This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/5FA1BF8802DD11EE86865A23C4F9AE02.roa
File:                     5FA1BF8802DD11EE86865A23C4F9AE02.roa (raw, json)
Hash identifier:          wpBZBtNCDLHxBkBL5a29BX4r7aASlL8Pki5MOyVlQBc=
Subject key identifier:   D3:C5:F3:31:D4:EA:2F:E0:3D:F8:6A:58:1F:83:18:75:46:81:6D:29
Certificate issuer:       /CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Certificate serial:       0646
Authority key identifier: C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/5FA1BF8802DD11EE86865A23C4F9AE02.roa
Signing time:             Thu 22 Jan 2026 22:19:09 +0000
ROA not before:           Thu 22 Jan 2026 22:19:09 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138627
IP address blocks:        113.30.129.0/24 maxlen: 24
                          150.195.215.0/24 maxlen: 24
                          150.195.216.0/24 maxlen: 24
                          202.75.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
                          rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1606 (0x646)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4D3D, serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
        Validity
            Not Before: Jan 22 22:19:09 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6972a25d-64eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:1e:b4:09:dc:60:73:13:ea:30:6f:9c:78:
                    94:43:ad:99:85:e2:d0:09:58:5a:2d:8e:a2:f9:26:
                    b9:c0:41:93:2b:26:49:4f:71:1e:16:50:47:89:35:
                    e6:25:32:64:35:1b:64:4a:b4:3f:70:ee:90:04:c9:
                    aa:b7:a0:80:49:8c:64:77:55:75:e2:17:c1:88:c4:
                    f8:b6:6a:1e:ec:d2:d7:cc:80:19:54:8c:93:5b:00:
                    ad:b7:a0:0c:1e:ed:94:8b:3a:ad:67:0a:bb:8a:84:
                    a6:be:9f:56:26:14:9f:cf:e2:3d:aa:cd:ee:b0:6f:
                    fd:70:c8:3b:68:25:04:f3:ed:ea:83:78:c2:1a:c4:
                    c3:81:d8:0b:1b:b2:c9:75:ec:8e:00:72:ce:f4:8a:
                    80:b1:87:6b:44:e9:a8:2e:b5:a1:5f:08:29:53:07:
                    8f:64:de:2f:4e:cb:f4:28:f5:a2:c4:87:af:ab:5c:
                    f5:68:9a:1b:f8:cc:49:bc:8c:39:b3:85:fb:39:e1:
                    4b:25:7b:9c:71:5c:74:91:c8:b5:7c:ac:7d:b5:a2:
                    46:db:b7:02:0c:25:e9:96:0c:11:5e:e8:f9:ba:33:
                    98:78:52:51:15:47:81:64:a6:7b:01:9d:3f:f2:70:
                    e6:db:3c:c5:4a:68:ff:4d:dc:75:0c:20:52:c6:16:
                    c1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C5:F3:31:D4:EA:2F:E0:3D:F8:6A:58:1F:83:18:75:46:81:6D:29
            X509v3 Authority Key Identifier:
                keyid:C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/5FA1BF8802DD11EE86865A23C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.30.129.0/24
                  150.195.215.0-150.195.216.255
                  202.75.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:94:48:89:9f:8f:4b:65:1f:0e:a8:a1:3e:5a:8d:81:d9:4c:
         47:00:eb:4d:7b:79:09:1b:dd:ef:9f:ea:35:f1:ba:0a:c7:41:
         21:3f:f3:24:47:42:cc:50:80:5b:97:1c:67:86:6f:81:ac:67:
         9b:3f:58:70:76:e5:f8:cd:1e:bd:5f:30:2d:9d:d4:8e:c2:20:
         1a:c4:77:30:bc:b3:15:46:3b:7c:bb:ed:44:5b:3b:51:eb:63:
         ca:72:e0:6f:25:6d:cd:84:ee:96:a8:39:5e:df:41:f7:0b:4c:
         8c:d6:36:d2:ef:f6:f2:f3:e2:97:7a:c5:6e:2e:b7:31:d4:61:
         ce:b1:dc:88:32:78:ce:6f:dc:98:38:73:b4:7d:2a:8c:0b:28:
         56:13:60:96:d9:d2:25:d7:1e:c8:85:b8:e7:70:d6:ab:2a:7e:
         67:e5:2b:b8:6d:d3:e0:5b:17:bf:ab:ba:56:b2:71:3f:ce:8c:
         36:6d:fd:de:b5:40:70:e1:74:05:0a:61:92:a5:9d:c8:5a:52:
         42:e4:6c:f4:30:35:34:17:69:b3:bb:c8:fb:ca:b6:df:5f:44:
         43:2e:ef:89:d7:f6:75:1e:4a:5f:d4:7a:7b:23:78:b8:c8:77:
         b7:eb:fc:5f:1f:2a:4c:ee:dc:62:3c:26:45:f8:71:c4:94:f6:
         d6:cb:98:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:42:51 2026 by rpki-client