This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/E57772525DED11F0B0B00C4DC4F9AE02.roa
File:                     E57772525DED11F0B0B00C4DC4F9AE02.roa (raw, json)
Hash identifier:          kSvnKEdE2qkX5PwTGwT8A+3KhWhbCgkeLImZ+u/KnY8=
Subject key identifier:   13:D9:B9:E4:9D:70:08:11:F4:31:E1:DA:68:99:4E:5A:25:D5:10:17
Certificate issuer:       /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
Certificate serial:       85
Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/E57772525DED11F0B0B00C4DC4F9AE02.roa
Signing time:             Tue 03 Feb 2026 07:25:51 +0000
ROA not before:           Tue 03 Feb 2026 07:25:51 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     45601
IP address blocks:        203.17.165.0/24 maxlen: 24
                          203.176.120.0/24 maxlen: 24
                          203.176.121.0/24 maxlen: 24
                          2001:df0:219::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Feb 2026 06:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
        Validity
            Not Before: Feb  3 07:25:51 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6981a2ff-f408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ae:49:58:12:fb:5b:c4:69:88:05:b2:5f:8f:
                    d7:88:4e:ee:33:cc:fb:bd:c8:1e:ca:05:33:f7:c6:
                    b1:fd:9b:8d:7f:36:26:a8:f0:43:80:1a:18:78:7c:
                    b3:7e:86:b2:60:15:f2:60:e8:67:7c:38:b7:55:6f:
                    03:b5:22:9e:88:9f:de:a7:46:99:70:e7:b2:4c:46:
                    8d:81:6b:35:fb:a9:3e:93:f5:0d:d5:a8:57:d2:e3:
                    b6:0e:ce:f3:13:59:06:e9:c0:83:bf:be:34:33:bc:
                    37:d4:34:0a:37:e2:8d:b9:44:19:89:e1:ad:1b:c6:
                    f2:30:f6:9c:89:9f:46:45:16:b6:b6:18:a5:22:80:
                    18:c9:f0:ef:f3:8f:e0:ef:d7:52:b3:4a:d2:c2:d7:
                    56:1f:ae:db:0b:67:45:78:d2:87:1d:b2:22:90:be:
                    9d:37:b0:12:85:6a:6a:94:4d:8d:d4:38:80:e3:d0:
                    3e:e0:b1:0d:77:a4:ad:01:c9:25:d9:ed:13:f0:3c:
                    e7:e1:d0:2c:b1:b6:d4:5e:68:32:bf:97:39:ec:10:
                    94:7f:04:8d:01:56:32:77:0e:ac:2e:d8:0b:c7:47:
                    0f:2e:90:95:d7:ad:e7:ac:04:45:d5:77:a2:e5:05:
                    0a:fc:09:20:99:b0:3c:24:bf:9b:c0:51:48:38:6b:
                    4f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D9:B9:E4:9D:70:08:11:F4:31:E1:DA:68:99:4E:5A:25:D5:10:17
            X509v3 Authority Key Identifier:
                keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/E57772525DED11F0B0B00C4DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.17.165.0/24
                  203.176.120.0/23
