This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/23E0203034AF11EE90E6263DC4F9AE02.roa
File:                     23E0203034AF11EE90E6263DC4F9AE02.roa (raw, json)
Hash identifier:          /nfPxhyWg5h8V0/+D5fz8WA4fWOx3N3OIZu6tyfg//I=
Subject key identifier:   3F:D4:33:8F:DB:27:A2:7F:F5:A7:F2:04:25:24:34:2E:11:67:49:19
Certificate issuer:       /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209
Certificate serial:       01E5
Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/23E0203034AF11EE90E6263DC4F9AE02.roa
Signing time:             Sat 31 Jan 2026 03:22:24 +0000
ROA not before:           Sat 31 Jan 2026 03:22:24 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        192.150.138.0/24 maxlen: 24
                          192.150.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl
                          rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Feb 2026 02:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209
        Validity
            Not Before: Jan 31 03:22:24 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697d7570-9b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:55:ee:5b:5d:9d:47:c3:dc:6a:0e:0f:08:
                    26:6b:62:7c:b2:82:b9:ae:57:b5:ff:71:a5:38:bc:
                    30:6a:13:bd:e2:b7:8d:98:9e:ef:6e:91:e6:ba:20:
                    28:ff:16:13:f1:35:f8:14:ed:f8:f9:f1:b6:54:95:
                    58:10:10:12:d0:e4:92:03:2a:f5:a8:c7:1a:23:32:
                    8e:70:14:76:cf:9b:3e:3b:a4:83:1e:8c:6b:a8:bc:
                    7b:da:ac:3e:42:68:dd:d0:b1:55:20:88:55:55:f0:
                    f1:db:9c:8c:44:cd:8f:49:75:d8:29:9c:33:6c:3c:
                    7c:f5:85:cb:3f:41:57:73:60:75:cc:e5:6f:4c:5b:
                    4e:32:56:c7:65:1e:fd:94:7f:8c:2a:0a:15:37:0a:
                    6f:c5:4a:1d:bd:77:db:a2:ee:be:02:b3:ce:79:ac:
                    77:f6:22:47:8d:03:5d:5e:3e:63:bf:42:f3:2a:51:
                    23:3c:32:72:92:25:44:c9:b0:be:17:e2:58:12:e7:
                    3a:2f:da:c9:7b:2e:02:c4:33:3a:bd:5d:0d:c2:e5:
                    d1:95:19:c8:03:e0:16:4f:d0:45:58:0c:c8:2e:4f:
                    c0:c5:51:07:3c:5c:0f:79:8b:f8:fb:1d:15:9c:5c:
                    75:b6:8c:8f:0d:83:4c:98:6b:d2:c3:11:2b:12:5c:
                    e8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D4:33:8F:DB:27:A2:7F:F5:A7:F2:04:25:24:34:2E:11:67:49:19
            X509v3 Authority Key Identifier:
                keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/23E0203034AF11EE90E6263DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.150.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:9a:47:85:05:0c:f4:70:96:bb:45:3e:10:ea:fd:6d:e0:5d:
         a7:e2:4d:4a:c3:e3:d1:e1:c7:a8:9f:b1:8e:6e:b9:21:c2:6d:
         f6:72:5c:04:bd:32:7a:ec:e0:49:f6:ce:e3:fc:87:73:e8:41:
         46:b1:12:a7:2d:83:d4:7d:b4:68:0b:4f:d0:d9:6a:88:9f:73:
         c9:6c:6f:d1:5d:82:77:88:d7:5e:22:ec:35:dd:da:90:3c:82:
         93:2a:98:ab:76:45:d9:2e:d9:a1:c7:5d:27:a3:34:11:f2:22:
         6f:56:33:10:70:d9:fd:4b:61:b7:5e:22:7e:78:a3:56:7e:2e:
         f9:94:d8:8f:7e:c6:10:ae:53:29:01:ff:03:2c:5b:4c:65:91:
         05:d6:c5:18:58:13:7b:e9:42:ac:50:47:0e:52:59:c3:35:f0:
         98:ed:70:14:c3:02:b2:1b:bd:2b:7b:e3:09:4e:77:87:64:ca:
         df:7e:1b:5e:6c:5b:c4:6a:a7:7f:c8:46:61:01:82:26:f8:5d:
         63:bd:7a:3e:e0:e3:6f:02:51:9a:b7:1a:d7:e5:c9:f5:b9:bb:
         d9:55:cd:9d:79:ab:c3:54:db:4e:61:3d:0d:43:b7:79:70:f6:
         b1:41:26:bb:44:44:d7:48:f7:a8:82:00:a4:60:4c:f9:41:10:
         69:80:5b:9a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE
RDZDRjIyMDkwHhcNMjYwMTMxMDMyMjI0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdkNzU3MC05YjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArIVV7ltdnUfD3GoODwgma2J8soK5rle1/3GlOLwwahO94reNmJ7vbpHmuiAo
/xYT8TX4FO34+fG2VJVYEBAS0OSSAyr1qMcaIzKOcBR2z5s+O6SDHoxrqLx72qw+
Qmjd0LFVIIhVVfDx25yMRM2PSXXYKZwzbDx89YXLP0FXc2B1zOVvTFtOMlbHZR79
lH+MKgoVNwpvxUodvXfbou6+ArPOeax39iJHjQNdXj5jv0LzKlEjPDJykiVEybC+
F+JYEuc6L9rJey4CxDM6vV0NwuXRlRnIA+AWT9BFWAzILk/AxVEHPFwPeYv4+x0V
nFx1toyPDYNMmGvSwxErElzo1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFD/UM4/b
J6J/9afyBCUkNC4RZ0kZMB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0
QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qzc0QjUvOTgwNDM1NkUzNEFBMTFFRUEwNkFFMTMzQzRGOUFFMDIvMjNFMDIwMzAz
NEFGMTFFRTkwRTYyNjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHAloowDQYJKoZIhvcNAQELBQADggEBABiaR4UFDPRwlrtF
PhDq/W3gXafiTUrD49Hhx6ifsY5uuSHCbfZyXAS9Mnrs4En2zuP8h3PoQUaxEqct
g9R9tGgLT9DZaoifc8lsb9FdgneI114i7DXd2pA8gpMqmKt2Rdku2aHHXSejNBHy
Im9WMxBw2f1LYbdeIn54o1Z+LvmU2I9+xhCuUykB/wMsW0xlkQXWxRhYE3vpQqxQ
Rw5SWcM18JjtcBTDArIbvSt74wlOd4dkyt9+G15sW8Rqp3/IRmEBgib4XWO9ej7g
428CUZq3GtflyfW5u9lVzZ15q8NU205hPQ1Dt3lw9rFBJrtERNdI96iCAKRgTPlB
EGmAW5o=
-----END CERTIFICATE-----
Generated at Mon Feb 16 06:39:47 2026 by rpki-client