This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/18B1B5361CE611EBB543881CC4F9AE02.roa
File:                     18B1B5361CE611EBB543881CC4F9AE02.roa (raw, json)
Hash identifier:          KeAs7Gj0a8YzbbytS20guI+ZWtP16JsyUZNhndCzV6Q=
Subject key identifier:   6E:2B:DD:C1:85:F8:3D:A2:48:9D:81:C7:38:DE:6B:8F:6A:9A:1A:E4
Certificate issuer:       /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64
Certificate serial:       08F2
Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/18B1B5361CE611EBB543881CC4F9AE02.roa
Signing time:             Thu 22 Jan 2026 18:15:02 +0000
ROA not before:           Thu 22 Jan 2026 18:15:02 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     31665
IP address blocks:        206.209.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl
                          rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2290 (0x8f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64
        Validity
            Not Before: Jan 22 18:15:02 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69726926-0ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:cc:9d:08:af:30:b1:e8:0f:97:f3:4b:9f:
                    a5:eb:24:a0:8c:90:f4:dc:50:00:a4:a9:95:27:94:
                    cf:2e:e6:f6:0f:15:d9:41:22:03:40:b9:66:2a:37:
                    bb:56:2c:44:9e:66:37:7a:7e:e1:14:5b:ea:0e:1d:
                    a6:e9:5a:e0:5c:91:e1:20:39:a7:d1:97:45:1c:0f:
                    aa:9d:02:a3:f5:62:ab:35:96:0e:d3:55:50:4e:67:
                    f7:25:98:c8:f8:6b:b9:0b:89:5f:70:ff:73:23:a9:
                    31:8f:ac:c7:49:3b:57:f4:b8:fa:58:cd:5f:f8:0c:
                    8c:f5:ab:e6:42:ff:da:02:05:fa:40:ca:9d:a3:38:
                    38:5d:45:a6:fa:1f:93:ea:ae:bc:ec:da:3c:99:e3:
                    a0:92:03:6e:34:47:80:df:67:94:2e:58:e9:4d:a6:
                    2b:8b:5c:cc:57:91:a1:56:c1:dd:53:ba:1e:f1:9e:
                    4c:61:40:34:21:7f:1e:8f:65:f4:45:10:a0:48:f7:
                    86:3c:98:4a:62:bc:81:75:8e:00:59:8b:4c:3c:b9:
                    96:c8:72:1b:24:d6:07:1a:3a:5d:c1:44:21:79:56:
                    e9:c4:85:bb:76:55:73:c2:27:b9:e2:ba:86:47:02:
                    69:6e:93:07:90:20:ca:21:b1:5c:50:5d:cf:ac:91:
                    28:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2B:DD:C1:85:F8:3D:A2:48:9D:81:C7:38:DE:6B:8F:6A:9A:1A:E4
            X509v3 Authority Key Identifier:
                keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/18B1B5361CE611EBB543881CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.209.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:8b:5b:cb:e3:b7:c2:61:58:1c:ab:df:17:14:40:5b:0b:66:
         81:d5:4a:3b:53:83:16:7a:36:8e:40:2e:28:29:ff:2c:22:2f:
         bc:ec:5d:d7:94:f5:ee:47:6a:16:8f:fa:75:0c:04:98:52:04:
         cb:ac:34:37:73:41:65:ec:81:f3:41:56:17:eb:ee:bf:ba:de:
         d4:ca:a3:78:17:9b:a8:43:20:b5:d8:3b:ee:85:eb:82:81:91:
         ae:d4:14:de:8c:ec:cb:47:c9:42:11:dc:54:05:99:b2:3c:c1:
         d0:e7:bc:8e:d7:9b:3c:44:e8:17:88:88:e4:74:6f:c6:40:b8:
         7d:e7:61:18:24:73:af:e9:06:4b:5f:df:dd:c0:47:74:8e:fa:
         68:c5:0c:b5:fd:e8:22:0b:80:b6:c7:f8:25:96:81:c5:06:8c:
         2f:01:65:6a:47:9b:02:b2:de:60:97:47:03:ec:3d:77:6f:60:
         6e:2e:e9:e5:34:c2:f1:46:4f:0c:3c:e3:ba:db:8b:b2:10:fe:
         75:f3:46:f9:6e:54:db:0d:15:fa:bd:24:16:50:7c:ac:ae:6d:
         2f:01:b5:8e:1d:e7:73:92:60:d4:22:33:50:43:06:b0:81:02:
         11:b0:45:3c:cb:20:7e:aa:0f:f3:a8:cc:3a:3a:3b:ae:cf:5f:
         a4:11:3e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:08:57 2026 by rpki-client