This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa
File:                     331F345A383611E6B2282B5DC4F9AE02.roa (raw, json)
Hash identifier:          XtMBMBocrLwPpOx8n83/oDiCHYCCR2mBVEmPLFnSE28=
Subject key identifier:   13:0E:81:2E:CA:69:1F:04:AD:CA:CC:D2:E2:0A:D9:20:94:58:E4:EC
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       36EE
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa
Signing time:             Tue 30 Dec 2025 15:10:10 +0000
ROA not before:           Tue 30 Dec 2025 15:10:10 +0000
ROA not after:            Thu 30 Apr 2026 00:00:00 +0000
asID:                     135537
IP address blocks:        61.45.252.0/24 maxlen: 24
                          2401:4601:252::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Feb 2026 14:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14062 (0x36ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Dec 30 15:10:10 2025 GMT
            Not After : Apr 30 00:00:00 2026 GMT
        Subject: CN=6953eb52-2a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:8d:16:3f:4e:ed:7b:2c:41:a0:46:71:5e:
                    da:e2:54:b9:aa:8c:88:57:3b:54:8a:0a:d7:b3:7c:
                    4a:27:b8:9c:22:83:91:79:59:0e:39:ab:92:61:24:
                    c0:44:ea:2a:73:fc:37:b3:bd:d0:0a:8e:b1:2b:48:
                    7b:a3:46:d8:50:97:d5:40:bb:8a:7c:b1:f3:40:16:
                    0a:d2:c4:16:5d:dd:d9:cd:6e:c3:f5:00:6b:4d:d1:
                    25:79:92:24:3c:81:6b:f6:02:a3:ea:7f:5a:80:85:
                    28:9e:8d:8c:3b:90:ac:85:22:50:df:0d:d2:e6:6d:
                    4c:80:4b:ae:6d:f1:f8:42:cb:84:2d:57:ce:6c:f8:
                    54:22:96:f3:4f:45:aa:72:26:d9:b7:fd:e9:ee:cb:
                    37:29:b2:09:02:72:73:dc:aa:af:95:39:2a:d2:de:
                    d4:4c:6d:43:5b:6d:d6:f7:e5:fc:dd:87:e3:da:95:
                    2f:f0:bd:42:5e:36:76:7e:48:94:87:69:ab:7c:41:
                    12:f0:6e:e2:c2:19:85:51:ba:5d:6a:69:0a:76:81:
                    db:fd:65:68:cf:a9:3a:d9:d3:c1:c6:7b:52:39:97:
                    1f:9a:a7:d9:2d:2c:2d:58:79:57:0b:83:f0:01:8b:
                    b6:9c:7b:df:ea:d2:de:54:89:a3:6a:94:06:67:b8:
                    1c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0E:81:2E:CA:69:1F:04:AD:CA:CC:D2:E2:0A:D9:20:94:58:E4:EC
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.252.0/24
                IPv6:
                  2401:4601:252::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:b4:50:a0:52:63:98:f5:52:14:77:36:02:47:c2:f0:15:fd:
         c2:ef:10:74:6a:37:56:29:7c:02:25:a3:dc:7f:dd:1a:7b:97:
         bc:b0:95:bd:43:85:63:b6:88:6d:22:32:de:19:25:21:f6:00:
         19:05:71:48:de:e8:ed:02:6f:f4:48:f0:c6:bc:c9:6b:5d:bc:
         05:70:c7:cd:c9:f1:5b:01:e6:df:ec:37:3a:13:0d:33:ca:88:
         f6:d6:26:42:ee:26:59:2d:0b:57:3a:0b:57:4a:a3:21:d2:a1:
         c5:2f:78:12:3d:fa:1b:d1:1c:c8:fb:b0:49:44:a1:60:cb:04:
         73:9d:98:6b:75:35:ad:b8:fc:91:33:78:fd:96:9c:56:aa:c3:
         6d:d1:22:4c:48:eb:a3:1b:1e:e7:7a:39:97:c0:2d:9f:4f:ff:
         b8:06:94:95:f3:21:5c:1c:98:70:c6:a2:df:09:eb:8e:cd:d3:
         47:60:e6:9f:02:c7:9f:9d:6f:69:3c:86:17:b2:17:28:34:f2:
         79:45:01:33:3a:46:86:94:86:90:34:8e:f5:d9:2a:fc:f4:2f:
         d3:db:ed:86:de:41:fa:9c:93:2e:34:24:bb:51:b1:fd:2a:80:
         4e:05:bb:8e:33:69:bc:96:a8:0d:10:d3:f2:1a:36:63:e4:f6:
         22:8f:c2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 13:37:13 2026 by rpki-client