This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/D6C060C27E1811EEB9B4FE4AC4F9AE02.roa
File:                     D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (raw, json)
Hash identifier:          4UszidGd64DKKax3KpdO17A1MmG7WH0sW9f2Su8r+rc=
Subject key identifier:   87:36:8B:77:07:72:54:56:77:75:99:89:26:E2:D5:42:CA:A7:A6:E9
Certificate issuer:       /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial:       05B1
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/D6C060C27E1811EEB9B4FE4AC4F9AE02.roa
Signing time:             Fri 02 Jan 2026 23:19:22 +0000
ROA not before:           Fri 02 Jan 2026 23:19:22 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     61317
IP address blocks:        202.43.6.0/24 maxlen: 24
                          202.43.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Jan 2026 22:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1457 (0x5b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
        Validity
            Not Before: Jan  2 23:19:22 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6958527a-e5fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4a:7c:ce:4a:71:7e:e4:20:e6:50:ae:68:7b:
                    6e:0a:67:08:12:a9:8e:f8:e1:58:44:c1:d8:bb:d8:
                    76:d5:50:eb:09:76:ef:ef:af:2a:70:7f:d8:13:67:
                    53:13:ad:5c:ec:97:c0:b8:51:fb:89:34:fd:04:35:
                    f8:69:1e:16:de:23:49:8d:3d:e2:a8:e2:59:69:e3:
                    5c:66:06:ee:c3:a9:6a:83:4c:b5:af:a5:11:88:fe:
                    00:74:42:36:28:49:a0:ac:31:28:99:69:4a:50:8e:
                    36:b8:4a:2a:6d:60:43:44:71:29:c9:de:e3:85:09:
                    fc:15:47:c7:08:7d:e8:db:63:4a:e9:62:27:e4:5c:
                    09:e6:62:74:49:4a:1d:a4:75:10:d3:0c:17:b4:1a:
                    e7:d0:e6:1c:22:96:05:35:69:ce:99:72:0a:16:ff:
                    cd:70:c4:0b:df:cd:ab:57:d7:d3:d0:c6:b1:7e:7d:
                    ee:8e:37:73:13:86:f6:5b:94:a2:eb:e8:87:25:c0:
                    e4:7b:ee:e6:f5:90:85:e1:50:8a:09:1d:02:e7:c2:
                    10:b3:6a:f6:9e:9b:a7:65:e7:bb:fe:24:66:ad:38:
                    aa:47:32:0b:32:ec:1d:a1:ba:38:f9:97:93:3c:94:
                    69:0e:ef:de:d2:3c:54:9c:50:0c:bc:49:d9:7f:63:
                    5f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:36:8B:77:07:72:54:56:77:75:99:89:26:E2:D5:42:CA:A7:A6:E9
            X509v3 Authority Key Identifier:
                keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/D6C060C27E1811EEB9B4FE4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:a8:1b:d1:27:e2:74:b0:ab:c3:0c:a9:5b:e4:02:76:c7:1c:
         e5:bb:3e:50:7e:4c:b1:da:d0:8e:29:da:3f:cb:c3:bd:b5:40:
         79:95:31:fa:9b:47:df:e5:c5:f3:a0:2f:0b:52:6f:5f:ef:92:
         a6:ee:1e:a0:05:ac:49:2a:8c:84:42:58:30:3a:43:df:ed:67:
         a8:b2:d4:fe:90:8a:6d:26:7b:87:f2:90:85:01:2f:05:d3:07:
         9c:75:ae:ee:a7:9c:60:62:06:72:36:a6:09:b6:71:b5:88:d2:
         c3:3c:8b:b3:25:9e:81:03:41:59:17:11:e7:0c:70:ad:fb:ba:
         65:e5:c8:08:e8:70:15:ab:6b:09:cd:f6:42:2e:ad:22:45:ee:
         be:ff:f9:83:9d:8a:c7:fd:d3:a0:40:80:e8:ad:43:f6:3c:1b:
         3c:ef:2d:2d:d7:72:07:62:c2:6a:07:c8:0c:19:5a:71:14:1c:
         7c:40:f8:7c:59:4a:e9:de:d4:2f:e5:66:65:20:4d:d5:3f:b3:
         3a:a0:df:92:b7:02:12:c1:2a:4f:32:51:37:cf:d4:47:15:38:
         f1:45:bd:1e:3a:e3:9d:70:3e:a1:c3:1b:78:0a:80:7b:bc:52:
         79:f1:f1:5a:97:c7:9f:3a:ba:3a:c8:72:c7:d0:3a:51:0f:b1:
         d0:84:da:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 07:50:46 2026 by rpki-client