This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/181D46FCEE5611F0B0ABEB00546F56BC.roa
File:                     181D46FCEE5611F0B0ABEB00546F56BC.roa (raw, json)
Hash identifier:          1S29d4nvNSsRSVL1Gx1w3p5mAVBc0qAACJOrNvlCC14=
Subject key identifier:   F4:B5:4D:F2:5A:CC:42:DC:AC:EB:C6:DD:0D:31:D4:CC:69:8B:AD:70
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       3702
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/181D46FCEE5611F0B0ABEB00546F56BC.roa
Signing time:             Sat 10 Jan 2026 18:56:39 +0000
ROA not before:           Sat 10 Jan 2026 18:56:39 +0000
ROA not after:            Thu 30 Apr 2026 00:00:00 +0000
asID:                     45192
IP address blocks:        202.125.96.0/23 maxlen: 23
                          203.30.127.0/24 maxlen: 24
                          2001:df0:a::/48 maxlen: 48
                          2001:df2:ee00::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14082 (0x3702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Jan 10 18:56:39 2026 GMT
            Not After : Apr 30 00:00:00 2026 GMT
        Subject: CN=6962a0e7-7210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:14:6e:6c:ee:ab:8e:8f:92:a7:69:ab:81:7c:
                    a6:0d:c4:69:fa:0b:14:b8:2b:d7:3a:fa:c3:d1:1d:
                    c8:02:39:ea:ba:4b:e1:07:07:7e:51:64:dd:2a:7b:
                    e6:2a:15:e0:0d:25:3a:ae:85:b1:ec:18:d5:ce:66:
                    fc:7c:bd:af:00:08:3f:01:69:0b:ca:18:52:cc:ce:
                    bc:c7:27:a8:e5:f1:b2:14:9c:68:af:cd:b2:18:d9:
                    61:7e:a1:f2:c1:7a:86:b5:36:59:3a:43:ff:95:64:
                    93:cf:d0:cb:34:d0:26:4e:19:d8:b9:59:b1:c2:06:
                    7d:de:76:47:73:d2:bf:09:05:18:66:5d:05:5f:38:
                    f8:25:da:c6:c6:cb:e4:98:00:23:8c:da:54:b3:85:
                    13:6a:d7:f1:c3:ab:16:49:2a:ab:40:dc:30:d5:e8:
                    f7:d3:1f:cd:86:47:63:81:5f:31:96:cc:78:12:3b:
                    6c:e7:f0:f1:b4:cf:0a:32:2d:8e:f3:f0:dd:39:4a:
                    fa:e5:29:f6:05:47:fc:48:a8:18:33:28:69:7c:41:
                    99:d1:10:02:8d:c0:22:6b:b6:31:89:31:7c:e1:11:
                    b3:54:25:97:be:c7:60:2a:0f:48:94:63:0e:70:1f:
                    35:ab:85:76:59:45:5e:fe:50:1e:84:69:ec:77:57:
                    cd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:4D:F2:5A:CC:42:DC:AC:EB:C6:DD:0D:31:D4:CC:69:8B:AD:70
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/181D46FCEE5611F0B0ABEB00546F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.125.96.0/23
                  203.30.127.0/24
                IPv6:
                  2001:df0:a::/48
                  2001:df2:ee00::/47

    Signature Algorithm: sha256WithRSAEncryption
         0c:f0:78:76:07:30:9c:05:ba:14:f0:ff:b7:87:53:51:10:5c:
         35:e9:8c:54:cf:4b:24:a3:c9:17:c0:2e:c1:24:73:f0:68:29:
         9c:b3:09:16:bb:93:1d:25:7c:f4:cb:5d:29:90:1e:ac:d6:5f:
         7b:ba:84:76:8c:6b:50:63:8f:53:3d:ca:a3:fc:2f:92:e8:67:
         1f:0f:06:b9:9d:1f:0f:5d:17:9a:b8:20:23:f9:5f:38:cb:94:
         ec:ef:08:a4:26:fd:26:d5:37:cf:8c:2f:b4:4d:66:35:62:71:
         49:aa:4f:71:79:b1:1a:83:82:a3:07:5d:c1:8a:6a:ec:61:8f:
         31:a8:ab:ba:1b:3c:6a:18:fe:92:99:30:d7:14:cd:3e:f1:e9:
         bf:d4:2b:98:34:ed:32:6e:4d:86:8c:93:20:00:d4:c3:ea:9d:
         be:60:62:a8:c2:01:c3:68:c1:24:1f:5f:2c:18:99:ee:14:3e:
         fe:01:a2:e3:e7:15:27:38:48:0b:67:2c:55:8a:3c:cc:07:f5:
         f7:f4:8f:25:49:40:e3:63:32:79:29:70:3f:60:f8:2c:ed:30:
         fe:0e:98:04:f8:c2:b8:9f:0d:1f:41:d2:41:1b:b4:75:6f:38:
         f3:59:49:01:8d:2e:9a:ce:0f:96:ca:9d:d5:d2:b5:5d:e4:3b:
         62:da:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:11:38 2026 by rpki-client