:f0:1b:54:b3:09:3f:ae:65:d5:3d:1f:e0:b0:
                    80:3a:61:6d:62:7e:74:48:d0:e9:6d:da:79:34:7e:
                    5b:55:70:32:d2:23:b2:63:cd:b2:96:ed:03:d6:a4:
                    72:35:2a:1d:6f:a4:2b:b8:94:f4:f5:6f:61:fa:9c:
                    e3:78:49:3a:f1:01:c2:81:b6:55:b4:66:03:7f:f1:
                    6d:90:fb:df:d4:1a:9d:19:85:76:63:62:f3:2b:90:
                    74:9f:27:37:0d:8c:23:1c:a5:3f:a0:61:ce:0c:d6:
                    8c:2d:8b:8a:6d:e5:4d:08:05:9b:5b:0f:03:0c:d9:
                    9e:b3:67:78:92:4f:38:c8:c0:73:ed:81:28:f5:75:
                    59:66:6d:9a:19:a8:3e:c0:85:2e:45:c2:09:c3:c6:
                    c6:27:ac:f5:a2:d7:0b:44:19:87:fa:15:7e:17:ba:
                    04:4a:d8:3e:6e:bc:a1:5b:d5:e5:d9:6e:a8:b8:78:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4F:A6:CA:16:B1:9E:A7:F9:47:2A:3A:F7:18:28:CE:18:91:C2:A9
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/119B023E80A111EFAC559545C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:8c:45:4c:63:b4:fd:6b:26:b8:d1:8f:97:51:c3:7b:fa:f1:
         46:cb:8c:73:f7:ae:05:6c:74:42:6b:c6:9b:08:ee:ef:7d:55:
         12:c4:84:1a:4b:36:50:18:52:a9:a2:cf:cb:fc:f7:73:5b:5a:
         af:99:8b:a5:1c:bb:31:db:08:41:3e:1e:c1:0e:a8:f9:fc:68:
         29:f9:ba:fe:56:5b:db:c8:14:d1:dd:12:a7:27:b1:a6:23:20:
         3d:f8:47:c8:f7:1f:5e:20:fe:37:08:1e:33:18:bd:39:22:88:
         6e:7b:e1:72:27:e1:40:41:ec:62:30:57:16:0a:ef:ba:64:e0:
         48:eb:d6:2f:f5:bf:6e:94:19:52:21:1e:88:89:86:33:a7:bb:
         99:39:dd:d3:0b:fc:f6:46:c7:5f:07:80:a8:3d:65:08:a2:d7:
         c0:52:77:b1:b1:e4:1a:8e:8d:be:cd:91:5d:d1:14:c8:2d:ed:
         06:d0:8c:22:85:04:26:d7:fa:27:06:bd:54:e3:66:ba:ad:05:
         03:fc:94:7a:7a:30:ce:24:be:35:b2:9e:6c:2d:cd:5c:f8:6b:
         8b:cf:4d:96:e6:bc:5a:ed:5c:cb:42:57:13:c7:ab:f8:c1:76:
         fd:bf:19:79:0e:76:f0:50:1f:c2:80:54:5a:73:47:32:95:2a:
         b3:b3:dd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:12 2026 by rpki-client