This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/BFB4B7B2EB5C11F0BDF448C8486F56BC.roa
File:                     BFB4B7B2EB5C11F0BDF448C8486F56BC.roa (raw, json)
Hash identifier:          1GKrFOo4PRyIC5kVawdkCoK2XveZwW1+PoQcaZjaQts=
Subject key identifier:   C1:6C:F8:76:EF:02:4B:E6:D2:89:6F:BF:8D:39:0C:43:E7:E9:14:67
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       36FB
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/BFB4B7B2EB5C11F0BDF448C8486F56BC.roa
Signing time:             Wed 07 Jan 2026 00:06:43 +0000
ROA not before:           Wed 07 Jan 2026 00:06:43 +0000
ROA not after:            Thu 30 Apr 2026 00:00:00 +0000
asID:                     135533
IP address blocks:        61.45.248.0/24 maxlen: 24
                          2401:4601:248::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14075 (0x36fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Jan  7 00:06:43 2026 GMT
            Not After : Apr 30 00:00:00 2026 GMT
        Subject: CN=695da393-183d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c7:3a:4a:0c:59:99:56:92:57:44:cc:b5:58:
                    e4:8d:31:de:00:ba:c5:31:b7:70:03:33:5b:b8:db:
                    58:ea:8b:41:ee:5e:a8:04:67:ab:b7:58:0a:99:18:
                    17:42:fb:e2:8d:9e:49:bd:14:5c:cc:39:27:ed:0b:
                    f1:74:cd:c7:c8:f6:64:e1:6a:94:ac:46:40:66:de:
                    64:04:99:d1:5a:a5:55:4e:c9:99:c8:c0:1e:30:54:
                    ed:61:02:b6:74:c9:68:16:30:00:29:34:57:bb:16:
                    11:c5:33:79:8f:0f:d0:24:b6:2b:b8:21:83:5d:39:
                    ab:aa:ce:c8:6d:c2:04:c1:cf:c9:b3:63:fb:9b:f7:
                    3e:58:7c:96:06:3b:4c:c6:7b:ec:8b:27:0b:51:a3:
                    61:54:cd:27:85:2a:a0:16:e7:bc:db:f5:54:1d:33:
                    ff:cf:5a:2a:15:89:22:f5:b7:2e:0e:0f:f9:86:06:
                    d3:cc:c4:8f:44:4e:a0:c5:a9:34:5b:24:50:d5:d6:
                    fe:2c:7d:4e:65:ba:cb:f2:6b:ea:6e:a6:e9:a1:17:
                    92:a2:45:b0:18:06:19:ef:e0:8b:74:e4:f2:cc:74:
                    fb:6a:54:85:f3:5d:f3:94:2a:ac:e2:8f:9b:d9:f9:
                    40:4f:3a:00:f8:ee:39:e2:73:0f:44:ea:e5:24:1a:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6C:F8:76:EF:02:4B:E6:D2:89:6F:BF:8D:39:0C:43:E7:E9:14:67
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/BFB4B7B2EB5C11F0BDF448C8486F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.248.0/24
                IPv6:
                  2401:4601:248::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:9e:97:49:1d:32:f6:79:11:a1:88:54:ac:ac:7c:48:f5:ad:
         c3:9b:b8:ec:64:8a:24:10:4d:bc:b2:38:22:b7:53:2a:50:4f:
         7d:df:f9:73:ab:92:39:3b:11:f4:0a:73:e0:96:92:18:d1:bf:
         d7:b8:c0:ac:6e:55:15:45:cd:f7:c3:03:ee:44:97:89:52:9a:
         43:5d:2c:a0:27:56:a1:48:2a:3a:0a:15:56:87:8a:72:36:85:
         f4:ad:33:24:68:d9:71:99:c2:97:14:29:56:e7:32:6d:ca:92:
         10:37:80:30:b6:82:7c:8e:92:ff:63:a4:9b:5c:72:3f:cd:d8:
         ce:48:1e:ad:7a:84:3b:9c:18:e7:54:05:8d:3b:5c:63:f5:5a:
         c2:7c:ee:fb:14:74:13:0b:42:a8:eb:1c:3e:8d:23:42:f4:2e:
         c9:c4:7d:7a:a2:0e:02:5b:89:73:8e:12:46:34:63:6d:ee:f0:
         93:2d:95:f2:92:8d:38:12:1c:3c:74:f1:1f:32:87:a9:a8:66:
         8c:26:58:7f:4b:ac:62:6f:11:c6:8d:16:bf:c8:2f:8a:6c:6c:
         5e:0d:0f:57:08:b6:f4:0a:17:3e:3a:64:f7:c0:f5:d3:95:e5:
         51:47:08:e8:aa:bf:aa:11:1f:e0:80:3f:c5:a8:d0:0a:07:46:
         34:9e:51:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:05:20 2026 by rpki-client