                IPv6:
                  2001:df0:219::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:ec:df:21:41:d8:dd:35:de:b4:31:a7:62:60:c7:c6:e3:38:
         15:de:ca:d1:9d:e0:47:be:78:21:c0:ce:69:4a:bc:de:66:02:
         47:3b:80:0b:2f:5f:b1:b0:d5:91:e8:9c:d7:9f:1d:3c:67:10:
         18:cb:80:83:cd:5b:01:f8:3d:70:87:37:5e:a4:6f:c6:da:e0:
         39:7f:0e:65:cd:45:23:07:9e:85:56:5d:aa:69:27:5a:51:34:
         e7:d2:5d:ae:4d:f2:9d:b0:63:66:49:87:c3:d7:be:be:6b:07:
         69:66:21:f0:33:b2:f1:d0:58:75:41:17:1c:01:ee:7a:f1:53:
         d0:64:4c:71:af:23:4c:61:55:88:cf:10:3b:16:43:75:c0:88:
         2e:2f:40:22:87:d4:3d:a8:f8:e0:ea:bd:aa:45:a7:de:c4:9c:
         3a:5b:ee:1e:0a:4f:89:a0:53:1d:86:92:ac:0c:ea:af:b6:33:
         64:7e:27:b9:48:05:b9:41:d6:2a:28:db:23:77:3b:05:b5:fe:
         ee:1e:ca:62:98:c1:e5:b6:6f:21:c2:aa:f2:79:e3:6a:88:52:
         be:fe:ad:06:eb:4a:da:ac:de:5b:1b:1c:16:10:58:4d:28:db:
         47:d5:cc:e4:7c:6c:ad:c6:27:c1:e5:c8:0b:00:ac:7a:41:eb:
         7d:2c:5b:ee
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RTZBMDExMTAvBgNVBAUTKEEwNUVDMjY2QjNDMEJGRDZDRUI1MTcxMDBCRTA1QzUw
NUI5NDM2MjQwHhcNMjYwMjAzMDcyNTUxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgxYTJmZi1mNDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs65JWBL7W8RpiAWyX4/XiE7uM8z7vcgeygUz98ax/ZuNfzYmqPBDgBoYeHyz
foayYBXyYOhnfDi3VW8DtSKeiJ/ep0aZcOeyTEaNgWs1+6k+k/UN1ahX0uO2Ds7z
E1kG6cCDv740M7w31DQKN+KNuUQZieGtG8byMPaciZ9GRRa2thilIoAYyfDv84/g
79dSs0rSwtdWH67bC2dFeNKHHbIikL6dN7AShWpqlE2N1DiA49A+4LENd6StAckl
2e0T8Dzn4dAssbbUXmgyv5c57BCUfwSNAVYydw6sLtgLx0cPLpCV163nrARF1Xei
5QUK/AkgmbA8JL+bwFFIOGtPnwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFBPZueSd
cAgR9DHh2miZTlol1RAXMB8GA1UdIwQYMBaAFKBewmazwL/WzrUXEAvgXFBblDYk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkEwMS9GNjREM0IyNDU3
QTkxMUYwOEVFNDI2MDlDNEY5QUUwMi9vRjdDWnJQQXY5Yk90UmNRQy1CY1VGdVVO
aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29GN0NaclBBdjliT3RSY1FDLUJjVUZ1VU5pUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTZBMDEvRjY0RDNCMjQ1N0E5MTFGMDhFRTQyNjA5QzRGOUFFMDIvRTU3NzcyNTI1
REVEMTFGMEIwQjAwQzREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E
JzAlMBIEAgABMAwDBADLEaUDBAHLsHgwDwQCAAIwCQMHACABDfACGTANBgkqhkiG
9w0BAQsFAAOCAQEAWOzfIUHY3TXetDGnYmDHxuM4Fd7K0Z3gR754IcDOaUq83mYC
RzuACy9fsbDVkeic158dPGcQGMuAg81bAfg9cIc3XqRvxtrgOX8OZc1FIweehVZd
qmknWlE059Jdrk3ynbBjZkmHw9e+vmsHaWYh8DOy8dBYdUEXHAHuevFT0GRMca8j
TGFViM8QOxZDdcCILi9AIofUPaj44Oq9qkWn3sScOlvuHgpPiaBTHYaSrAzqr7Yz
ZH4nuUgFuUHWKijbI3c7BbX+7h7KYpjB5bZvIcKq8nnjaohSvv6tButK2qzeWxsc
FhBYTSjbR9XM5HxsrcYnweXICwCsekHrfSxb7g==
-----END CERTIFICATE-----
Generated at Mon Feb 16 09:21:59 2026 by rpki-client