This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/318FB51A383611E6B2282B5DC4F9AE02.roa
File:                     318FB51A383611E6B2282B5DC4F9AE02.roa (raw, json)
Hash identifier:          SHfxrOPXs2xCvoYHmprRYsQB4kpv3qSs6NXFqQDThDo=
Subject key identifier:   28:FA:9D:C4:5A:D9:83:D7:3A:08:62:FA:20:D8:5D:B4:2C:0F:1B:24
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       36EB
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/318FB51A383611E6B2282B5DC4F9AE02.roa
Signing time:             Tue 30 Dec 2025 15:10:06 +0000
ROA not before:           Tue 30 Dec 2025 15:10:06 +0000
ROA not after:            Thu 30 Apr 2026 00:00:00 +0000
asID:                     135534
IP address blocks:        61.45.249.0/24 maxlen: 24
                          2401:4601:249::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14059 (0x36eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Dec 30 15:10:06 2025 GMT
            Not After : Apr 30 00:00:00 2026 GMT
        Subject: CN=6953eb4e-5adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:8a:68:cb:c0:4e:4a:32:07:e3:61:6d:f9:
                    c9:9f:cc:a1:d0:1f:22:2b:36:ed:c4:c2:0e:cf:44:
                    1a:76:ad:88:e0:54:c0:47:a7:08:a7:28:50:3b:58:
                    eb:1f:33:f8:d1:a9:17:9c:69:45:8a:c4:05:0b:69:
                    dd:19:90:a2:66:8d:aa:34:3e:ed:ce:2d:b4:5b:89:
                    f0:76:37:74:63:b7:a5:7e:a8:13:9b:de:03:66:e9:
                    8e:29:8c:c4:56:64:ca:b6:ab:a0:3d:cc:47:c3:9b:
                    67:0c:31:1c:de:e7:a1:1e:f8:71:72:a5:11:bb:23:
                    0c:a8:dc:9f:6e:99:ae:15:aa:5f:fd:f8:90:9c:7f:
                    0d:52:97:24:a1:8e:71:73:4e:c7:2f:b7:4a:64:3b:
                    7b:b9:19:24:14:3b:29:1e:ee:a6:ca:26:a5:f8:ac:
                    40:f0:c6:0d:31:3a:01:3c:93:80:c0:ac:47:af:33:
                    80:88:d9:00:fb:3e:f4:a6:84:3e:20:19:41:40:48:
                    01:09:1c:fc:a7:5b:0e:39:18:2b:a6:9d:d6:2a:52:
                    11:86:1a:13:78:87:a4:57:e6:f9:46:f9:5c:32:89:
                    87:64:62:48:75:94:6e:05:04:1b:06:23:8a:d0:fa:
                    d8:86:c3:ea:de:cf:c9:4d:a2:33:90:f3:be:c5:63:
                    6c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FA:9D:C4:5A:D9:83:D7:3A:08:62:FA:20:D8:5D:B4:2C:0F:1B:24
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/318FB51A383611E6B2282B5DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.249.0/24
                IPv6:
                  2401:4601:249::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:22:43:f3:e7:f8:d0:1c:61:e6:03:2e:b6:4c:9d:86:b3:6a:
         d0:62:e9:03:8e:63:92:27:64:7f:de:c1:60:c5:a7:9d:37:5a:
         53:ea:18:01:b1:f2:2d:d4:1a:87:74:7f:f6:16:cc:80:6e:96:
         19:c5:0b:0a:ca:ec:ed:b7:1f:f8:9b:6f:00:96:af:d4:0f:29:
         e9:36:38:88:09:d7:d7:26:4e:60:a1:fc:04:69:41:a7:2d:23:
         60:d1:ee:a5:55:f4:c7:0f:d3:4a:dd:8b:7d:68:69:64:0b:77:
         43:64:e2:2f:75:0e:0b:16:65:d5:be:04:97:76:a2:6d:05:11:
         cf:e8:93:69:30:ab:a3:8b:b4:ab:7e:c6:a0:d9:19:18:00:b7:
         5d:e9:9a:63:78:f4:db:38:ea:9a:fd:58:8e:a6:31:f9:6f:8a:
         d4:bc:a4:21:eb:42:93:74:28:4e:95:ba:c5:84:04:9a:b5:22:
         85:32:6d:bf:71:92:67:42:34:9d:a5:0a:dc:12:2f:69:5d:b9:
         79:c3:60:31:64:09:9b:6c:6c:6b:d1:61:d4:22:39:8d:29:17:
         12:56:0f:19:73:2f:e5:8c:ef:e5:23:fe:3d:d7:20:0c:42:97:
         2e:5b:6b:df:74:4a:2a:d0:2f:07:08:1c:d1:2b:c6:19:59:8f:
         4d:ce:95:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:19:29 2026 by rpki-client