This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/C491ED725A7A11F083B3F885C4F9AE02.roa
File:                     C491ED725A7A11F083B3F885C4F9AE02.roa (raw, json)
Hash identifier:          6qcn37PFMi//EW0GVKvNGSUOWOKTfR6Zp/qONEE6Wts=
Subject key identifier:   00:8C:59:B3:8A:42:D4:EB:C0:28:0C:10:33:8C:DF:36:73:9B:B9:17
Certificate issuer:       /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Certificate serial:       CA
Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/C491ED725A7A11F083B3F885C4F9AE02.roa
Signing time:             Tue 23 Dec 2025 05:26:04 +0000
ROA not before:           Tue 23 Dec 2025 05:26:04 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     135374
IP address blocks:        160.250.196.0/23 maxlen: 23
                          160.250.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
        Validity
            Not Before: Dec 23 05:26:04 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=694a27eb-a96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:25:0f:d2:a0:15:0c:ac:7a:71:47:e0:91:be:
                    e7:21:b5:4a:c7:be:bd:78:76:3d:78:20:83:1b:02:
                    1b:5f:e1:78:1e:b3:97:fe:f6:fd:b8:d3:7c:59:80:
                    f2:49:33:5f:02:34:75:51:3c:26:b2:24:ac:5b:61:
                    b4:8b:88:dd:8f:79:1c:6c:af:96:49:66:14:12:c4:
                    37:7e:55:ba:3c:75:5b:28:c4:a2:5a:7f:86:9f:08:
                    ba:d0:70:ab:1b:12:72:65:f3:e2:ef:11:cd:65:c6:
                    ca:31:09:a3:c5:cf:31:c9:30:ab:13:ae:5e:e0:b7:
                    ec:24:01:69:f5:c5:2a:5f:a4:91:39:e3:26:d3:50:
                    f8:47:2a:d2:47:96:56:c2:05:05:cb:8b:63:57:69:
                    4d:75:35:f9:81:a9:ab:4d:6e:f5:c4:39:5b:87:03:
                    95:93:6c:dc:95:d0:67:50:ca:b0:79:65:51:36:41:
                    83:35:89:db:f3:14:fe:51:2d:8d:29:d9:af:fb:85:
                    1e:88:bb:aa:9b:16:53:5d:c8:f9:45:95:7b:db:2d:
                    65:c3:48:89:e4:d4:1c:4d:82:8e:d4:f1:e2:4b:f5:
                    35:b8:2e:e9:86:22:57:2e:36:2b:53:77:79:48:ce:
                    a2:e4:d8:e1:02:4c:1b:15:85:04:1b:24:8e:66:44:
                    8b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8C:59:B3:8A:42:D4:EB:C0:28:0C:10:33:8C:DF:36:73:9B:B9:17
            X509v3 Authority Key Identifier:
                keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/C491ED725A7A11F083B3F885C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:f1:2f:b2:8f:6f:96:14:9c:07:7a:01:b3:d9:29:65:33:27:
         a0:88:13:a0:00:bd:9d:00:4a:6e:a9:51:21:cc:d2:28:be:71:
         56:bd:c8:73:7a:3b:57:bc:75:a2:1a:91:2e:6f:24:94:93:44:
         92:8a:f6:0f:45:45:bb:e5:f7:49:a6:e5:3d:de:fb:c4:69:0b:
         2c:78:58:9f:47:2d:20:af:48:de:e3:3f:53:fd:8b:2d:65:0a:
         04:fc:5c:7a:d8:9b:2a:eb:39:b2:91:6e:37:ee:6a:c2:a9:70:
         a4:97:81:15:45:eb:f4:93:11:ef:01:7c:77:5d:ff:ec:aa:21:
         8b:82:16:c1:02:a8:19:c5:39:5f:25:fc:c9:d4:e5:06:79:b8:
         40:6f:c0:f6:a3:e5:96:1d:38:67:d7:ec:a4:23:bb:85:05:d2:
         6b:08:ac:df:ed:08:f5:a6:a0:2d:65:fd:39:52:67:d9:dd:00:
         bf:e7:61:02:53:fd:5b:bf:8f:d5:9b:ce:9a:f5:35:5d:9d:a4:
         81:01:a2:c5:af:9b:e2:a5:7f:61:50:3c:aa:b6:69:cd:13:af:
         2c:d1:80:bf:1b:db:5f:ae:2e:1c:75:ef:d1:b1:d3:fb:18:2c:
         6b:83:bf:27:54:50:6c:68:16:b8:30:35:1d:e2:83:2a:32:35:
         17:45:07:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:20 2026 by rpki-client