This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1FA2E616ECAD11F0AADF4CF7636F56BC.roa
File:                     1FA2E616ECAD11F0AADF4CF7636F56BC.roa (raw, json)
Hash identifier:          dfiZO2DAdJ9O8OYSKo4eWyVW/7yhFNUzbaXXJPCXK7E=
Subject key identifier:   F8:72:23:6E:80:56:CE:D4:AC:3E:8E:DF:45:6F:A5:3D:27:C2:DE:3A
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2C25
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1FA2E616ECAD11F0AADF4CF7636F56BC.roa
Signing time:             Thu 08 Jan 2026 16:14:35 +0000
ROA not before:           Thu 08 Jan 2026 16:14:35 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     214366
IP address blocks:        115.167.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11301 (0x2c25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jan  8 16:14:35 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=695fd7eb-502a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:00:cc:11:79:8b:eb:8d:d0:e9:22:22:9b:
                    47:67:1b:0b:90:61:f2:17:50:24:75:bd:8e:74:78:
                    27:89:6d:3e:98:13:aa:3b:3e:db:2f:10:0f:3c:14:
                    a9:82:87:2d:24:29:91:1a:36:2f:94:bf:29:56:4c:
                    e9:c7:13:a1:b7:62:fe:db:ea:33:f8:e4:0f:4b:09:
                    be:bc:52:40:81:13:b6:41:cd:17:9c:0d:a4:7b:b0:
                    e2:78:80:1a:f8:ce:ca:49:20:2a:81:15:c9:47:e9:
                    5e:da:41:3c:a1:2b:3c:ad:4d:a6:57:95:ce:ed:83:
                    2a:0a:87:f2:e0:a8:1c:41:0d:1e:88:09:56:e4:5d:
                    c8:e9:d1:f7:fd:f2:d3:70:97:b0:85:24:0a:f2:3b:
                    6b:06:c2:a0:44:b4:56:3e:80:55:aa:48:a3:e2:bd:
                    2e:a1:22:a2:f5:32:df:ea:5d:20:2f:ac:30:72:84:
                    11:65:ac:1c:40:ea:f6:c5:af:b9:c6:37:f2:e3:20:
                    0f:7e:7b:a9:92:6c:6b:c2:c7:a3:7c:17:06:d7:4c:
                    a0:e2:3b:eb:09:bc:c9:0c:fe:49:7d:3d:4c:23:80:
                    41:70:02:06:96:59:a3:0f:4b:3d:2f:7f:d5:e5:c8:
                    43:cd:57:73:bb:f0:9e:f4:b0:ff:24:5d:27:b9:d3:
                    97:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:72:23:6E:80:56:CE:D4:AC:3E:8E:DF:45:6F:A5:3D:27:C2:DE:3A
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1FA2E616ECAD11F0AADF4CF7636F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:81:95:1f:1d:2f:9a:8f:2f:50:8c:d2:df:66:bd:b5:b0:80:
         31:1d:4c:95:54:df:5c:d8:58:76:41:59:af:d7:ad:65:19:09:
         d7:f8:23:c7:79:26:02:b9:00:f8:5b:06:3f:12:ef:a6:6a:b0:
         04:7b:e3:bf:5a:84:c5:52:83:30:41:09:20:ee:e5:17:cd:12:
         46:36:4c:c4:70:82:16:3b:48:0a:e7:e0:02:e9:df:9b:39:bc:
         5a:69:a5:56:12:56:93:e7:02:97:af:3d:b8:5c:7b:4a:d3:b2:
         ba:5e:e1:c9:2c:fb:b4:84:00:73:fc:b8:84:79:8f:de:82:17:
         00:f8:d7:0a:e3:b1:7a:8b:02:b2:86:86:d0:dd:a8:c8:29:17:
         55:bc:ae:d1:9d:fe:fe:6b:aa:3f:91:c1:57:c0:8a:8a:57:4e:
         4e:ce:79:3d:ab:f7:b3:07:37:56:da:9c:f3:f5:93:5a:ac:96:
         38:59:9e:3f:14:8e:e3:50:5f:3a:cc:f5:2f:8b:ba:4f:fb:79:
         be:97:cd:88:59:35:92:ed:b8:6f:6a:96:8f:90:fb:ff:75:ce:
         18:93:91:6b:c8:82:b6:05:5b:08:f0:27:da:d4:c2:55:fe:96:
         7c:3b:71:34:ed:94:4f:0e:51:01:40:fa:b7:67:b5:4e:b1:16:
         c8:a3:d5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:10 2026 by rpki-client