This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/6CD99EF455C911E78F401587C4F9AE02.roa
File:                     6CD99EF455C911E78F401587C4F9AE02.roa (raw, json)
Hash identifier:          UuYB4WzvgQjLH0B44aPDoKSEcVPBbWtM3rQy9k0A+k0=
Subject key identifier:   FE:EB:36:43:A9:84:99:A8:12:9A:73:39:57:11:79:CF:62:DC:CA:24
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       25D0
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/6CD99EF455C911E78F401587C4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:13:57 +0000
ROA not before:           Fri 02 Jan 2026 16:13:57 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     133481
IP address blocks:        184.22.0.0/16 maxlen: 24
                          184.82.0.0/17 maxlen: 24
                          184.82.136.0/21 maxlen: 24
                          184.82.144.0/20 maxlen: 24
                          184.82.160.0/19 maxlen: 24
                          184.82.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 15:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9680 (0x25d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jan  2 16:13:57 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957eec5-35da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4b:8a:82:73:22:24:d5:6e:63:e2:a8:dc:24:
                    c9:d1:37:1f:c1:7f:79:af:a1:61:12:a3:4b:85:d5:
                    de:be:25:eb:d5:c3:fb:9c:a1:5a:43:ed:4c:e1:8c:
                    44:1b:9f:86:7d:28:38:3f:5b:6e:25:89:61:d6:3c:
                    4d:19:12:4e:69:c7:ef:49:d9:1e:73:3e:20:c1:39:
                    bf:40:d4:d4:2b:57:9a:8e:da:f1:ff:17:63:ad:58:
                    70:55:33:ad:38:fa:22:dd:5e:45:85:e1:7e:58:cb:
                    3d:70:dc:99:ae:cc:54:e9:d9:f5:1d:1b:39:c5:b0:
                    47:9c:c6:56:d8:78:bc:aa:30:09:fe:d5:27:6f:c6:
                    13:8a:f0:f5:f2:d9:6d:7c:4d:41:f7:84:55:f1:a0:
                    7c:5f:a5:7c:20:27:2a:56:7a:d2:90:b4:80:4c:c9:
                    c9:ed:ca:39:b8:cf:a9:c1:86:ae:24:87:00:83:db:
                    f8:e2:b7:48:97:95:9e:07:7e:46:24:9d:53:51:97:
                    81:ab:b9:e8:bb:79:d0:8c:fc:8a:4e:31:71:a1:d3:
                    a4:a0:72:eb:42:87:2e:34:d2:84:d7:12:38:36:d8:
                    0b:39:77:d0:c9:96:00:bb:a4:a3:e3:b9:3c:01:be:
                    1c:a6:61:c5:06:11:d3:58:ae:bf:74:3a:9b:cb:64:
                    9b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EB:36:43:A9:84:99:A8:12:9A:73:39:57:11:79:CF:62:DC:CA:24
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/6CD99EF455C911E78F401587C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.22.0.0/16
                  184.82.0.0/17
                  184.82.136.0-184.82.255.255

    Signature Algorithm: sha256WithRSAEncryption
         4a:35:a1:32:61:95:e8:f6:47:5e:00:98:bb:a8:3d:1e:19:31:
         f3:25:9b:76:94:ad:c1:2f:6f:65:2e:ae:53:47:b2:39:d1:a6:
         55:e1:ab:9f:20:e4:1e:3f:61:bf:b1:28:41:0d:5a:3d:c0:63:
         db:c9:c2:4a:1b:f8:9c:3d:96:68:77:75:49:f1:92:29:b0:76:
         03:45:5d:fd:f6:ab:2f:98:c5:ba:b0:0f:8b:fa:c7:72:f8:de:
         a3:a4:f3:4b:2c:78:14:aa:84:bc:4b:10:57:d5:6b:2e:33:16:
         2c:ef:a7:3f:1e:b5:ba:02:9c:84:e4:93:ad:b5:e1:14:37:5b:
         a7:e6:1a:bb:aa:71:49:97:a5:92:4d:48:00:5c:13:7b:4c:a3:
         db:c8:60:ac:2e:b8:0a:65:07:e5:98:ad:9d:9c:a4:1a:ed:b4:
         62:1e:b3:52:2a:9a:5b:ee:8e:3e:4f:7f:47:d1:27:53:92:1b:
         60:24:9e:f5:9d:53:30:2f:9c:76:60:ee:06:22:9f:13:35:7f:
         ca:c2:69:a0:7b:ec:cd:f6:65:55:24:58:db:e7:8d:9b:7f:4d:
         7d:5e:4a:69:9f:1f:d9:d6:e8:c1:5f:fc:da:6a:b8:b5:2e:a6:
         cc:00:a7:5f:2d:88:d7:77:38:a8:b8:85:7c:09:5f:90:55:be:
         27:02:67:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:15:27 2026 by rpki-client