This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/8A73482EEF9F11F0944076B3686F56BC.roa
File:                     8A73482EEF9F11F0944076B3686F56BC.roa (raw, json)
Hash identifier:          yvpZd9MMDErzfzgj/Pd+xnj+S/7xygPMsbTnYgggC4E=
Subject key identifier:   9E:00:B7:1F:42:4A:90:97:FE:63:8E:AF:50:E8:31:08:6F:82:D6:01
Certificate issuer:       /CN=A91940AE/serialNumber=9969A18B3A01B3EBAB5D563D2B0DC1E79FE1E165
Certificate serial:       02
Authority key identifier: 99:69:A1:8B:3A:01:B3:EB:AB:5D:56:3D:2B:0D:C1:E7:9F:E1:E1:65
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mWmhizoBs-urXVY9Kw3B55_h4WU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/8A73482EEF9F11F0944076B3686F56BC.roa
Signing time:             Mon 12 Jan 2026 10:14:55 +0000
ROA not before:           Mon 12 Jan 2026 10:14:55 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     154036
IP address blocks:        165.101.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/mWmhizoBs-urXVY9Kw3B55_h4WU.crl
                          rsync://rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/mWmhizoBs-urXVY9Kw3B55_h4WU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mWmhizoBs-urXVY9Kw3B55_h4WU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 07:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91940AE, serialNumber=9969A18B3A01B3EBAB5D563D2B0DC1E79FE1E165
        Validity
            Not Before: Jan 12 10:14:55 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6964c99f-5db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0e:15:75:0c:29:61:f8:50:ec:a8:eb:42:0c:
                    9f:74:55:fd:15:93:98:c4:10:eb:90:94:cd:9b:4f:
                    77:b1:c8:62:67:c1:5f:a4:96:82:9a:49:29:9d:4c:
                    c9:f8:d6:9b:41:40:71:e2:ec:06:aa:71:15:26:36:
                    9c:5e:86:72:66:e6:17:41:43:1f:b1:b3:ef:62:5f:
                    f7:d8:5a:23:c0:a6:b1:da:96:6b:b6:c2:a1:db:83:
                    20:ad:44:1c:88:cd:6d:cd:8c:c2:e8:f3:42:b1:c8:
                    90:d2:65:28:14:d5:d8:6e:69:de:22:d3:a8:41:9f:
                    f0:77:27:76:8b:bd:53:1a:45:0e:ff:c7:90:dc:fd:
                    b8:04:62:e9:11:46:79:28:bd:ef:9f:00:a1:62:f9:
                    f3:87:d2:2e:26:73:b9:05:b3:29:7c:91:e8:4f:95:
                    d6:a2:ec:cc:3a:39:4a:49:41:3c:4e:e9:36:1e:26:
                    d0:8b:21:48:2b:6f:3d:81:b5:94:e8:25:b6:f4:27:
                    c9:7a:c4:73:72:32:5c:f3:d1:5d:03:81:66:f9:9d:
                    b8:d6:ea:de:9b:5c:31:28:c8:18:fe:25:4a:2f:4e:
                    9b:82:2d:76:fd:06:d6:58:f3:97:9a:32:43:e6:ea:
                    e4:40:4d:b9:04:9b:ed:4a:7d:eb:2c:5c:4c:cd:cd:
                    5b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:00:B7:1F:42:4A:90:97:FE:63:8E:AF:50:E8:31:08:6F:82:D6:01
            X509v3 Authority Key Identifier:
                keyid:99:69:A1:8B:3A:01:B3:EB:AB:5D:56:3D:2B:0D:C1:E7:9F:E1:E1:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/mWmhizoBs-urXVY9Kw3B55_h4WU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mWmhizoBs-urXVY9Kw3B55_h4WU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/8A73482EEF9F11F0944076B3686F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:b1:e9:b1:d1:ac:aa:85:f2:4d:19:52:45:97:05:ce:11:df:
         bc:d1:58:5d:07:2a:90:d8:d1:4d:09:38:b5:13:03:96:06:3f:
         74:79:4b:35:f7:d4:6d:16:d0:2e:3a:2d:c5:35:77:9f:fd:b5:
         de:08:67:25:d5:a6:3a:30:da:5f:a1:cc:87:1e:77:9c:4d:0f:
         ef:f3:ae:a3:0e:08:a2:10:8e:4d:18:69:e1:c8:3e:e0:57:97:
         51:04:3c:7b:f5:92:99:1a:4d:cc:ec:0b:8e:ed:19:cf:fa:cd:
         bc:46:7d:64:e4:56:de:7f:a5:b3:0c:3f:dd:95:78:5a:cb:fb:
         a6:f2:ab:6d:d9:e4:27:6f:40:a3:03:a8:67:b6:3d:2f:49:25:
         c4:18:1c:dc:52:32:8e:31:28:a9:41:7a:72:00:f7:46:2f:68:
         69:a1:7c:3c:a8:1f:df:e2:58:15:cf:33:0f:4f:81:4e:43:4f:
         eb:c3:20:35:7f:fd:fb:5a:03:e6:16:c0:30:0c:e0:bb:62:cd:
         10:f5:11:d4:53:38:e5:9d:0a:74:f0:ed:53:52:b1:37:fe:fa:
         90:77:c1:9f:2f:c8:2a:0c:ae:4c:ac:47:31:1e:6a:2b:de:3b:
         e2:a6:b1:3c:0e:b0:e4:2d:54:02:32:41:ac:ff:aa:14:86:3d:
         dd:a9:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:09:27 2026 by rpki-client