This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/FCBF1666677C11EBB2A3F00CC4F9AE02.roa
File:                     FCBF1666677C11EBB2A3F00CC4F9AE02.roa (raw, json)
Hash identifier:          +f3UhsaAUpz9PsmzKRjsmaNPrmF4rqNZQU/a29jOYXA=
Subject key identifier:   E9:55:36:F1:7E:C6:67:69:50:D2:F4:2E:6B:CC:99:3E:5D:90:00:65
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       36F1
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/FCBF1666677C11EBB2A3F00CC4F9AE02.roa
Signing time:             Tue 30 Dec 2025 15:10:13 +0000
ROA not before:           Tue 30 Dec 2025 15:10:13 +0000
ROA not after:            Thu 30 Apr 2026 00:00:00 +0000
asID:                     135540
IP address blocks:        61.45.255.0/24 maxlen: 24
                          2401:4601:255::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14065 (0x36f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Dec 30 15:10:13 2025 GMT
            Not After : Apr 30 00:00:00 2026 GMT
        Subject: CN=6953eb55-5c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:db:ec:2f:7a:08:5d:78:c4:44:5c:3c:f0:ac:
                    04:49:78:ba:75:f8:29:cc:86:53:1f:39:ea:80:01:
                    fa:79:22:78:2a:38:b7:7b:43:eb:15:7c:33:2e:37:
                    8a:8a:65:eb:98:d5:aa:f8:d7:2b:0c:96:77:21:ec:
                    6f:41:02:ed:5c:b1:1f:77:1b:33:57:a2:f7:df:f1:
                    21:5e:81:96:bd:fd:20:32:59:56:95:3b:1d:8f:e9:
                    31:10:e5:fc:5f:ea:3a:05:13:43:d7:2e:02:65:13:
                    88:86:e3:0c:d9:07:32:18:08:14:35:89:7c:4c:6f:
                    e3:44:e2:8a:6d:33:03:ba:c6:ba:20:de:f5:ec:91:
                    44:74:4b:b4:1a:d7:0f:c6:b6:a0:50:64:f7:83:ef:
                    7f:15:98:6f:0d:6a:ac:35:86:73:3c:1a:d3:4d:04:
                    04:b9:c2:b3:ec:78:ec:a0:fd:87:1d:a3:0c:f7:56:
                    cb:1b:b4:24:65:eb:04:6a:3d:75:47:db:14:73:6f:
                    ce:d3:fc:81:61:4a:25:68:31:3a:09:fe:be:73:31:
                    be:b8:13:42:c3:d7:43:c8:56:67:0b:66:d1:84:19:
                    95:36:8b:24:da:78:b2:d8:0a:c0:d5:fb:18:23:a5:
                    5a:2c:65:aa:ff:7c:df:f1:30:13:ab:10:81:06:0a:
                    00:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:55:36:F1:7E:C6:67:69:50:D2:F4:2E:6B:CC:99:3E:5D:90:00:65
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/FCBF1666677C11EBB2A3F00CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.255.0/24
                IPv6:
                  2401:4601:255::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:99:18:cd:47:6c:e4:44:c1:d7:07:c4:d1:67:5a:ec:50:78:
         c4:26:ec:7a:dc:0c:f5:84:b8:96:ce:56:ff:83:ed:46:7c:88:
         59:54:ba:0e:2b:c2:6b:0a:ad:0d:0b:d3:a4:5c:4c:14:5f:81:
         b7:51:a3:46:5b:7f:ce:ae:69:e3:27:00:ea:35:51:b9:c4:f4:
         59:50:a3:bd:9b:a1:bf:fa:e7:cf:e5:d0:09:6c:82:be:cc:1a:
         c2:5f:95:27:2b:57:26:c9:ac:21:76:39:84:24:65:4f:fa:df:
         9b:ef:ae:2e:44:6b:21:81:98:c2:ea:9a:be:16:70:39:b4:60:
         97:93:79:30:2f:59:42:ff:dc:2f:89:d1:7c:82:23:86:50:ab:
         99:a7:5d:10:65:97:66:31:f0:ea:47:be:da:ef:14:dd:54:8c:
         1b:cb:5d:2c:6d:c9:a5:f4:be:0f:0d:dd:f2:da:f1:f7:84:5a:
         1f:3e:27:70:be:68:10:de:d8:27:f4:21:5b:e5:50:fc:89:83:
         06:06:d1:8f:29:f3:67:37:e6:92:c5:a4:a7:77:3d:cf:00:c1:
         a0:e5:dd:22:78:06:77:12:a9:76:55:67:f4:61:a9:bb:a0:1e:
         d9:f0:d1:02:71:28:9c:6d:be:04:09:23:0f:13:49:97:02:9a:
         64:f9:db:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:16:26 2026 by rpki-client