This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/B36EA83C70B111E98CFFF710C4F9AE02.roa
File:                     B36EA83C70B111E98CFFF710C4F9AE02.roa (raw, json)
Hash identifier:          qWS2YsTv3ATJx54bvIhfmpS6+fPeS68Gwxs9XSnTsY4=
Subject key identifier:   2F:14:A3:8C:9B:00:06:22:21:0F:18:B4:17:B8:AD:55:47:F0:B0:41
Certificate issuer:       /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Certificate serial:       37B7
Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/B36EA83C70B111E98CFFF710C4F9AE02.roa
Signing time:             Tue 30 Dec 2025 15:10:37 +0000
ROA not before:           Tue 30 Dec 2025 15:10:37 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132215
IP address blocks:        59.144.191.0/24 maxlen: 24
                          61.246.118.0/24 maxlen: 24
                          125.16.228.0/24 maxlen: 24
                          125.22.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
                          rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 14:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14263 (0x37b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
        Validity
            Not Before: Dec 30 15:10:37 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6953eb6d-f60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8e:e2:8d:0e:b7:77:f9:51:51:bd:03:84:40:
                    1a:25:0f:49:b9:f9:52:55:4f:bd:2e:57:97:78:e4:
                    e4:e1:be:29:95:7e:b7:60:7f:63:09:98:5f:fa:49:
                    48:9b:5a:1b:5c:37:b0:be:a4:6c:0b:08:cd:41:c2:
                    2c:9f:9a:32:da:e7:f6:12:87:83:1c:2f:8f:15:bf:
                    3b:c5:20:2a:99:25:80:dc:60:f2:a3:2d:5a:e6:89:
                    8a:a9:d6:65:b3:5c:d2:1f:36:4f:dd:87:f2:e4:b2:
                    ad:03:91:76:64:9a:90:3b:1a:5e:76:5c:3f:4d:e7:
                    55:9a:f2:60:4b:ed:05:3c:ce:7e:1e:96:1d:a4:30:
                    96:11:e2:88:fe:cc:df:eb:4c:fb:f1:ae:5e:d8:c8:
                    11:07:62:82:c2:a5:9f:eb:1f:fe:be:aa:94:80:2c:
                    d2:08:80:38:6c:7c:59:9e:32:ec:e8:32:01:67:9a:
                    44:ed:58:31:ca:41:b7:c6:25:05:89:f2:27:ff:4f:
                    f5:e9:ea:b8:db:c9:de:fd:c9:7c:60:2e:83:6c:dc:
                    7a:f6:f6:c1:46:ba:01:af:47:28:9f:7f:f8:2f:80:
                    e8:09:59:26:08:72:ee:6c:37:52:46:c1:35:db:79:
                    12:5a:ce:4e:3c:fc:79:48:3d:b9:63:ea:9d:cf:f7:
                    26:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:14:A3:8C:9B:00:06:22:21:0F:18:B4:17:B8:AD:55:47:F0:B0:41
            X509v3 Authority Key Identifier:
                keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/B36EA83C70B111E98CFFF710C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.144.191.0/24
                  61.246.118.0/24
                  125.16.228.0/24
                  125.22.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a0:70:ec:8a:d0:21:d1:9b:a7:ab:37:a0:89:eb:92:18:5b:
         1f:2f:06:49:52:f7:ae:f0:a5:f0:ba:df:5b:c8:e5:16:53:27:
         99:fb:fc:91:5c:6f:d3:13:04:1a:0f:4d:c4:5e:41:9d:d1:3d:
         e8:d8:8b:8e:92:75:c1:2a:95:9a:98:ac:e5:8b:f0:08:a8:7b:
         c5:d5:15:3f:5b:4a:0c:e6:36:7a:9e:23:30:44:d0:8e:53:61:
         2b:2d:19:e9:a4:5a:f1:3d:57:0c:34:c4:f6:8c:65:b6:2e:01:
         68:df:0d:d4:a2:39:b0:3b:8c:ec:5f:5b:d7:b8:2b:ee:6e:cf:
         61:b7:96:76:37:fb:cd:f2:d5:0e:aa:03:ad:04:3a:ec:ea:e0:
         cc:db:02:3a:9f:e6:58:99:3a:cd:85:ac:aa:37:d6:c9:b0:a4:
         64:d8:09:f7:69:dc:a5:f3:01:0d:cb:0a:73:eb:62:61:ef:c9:
         da:d5:64:8f:5a:61:bd:67:10:0a:ba:56:b5:86:d4:1e:52:08:
         0d:4f:03:74:fa:cb:92:92:ef:11:bb:c1:71:3e:40:9e:a3:b5:
         00:d8:35:30:08:69:0b:b1:3a:92:57:c8:e6:ab:55:25:b5:e8:
         5c:7a:6a:7a:d8:c0:c1:f9:43:81:2d:2f:96:73:2a:ff:ee:1b:
         26:ea:91:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 20:13:54 2026 by rpki-client