This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5775FA1AA01911EFAAE00D0AC4F9AE02.roa
File:                     5775FA1AA01911EFAAE00D0AC4F9AE02.roa (raw, json)
Hash identifier:          WAgQqZ+sK1eoEXRfSHE1Amv8JuBBPv2gpAHnpNqEcJE=
Subject key identifier:   41:93:78:CF:26:14:7F:40:EB:B2:79:DE:B7:F0:26:1E:B4:0B:E9:A4
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       1C19
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5775FA1AA01911EFAAE00D0AC4F9AE02.roa
Signing time:             Mon 11 Nov 2024 10:40:17 +0000
ROA not before:           Mon 11 Nov 2024 10:40:17 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     213990
IP address blocks:        113.203.209.0/24 maxlen: 24
                          113.203.210.0/24 maxlen: 24
                          113.203.217.0/24 maxlen: 24
                          113.203.220.0/24 maxlen: 24
                          115.167.20.0/22 maxlen: 22
                          115.167.56.0/22 maxlen: 22
                          115.167.60.0/22 maxlen: 22
                          115.167.78.0/24 maxlen: 24
                          175.110.80.0/22 maxlen: 22
                          175.110.105.0/24 maxlen: 24
                          180.178.164.0/24 maxlen: 24
                          180.178.190.0/24 maxlen: 24
                          223.29.226.0/24 maxlen: 24
                          223.29.228.0/24 maxlen: 24
                          223.29.230.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7193 (0x1c19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov 11 10:40:17 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6731df11-7770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:c9:94:e9:9b:06:6b:f4:e4:fb:ba:30:ab:
                    48:01:90:6e:ec:30:83:1e:d5:c7:1b:2a:f0:29:87:
                    fd:98:8b:1e:cf:e6:a2:2c:fb:d9:9e:1e:da:9c:fa:
                    93:b3:84:20:27:2f:1e:d8:50:df:c8:b8:ac:48:5f:
                    01:da:d6:1e:5c:be:5d:ee:40:dd:c2:07:86:29:e1:
                    e7:2c:01:11:26:a0:f2:6a:fb:6b:b7:18:65:82:21:
                    29:13:51:11:07:5a:71:2f:4a:0d:8b:6e:4d:5d:99:
                    25:fe:25:d4:5c:e7:b1:e5:0a:87:69:eb:70:da:bb:
                    1e:6e:8c:1d:e6:94:84:b8:bf:a4:69:c2:54:33:c7:
                    9e:df:32:cd:75:82:77:8e:25:ce:9d:a7:92:c7:9a:
                    2c:c4:ed:70:2c:c8:28:fb:0a:f8:16:c7:6f:6b:3c:
                    b7:6c:0e:8a:60:e1:34:f7:8a:c0:0f:69:40:9b:07:
                    bc:14:bf:02:8b:d8:52:e3:f8:61:89:6d:fe:f1:aa:
                    39:28:16:c2:56:1c:59:9e:33:e0:68:e7:45:04:e9:
                    2a:ed:02:f8:99:e3:3d:ad:49:08:7e:c5:7a:70:a3:
                    77:42:f3:c3:cc:19:aa:bc:ad:8a:d0:8e:bb:28:0a:
                    86:1e:fe:45:2a:75:d2:f2:2d:8a:6a:60:b4:b9:5e:
                    cd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:93:78:CF:26:14:7F:40:EB:B2:79:DE:B7:F0:26:1E:B4:0B:E9:A4
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5775FA1AA01911EFAAE00D0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.209.0-113.203.210.255
                  113.203.217.0/24
                  113.203.220.0/24
                  115.167.20.0/22
                  115.167.56.0/21
                  115.167.78.0/24
                  175.110.80.0/22
                  175.110.105.0/24
                  180.178.164.0/24
                  180.178.190.0/24
                  223.29.226.0/24
                  223.29.228.0/24
                  223.29.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:43:1e:9a:ad:73:23:62:af:78:10:73:5d:4d:41:88:f2:1e:
         ef:94:d3:ef:34:40:be:74:4a:00:29:a0:41:83:b0:c9:52:49:
         0d:bc:90:02:7a:92:01:80:4e:24:1b:e0:0a:bc:6a:be:00:e7:
         56:a6:1b:93:19:4b:38:d4:6b:f0:ea:46:29:03:7e:eb:66:eb:
         8a:25:5c:a2:a8:f3:ac:48:0c:44:b4:77:3c:9c:78:8a:99:a0:
         36:6e:a1:a6:62:8f:8c:4e:e9:a6:d0:f4:64:8b:47:52:11:af:
         97:d7:26:6f:cf:9f:ef:5e:ec:59:55:9d:f3:de:91:91:07:f6:
         97:18:d9:10:cf:eb:85:94:d0:a3:8f:81:56:e5:8e:51:47:92:
         e0:2e:bb:7d:b0:e8:ae:35:e6:27:53:9b:a0:ef:9c:75:75:c5:
         a8:da:2a:dc:99:03:e3:43:d5:27:02:1f:f7:e2:79:a4:64:90:
         ab:90:0b:b4:34:b0:f9:21:9b:cf:be:8d:e7:be:06:86:e3:5e:
         c6:d6:f3:85:a2:b9:02:87:1c:13:f3:85:6e:f5:4b:1e:2d:3d:
         16:cb:6a:29:73:04:7b:a7:95:0c:34:91:ef:b7:4d:51:b0:d1:
         dd:0e:d7:b9:b4:18:81:62:45:47:eb:5e:64:1d:8e:d7:24:a9:
         d7:70:8b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:01:56 2025 by rpki-client