This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/26CABD66DB4011F0B92C4C778FD3641D.roa
File:                     26CABD66DB4011F0B92C4C778FD3641D.roa (raw, json)
Hash identifier:          qNSJ4pqRhXOzoVAHZQaycGg0ZmCHhSMerGrL2kuYbx8=
Subject key identifier:   85:AA:42:16:60:A2:48:F6:40:98:19:1C:FD:C2:84:36:12:EB:EC:25
Certificate issuer:       /CN=A91A2946/serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Certificate serial:       0E
Authority key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/26CABD66DB4011F0B92C4C778FD3641D.roa
Signing time:             Wed 17 Dec 2025 12:02:02 +0000
ROA not before:           Wed 17 Dec 2025 12:02:02 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137127
IP address blocks:        144.79.158.0/24 maxlen: 24
                          144.79.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
                          rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 07:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
        Validity
            Not Before: Dec 17 12:02:02 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69429bba-c5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:57:f1:8c:0e:e5:5e:f7:5c:38:30:50:ef:
                    38:02:49:14:be:8d:d3:74:8c:b9:8d:f0:23:5a:b1:
                    46:a5:b8:56:0c:5c:75:08:87:0f:c7:eb:6a:14:e8:
                    28:d2:92:50:6f:d7:0c:d9:e1:6c:bb:89:d7:be:fa:
                    17:6a:f9:01:09:e4:0f:96:94:82:f8:06:2a:2d:0f:
                    a7:7a:c0:5f:44:ea:0b:09:f0:b7:18:80:1e:37:f3:
                    eb:65:c6:d1:06:2e:bb:a1:a4:83:3e:73:6b:23:30:
                    c2:7c:d0:41:c4:77:97:97:82:ab:27:ea:81:73:06:
                    27:82:42:b0:52:5b:ed:6b:6a:fe:6a:5b:b5:32:62:
                    7c:7e:73:32:52:54:be:13:fb:ec:78:5c:36:61:72:
                    81:eb:d1:0e:2f:bd:8a:54:8b:b6:3c:1c:e0:ea:ec:
                    2d:47:08:91:da:a3:1a:71:e3:e5:e1:cf:30:31:28:
                    e4:b8:82:95:df:23:5e:6d:95:07:31:72:a6:09:fd:
                    99:93:48:ab:91:40:d7:13:df:62:8a:3e:af:0c:8e:
                    a1:84:c2:e4:67:5b:4f:6a:0a:ca:aa:15:62:20:e8:
                    f0:8d:8f:f0:8e:58:71:77:61:2d:56:f9:ad:ee:b5:
                    01:23:6f:6d:dc:03:98:58:46:ee:75:cd:fb:c4:35:
                    d1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AA:42:16:60:A2:48:F6:40:98:19:1C:FD:C2:84:36:12:EB:EC:25
            X509v3 Authority Key Identifier:
                keyid:C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/26CABD66DB4011F0B92C4C778FD3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e2:98:2d:0f:33:b2:07:c5:fa:c9:58:9b:be:a1:13:8f:27:e5:
         68:85:2b:9e:bf:01:d6:8b:95:f0:fe:30:60:2c:7d:91:7e:f3:
         70:db:10:24:35:e6:4c:e9:68:61:85:68:48:b2:3e:26:88:95:
         6f:15:bd:4f:2d:6b:96:77:f4:24:bb:db:4d:ae:e4:ef:4b:fd:
         02:d8:a1:76:84:94:b7:52:e1:34:cf:34:a4:01:28:09:3c:e3:
         3b:2a:db:1e:c7:00:31:7b:61:fc:4b:f7:0b:cb:3f:b4:9f:3b:
         ac:af:66:ba:b4:a6:f5:10:2b:aa:75:6d:a0:3c:7c:7d:95:2e:
         f8:c9:d5:e1:74:12:7a:72:b5:36:bd:62:3c:4a:c3:e6:c8:de:
         db:ac:cd:85:52:ad:c7:a9:d0:ce:ec:85:39:b5:f4:84:b2:a8:
         97:ca:d6:a1:33:76:24:2c:af:49:e9:5d:73:fa:4e:f8:19:4e:
         3d:74:85:40:50:e3:78:34:a9:c4:bd:7d:25:22:07:4b:39:7f:
         d0:fa:82:03:fd:c0:df:d2:0d:97:e2:1e:2a:fe:20:53:75:4a:
         27:a2:78:e3:49:e5:cd:96:fc:88:0a:8f:eb:e6:3d:06:96:1b:
         10:6e:66:29:c3:d2:20:47:95:b5:88:53:2c:77:ab:49:ae:fd:
         ae:fb:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:35:58 2025 by rpki-client