This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/DEAF962CE6EE11F09FA64894636F56BC.roa
File:                     DEAF962CE6EE11F09FA64894636F56BC.roa (raw, json)
Hash identifier:          wQNnJuUmmdrDOtKr73EtL+pOekaFEidKjhnM4shnrHc=
Subject key identifier:   CE:C8:1C:CB:C8:BB:C6:4D:38:C6:8A:57:E8:56:1A:DD:C9:11:DA:ED
Certificate issuer:       /CN=A91736F5/serialNumber=134FC480DF167AE80FB3F4C44DEF6A9BA9995A91
Certificate serial:       02
Authority key identifier: 13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/DEAF962CE6EE11F09FA64894636F56BC.roa
Signing time:             Thu 01 Jan 2026 08:50:06 +0000
ROA not before:           Thu 01 Jan 2026 08:50:06 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     141218
IP address blocks:        144.79.248.0/23 maxlen: 23
                          144.79.248.0/24 maxlen: 24
                          144.79.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.crl
                          rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 07:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91736F5, serialNumber=134FC480DF167AE80FB3F4C44DEF6A9BA9995A91
        Validity
            Not Before: Jan  1 08:50:06 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6956353e-cf21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:2e:a3:42:05:2b:9f:c6:1b:b7:5c:8a:ea:
                    ac:21:ab:4e:89:3f:9f:3e:16:11:5a:a8:04:24:f7:
                    3e:d9:ae:9b:45:09:17:a9:64:5d:38:b4:10:3f:3b:
                    1d:b1:b3:6b:07:65:89:52:73:8e:57:93:3d:67:2f:
                    44:94:85:c5:3b:e8:b1:c1:26:f9:66:fe:64:8b:07:
                    99:25:fd:84:c2:48:81:44:46:f4:f7:36:9f:77:17:
                    58:ed:e2:d7:19:ec:97:69:9e:58:98:ea:4b:51:c8:
                    91:7d:4f:14:c6:de:a0:52:db:b7:f8:34:d8:bf:2e:
                    5f:29:fe:fd:5e:d6:45:df:f9:e4:34:5a:71:39:ab:
                    cb:ad:43:19:37:16:87:93:4e:d6:fb:16:87:8f:80:
                    19:ee:dd:6a:e0:67:20:06:dd:58:9b:ac:e0:35:1e:
                    cb:aa:86:08:ec:f6:be:b1:48:79:08:92:05:78:5d:
                    5e:c8:fa:d4:2c:e2:53:9e:4b:49:9f:e0:21:29:c5:
                    07:3d:40:f8:0e:88:80:56:d7:03:fa:01:53:7c:ce:
                    3d:c6:97:90:b5:f8:22:1a:13:99:a5:46:84:4d:10:
                    5c:78:4c:a0:89:39:c0:21:09:4e:9d:43:25:0f:3b:
                    4c:66:39:fd:a7:8a:7d:f7:48:84:ee:f3:6a:03:fb:
                    d6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C8:1C:CB:C8:BB:C6:4D:38:C6:8A:57:E8:56:1A:DD:C9:11:DA:ED
            X509v3 Authority Key Identifier:
                keyid:13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/DEAF962CE6EE11F09FA64894636F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:3a:22:90:db:c4:a1:aa:61:e8:29:55:ca:72:8b:a6:00:d2:
         41:88:d8:35:33:d6:ae:21:b9:1e:28:aa:20:3f:34:60:2a:b1:
         20:3a:b8:46:6c:2d:af:f2:2a:fa:ae:50:00:af:01:93:71:89:
         56:f6:54:15:1f:4e:c6:3b:a8:8c:fe:09:93:f9:7e:97:27:6b:
         8a:a2:d9:09:35:1f:cd:8b:26:63:27:3c:34:ae:5a:a7:f2:3f:
         1f:67:32:2c:89:f1:8f:88:d3:fa:19:62:4c:ab:80:f6:5a:62:
         26:13:73:ce:12:fb:c6:96:04:54:f7:8d:11:ad:63:2f:3d:b6:
         80:73:45:f2:f1:f6:1d:d3:66:a7:31:72:fe:1d:58:69:bb:4b:
         83:86:64:a3:a9:9b:cf:b2:c3:7f:00:cb:c3:5b:5f:4d:ac:90:
         4d:c9:ff:83:52:bc:89:77:e1:c4:15:6d:2f:e7:72:3c:d5:4b:
         33:0c:ab:4c:11:0e:be:3e:a1:ed:69:56:74:f9:12:ce:a3:0a:
         83:7f:80:0d:3c:44:0a:62:bf:10:34:83:b8:61:2d:bf:55:2b:
         3c:eb:a3:90:38:a8:56:a7:6a:92:bb:a4:9d:1f:72:54:95:85:
         22:bd:c7:f4:b6:3c:6b:6a:07:ae:66:65:6d:9d:e8:f8:40:1c:
         09:be:d1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:48:19 2026 by rpki-client