This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa
File:                     230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (raw, json)
Hash identifier:          8Y5GPltcJTXFotQWx1hK80vPT44GZtlaQx0rtVCeUNU=
Subject key identifier:   1E:7C:3A:70:E6:18:37:60:CD:3A:18:DF:40:02:7E:D4:67:F7:23:87
Certificate issuer:       /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
Certificate serial:       84
Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa
Signing time:             Tue 03 Feb 2026 07:25:50 +0000
ROA not before:           Tue 03 Feb 2026 07:25:50 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        203.17.165.0/24 maxlen: 24
                          203.176.120.0/24 maxlen: 24
                          203.176.121.0/24 maxlen: 24
                          2001:df0:219::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Feb 2026 06:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
        Validity
            Not Before: Feb  3 07:25:50 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6981a2fe-7f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:b9:f3:cb:bc:71:60:34:6c:7c:de:36:c4:
                    66:76:03:b6:c7:9c:44:37:5b:77:b0:6d:81:84:bc:
                    fd:0c:41:13:8c:29:72:85:4b:ae:36:e5:e0:86:56:
                    4b:ea:b7:af:a6:11:f9:2c:b3:71:77:7c:6f:25:08:
                    7b:ba:0d:f0:a7:cc:ab:9b:b9:7a:71:ae:20:5d:88:
                    06:97:ba:57:80:1b:b9:b5:98:94:09:b8:75:65:12:
                    a5:d1:88:7e:95:e7:97:88:f7:6a:79:11:97:af:4a:
                    79:26:17:1a:28:87:a1:e3:20:99:e8:6c:0b:29:52:
                    29:84:ef:0d:c4:9c:c3:dc:bb:dc:3a:0e:31:aa:a4:
                    be:2a:71:68:39:c7:63:5f:80:59:0b:e8:28:c7:29:
                    c1:72:af:87:90:5b:b8:47:a1:8d:52:8c:41:78:5a:
                    ab:85:dd:94:47:09:67:11:86:ba:6d:20:b4:5f:18:
                    82:ff:7d:8b:b9:b6:ee:69:9a:de:e3:88:64:6b:ef:
                    19:67:17:97:ce:18:b5:cc:11:57:7d:c3:71:5d:56:
                    fa:a6:16:4b:52:33:a7:de:e3:94:65:42:4a:be:7f:
                    3b:a6:9c:a6:d1:7a:5e:0c:83:e7:a0:39:5b:50:bf:
                    b9:88:28:f3:1e:38:71:36:7e:17:a9:09:85:81:60:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7C:3A:70:E6:18:37:60:CD:3A:18:DF:40:02:7E:D4:67:F7:23:87
            X509v3 Authority Key Identifier:
                keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.17.165.0/24
                  203.176.120.0/23
                IPv6:
                  2001:df0:219::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:98:24:c5:3e:9e:82:db:93:30:8d:1d:08:f3:be:27:42:ee:
         fb:a9:02:8e:c3:3a:22:f3:29:4d:f6:0a:df:35:19:1c:02:82:
         12:67:7a:64:a8:e9:82:4c:f1:84:eb:c2:c0:88:f0:ad:87:17:
         06:88:af:c9:c2:a5:cb:de:53:22:3b:63:a6:bb:30:01:be:5a:
         35:22:2e:dd:a2:7e:22:a9:ea:37:5f:e3:4c:ad:5f:68:57:b3:
         06:d0:75:6f:d7:49:c7:30:06:43:7f:e5:ce:28:e9:77:fd:5a:
         65:ca:f5:c2:14:d9:d3:59:85:31:b4:5b:d4:c2:b0:7b:2c:57:
         c2:c1:c3:8e:27:54:4d:9b:86:18:dc:91:89:13:06:44:55:bc:
         2e:33:34:af:f7:bc:ef:fe:2d:27:bc:d4:a3:23:02:1e:cb:c7:
         82:b7:63:46:81:f0:a0:42:b5:44:9a:2d:d7:dd:44:90:d0:10:
         03:41:ca:7b:33:dd:d5:fb:65:bc:6d:57:1b:52:1d:1c:1a:e4:
         de:fd:63:71:b5:b6:bc:72:5c:38:3b:21:d3:9a:3b:d7:48:20:
         05:46:49:29:a2:7e:bc:66:cd:4a:cf:ae:3f:15:f6:96:72:6b:
         b5:1d:22:4a:12:40:16:2e:96:b8:d5:ff:b2:eb:b9:13:04:b4:
         ee:30:ca:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 06:40:42 2026 by rpki-client