This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/3AE10060B0F111EE9727201AC4F9AE02.roa
File:                     3AE10060B0F111EE9727201AC4F9AE02.roa (raw, json)
Hash identifier:          V+4yCja0lu/z8oiWyjv+X6ucVeVFlLTjQAo0sFjzGVQ=
Subject key identifier:   B4:FF:2D:B9:A7:B3:8C:9E:3D:B5:B0:1E:00:00:8E:27:5A:6A:C2:0C
Certificate issuer:       /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F
Certificate serial:       0182
Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/3AE10060B0F111EE9727201AC4F9AE02.roa
Signing time:             Sat 17 Jan 2026 03:23:09 +0000
ROA not before:           Sat 17 Jan 2026 03:23:09 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     152186
IP address blocks:        113.192.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl
                          rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED35E, serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F
        Validity
            Not Before: Jan 17 03:23:09 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696b009d-dcc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:b2:32:39:d6:02:d7:58:44:18:69:6b:2a:
                    b8:7f:da:cf:1f:8b:5f:fe:3d:cc:bf:41:75:6c:47:
                    c5:69:a5:c9:6c:ff:48:cd:f1:a7:c3:57:b7:67:9b:
                    b2:12:be:e9:c2:5e:8b:34:32:35:09:23:12:ba:d0:
                    62:9e:25:71:11:30:16:85:3a:e0:e4:f2:0a:75:ce:
                    c8:60:e0:ea:e9:6d:6e:33:35:62:40:77:30:a2:e5:
                    3b:99:01:5e:4d:94:c3:4a:c5:ff:e0:4f:37:d5:b0:
                    fc:c6:93:1b:0e:50:fc:a4:c7:b0:61:b9:80:a4:78:
                    d5:92:71:4d:fd:1c:f0:e0:e1:ad:b1:49:dc:c2:b5:
                    1d:4b:b6:29:02:15:c9:49:58:0a:4b:8d:20:ea:af:
                    fc:7f:3f:2c:53:73:07:3e:ec:48:cf:12:85:bd:11:
                    73:76:db:69:a4:b4:c7:b4:20:8b:6b:15:05:de:b8:
                    45:3b:0d:db:7e:61:3c:db:f0:0b:c8:71:59:a5:78:
                    9f:04:32:43:a5:52:03:cc:0e:2f:18:8d:35:84:94:
                    d0:b3:73:9a:65:d1:3e:c3:a2:49:da:1b:3d:4d:2f:
                    49:fa:57:28:5f:f6:d2:97:1e:7f:5d:2b:dc:fc:3d:
                    63:4c:5b:09:62:47:3a:e3:42:9a:6c:5b:5e:b0:d5:
                    e8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FF:2D:B9:A7:B3:8C:9E:3D:B5:B0:1E:00:00:8E:27:5A:6A:C2:0C
            X509v3 Authority Key Identifier:
                keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/3AE10060B0F111EE9727201AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:83:d0:35:8b:58:77:63:f4:e8:60:a1:52:8b:2c:00:43:fa:
         c2:9e:ea:27:fd:df:20:7b:e5:41:06:30:cc:28:09:fc:08:52:
         48:7a:72:3a:f7:a9:8f:84:6e:98:62:21:cc:5f:73:fe:eb:f0:
         91:9c:a8:75:9b:ec:62:72:38:24:61:10:1c:96:b7:56:dd:3b:
         c4:25:4a:ae:ed:70:4c:fe:3d:6e:6b:98:90:66:a9:6f:76:7a:
         51:cc:29:47:b5:38:11:58:c4:9f:f9:4f:c4:05:5f:ae:66:46:
         58:91:2e:98:b9:b6:c0:9b:17:6a:1e:ee:dc:e6:a7:ef:d4:87:
         f7:26:1e:e7:af:57:99:7f:01:a1:7d:22:be:6f:dd:43:ae:1b:
         f7:7e:a0:4a:47:93:d5:be:a6:d5:7b:e7:ce:29:17:46:82:b2:
         d2:36:00:16:0b:d9:4b:dd:1a:e7:ea:7d:a0:4e:f4:62:49:41:
         da:35:4d:52:7b:a1:7d:cf:17:3f:9b:62:48:ea:97:9a:9c:c9:
         fc:0e:bf:a3:04:42:30:01:19:9a:18:a8:b7:b1:ab:57:38:41:
         da:62:6c:d6:09:14:2b:9a:37:a7:22:a8:71:28:56:6f:53:bc:
         34:03:44:a6:52:ca:eb:19:37:76:78:b1:c3:19:29:90:e7:22:
         d5:bb:92:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:33:42 2026 by rpki-client