This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/6767E894A32311F0A8D9D520C4F9AE02.roa
File:                     6767E894A32311F0A8D9D520C4F9AE02.roa (raw, json)
Hash identifier:          RmIQAxMzPt9TyOSbY6kkvQxz7NF1izZibV45HtGClcU=
Subject key identifier:   A7:E9:BA:16:AF:2C:E9:D2:C2:31:4B:CB:50:76:9A:25:6B:06:2D:C1
Certificate issuer:       /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Certificate serial:       2D
Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/6767E894A32311F0A8D9D520C4F9AE02.roa
Signing time:             Wed 17 Dec 2025 07:25:05 +0000
ROA not before:           Wed 17 Dec 2025 07:25:04 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     21859
IP address blocks:        165.84.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
                          rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
        Validity
            Not Before: Dec 17 07:25:04 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69425ad0-0106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:4a:b4:a5:1c:e5:ce:40:89:64:b0:ac:41:
                    56:37:ee:72:c8:36:67:3f:7a:c5:05:78:57:6d:d1:
                    76:a1:61:0d:09:5b:3e:a7:f0:f1:f8:7f:e7:bd:7b:
                    fa:77:eb:c7:91:95:cd:12:f1:fc:f8:09:a3:01:d6:
                    16:58:8a:ef:b4:1e:99:7a:c2:41:51:60:00:5e:72:
                    bb:6d:02:44:2e:54:55:f1:8e:90:36:b3:3e:56:51:
                    fe:f2:68:bb:2a:d5:34:9d:49:2b:53:f1:63:b1:42:
                    e2:08:6b:95:60:6f:eb:24:16:d2:52:dc:46:4c:1f:
                    67:da:c8:89:45:43:0e:10:b6:b6:ea:71:56:fd:ea:
                    d2:c0:af:da:f1:b6:7e:9a:8d:b5:e9:a1:b2:f0:fc:
                    21:4a:b7:02:55:c6:46:46:e2:29:3a:cc:ff:57:49:
                    f3:2b:99:d7:8a:9b:4d:39:85:77:c3:83:84:bf:85:
                    c8:03:f5:a7:bd:8b:d4:fc:fc:5a:37:19:18:d6:8a:
                    71:c8:4a:fa:6d:ce:74:3a:b7:1a:53:f1:e6:7f:c6:
                    2c:5c:f6:fa:47:74:93:a1:1d:9b:59:97:2b:75:99:
                    58:bd:6d:1c:0c:62:99:03:e3:66:e8:8f:58:4a:1d:
                    dc:84:0f:2b:f6:d9:f6:8e:bd:fb:2f:ed:77:1b:9a:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E9:BA:16:AF:2C:E9:D2:C2:31:4B:CB:50:76:9A:25:6B:06:2D:C1
            X509v3 Authority Key Identifier:
                keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/6767E894A32311F0A8D9D520C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.84.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:00:d3:4e:bc:60:8b:5f:30:f4:9a:60:87:84:fd:43:cc:3c:
         54:b9:f4:88:79:e5:f3:41:12:05:86:2d:d3:b6:35:4b:a7:3f:
         2f:ae:18:d7:75:b5:11:ac:5d:d9:45:6b:6c:29:7d:08:eb:54:
         c1:e6:60:5c:1a:fc:02:6b:ed:14:92:09:70:05:f1:1d:71:19:
         6d:8f:58:0b:7e:7c:be:15:03:6f:9f:3b:03:69:81:1b:be:e7:
         0c:d4:a2:16:f2:bd:5e:5e:59:a7:47:76:e4:49:ac:2f:b3:25:
         58:18:c8:df:16:96:db:5d:b2:cf:f2:8f:53:9a:80:7b:03:a7:
         92:f9:3e:d4:75:c6:98:da:35:db:e1:c0:ea:3b:3a:57:e0:34:
         70:4f:24:87:33:77:2f:fa:3c:0a:75:c5:b9:fc:82:1d:ea:33:
         de:b3:d4:c1:b2:70:5d:1b:67:a4:95:16:42:fd:d8:c5:1f:cd:
         ac:2b:41:e3:6d:1d:20:2e:3e:fc:c9:d9:7d:fe:b6:9a:36:48:
         72:b1:55:aa:79:b2:8b:37:ea:91:2c:7e:dd:e4:a5:2b:e9:b3:
         6e:1d:f2:b3:cd:81:bd:97:f3:da:44:32:ae:6c:2c:bb:cf:96:
         a3:21:b4:fc:3d:af:48:52:fe:7f:74:54:16:dc:f0:8c:f0:9b:
         6e:c4:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:32:29 2026 by rpki-client