This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/1FC17CE2EB2D11F0971959663D6F56BC.roa
File:                     1FC17CE2EB2D11F0971959663D6F56BC.roa (raw, json)
Hash identifier:          cDE3xKp+jZXdbfBYzrl27mukC0P3+LreHuJW5kB96qM=
Subject key identifier:   A2:8C:CB:87:6C:8C:48:32:76:11:D1:95:47:09:A0:F2:02:FC:E8:11
Certificate issuer:       /CN=A91C7E5B/serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3
Certificate serial:       84
Authority key identifier: AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/1FC17CE2EB2D11F0971959663D6F56BC.roa
Signing time:             Tue 06 Jan 2026 18:25:49 +0000
ROA not before:           Tue 06 Jan 2026 18:25:49 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152698
IP address blocks:        165.99.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl
                          rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 06:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7E5B, serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3
        Validity
            Not Before: Jan  6 18:25:49 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=695d53ad-5ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:64:47:6c:7e:f9:2a:ce:fa:73:17:35:c0:68:
                    26:cf:5c:47:a2:80:98:22:13:9e:c3:41:13:91:d8:
                    40:d3:1b:ba:3f:9e:cd:f2:bd:c3:a0:12:6f:a2:7f:
                    04:6f:d3:cf:7b:22:d1:0a:dd:39:12:b6:7e:b9:70:
                    96:79:80:ae:cb:f8:89:da:ed:0b:62:da:b1:99:f2:
                    33:ba:58:15:06:8b:a1:26:3d:fe:c2:f3:13:97:8e:
                    c9:00:77:df:e6:5f:05:03:bb:9c:04:5b:60:27:a7:
                    08:e5:13:14:c8:fe:92:12:c6:b8:db:7f:50:5f:3c:
                    52:61:b3:29:6f:ee:b9:c0:3a:6e:50:9d:d5:7d:91:
                    58:ba:81:36:73:8b:3c:0e:2d:ae:c8:49:97:05:59:
                    f1:5b:ae:d7:e6:df:f1:cb:bd:d0:19:e8:85:c9:ab:
                    af:ad:7d:f7:2f:25:08:7d:58:54:c1:b4:05:09:c5:
                    1d:f0:cf:41:c3:7c:a4:82:93:2c:8b:58:af:ba:6f:
                    c3:61:a8:d1:2f:15:86:28:ed:ed:b7:d7:95:ef:25:
                    2d:11:86:71:1a:dd:0a:47:8f:0e:3a:da:02:89:b9:
                    9b:36:43:ee:9a:41:03:70:54:2e:e4:ce:42:33:22:
                    28:43:52:1b:10:fb:aa:0e:2f:f2:8d:10:83:3d:44:
                    54:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8C:CB:87:6C:8C:48:32:76:11:D1:95:47:09:A0:F2:02:FC:E8:11
            X509v3 Authority Key Identifier:
                keyid:AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/1FC17CE2EB2D11F0971959663D6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:6e:dc:5c:e0:f4:01:2c:8f:3e:44:f2:76:98:8b:c4:c8:77:
         cf:33:c4:99:b5:8c:b8:59:1e:c3:cd:e6:a2:3b:25:12:41:86:
         0a:ad:c9:4c:c4:e5:81:6c:29:78:0b:2c:20:29:17:2b:f4:67:
         cf:93:3e:f6:51:56:50:3d:5c:ea:93:87:fa:13:7c:55:f9:e5:
         42:f1:83:7c:be:d6:3b:61:bb:a9:1a:cb:d9:42:77:ff:96:1f:
         f9:28:59:be:19:84:a6:8d:cf:04:42:00:6a:ca:0a:0f:bb:45:
         b8:0c:ed:d7:67:d3:e8:46:9e:2f:04:be:f4:2a:dd:c9:c8:fe:
         56:88:2c:91:52:db:6c:5f:b7:85:90:fe:42:e1:a9:8d:94:59:
         e7:8d:12:d0:70:01:0c:ac:7f:b1:28:d0:2d:4d:e8:1b:96:52:
         9e:02:7a:f7:a5:d7:4f:69:d9:40:6a:58:4c:5d:1d:c0:cb:88:
         9d:fa:13:41:42:c2:a1:14:38:2a:d4:78:31:6c:fe:5f:87:00:
         40:66:68:30:55:d4:0b:fc:52:31:71:10:25:0b:51:42:2b:b0:
         f2:34:ea:2a:ee:69:70:2d:6d:73:fe:d7:47:9a:d7:21:22:35:
         2d:ad:2c:ff:cc:7f:86:53:fe:da:bc:c7:3b:bf:13:db:d4:ed:
         39:f1:35:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 00:38:48 2026 by rpki-client