This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/900E2272349F11EDA1460419C4F9AE02.roa
File:                     900E2272349F11EDA1460419C4F9AE02.roa (raw, json)
Hash identifier:          +ITJTnPvYoAS79cIvUIh+D7rV0iw05gZdlP9LgmbBHA=
Subject key identifier:   ED:09:CF:AE:25:91:83:49:23:11:0B:7D:C0:29:78:02:3B:8B:C6:06
Certificate issuer:       /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Certificate serial:       0980
Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/900E2272349F11EDA1460419C4F9AE02.roa
Signing time:             Wed 28 Jan 2026 20:17:03 +0000
ROA not before:           Wed 28 Jan 2026 20:17:03 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     209242
IP address blocks:        202.82.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 19:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2432 (0x980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
        Validity
            Not Before: Jan 28 20:17:03 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=697a6ebf-d1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a0:06:42:cd:a8:a5:a0:c4:a8:6c:ba:25:d0:
                    b3:9d:16:d3:88:d9:ed:7f:e7:d7:85:a4:14:12:2f:
                    8a:84:6a:04:71:cc:6a:29:f2:fb:ee:71:a6:e2:a8:
                    c8:c0:a6:24:8b:cc:e4:c3:2b:2b:e8:5d:cd:93:06:
                    4a:dd:3c:db:0b:e0:80:03:f7:2c:4b:6d:31:11:45:
                    37:2d:a0:a8:26:85:c0:34:4c:c9:3b:8f:e7:1f:00:
                    04:28:c1:85:4f:63:17:73:ce:45:5e:68:4b:75:23:
                    b4:a7:01:94:ae:6d:92:c7:98:d3:e9:26:e2:c3:a3:
                    bb:3a:ea:f3:46:1a:56:55:7d:d9:c4:fb:ad:53:0d:
                    9c:60:ec:6a:ba:37:eb:d2:67:c5:05:40:16:4c:4c:
                    b7:40:71:3a:22:8b:11:86:54:82:a1:d1:b2:39:fb:
                    0d:28:84:74:4e:49:0b:41:f5:8c:d1:fa:7a:08:15:
                    87:38:33:48:62:9a:e1:fe:6d:48:b5:2f:88:d3:59:
                    4a:97:5b:78:c8:4c:ac:14:92:79:54:80:b3:24:9f:
                    37:2d:d4:81:fa:7b:82:7d:ea:9b:6b:fd:88:96:b2:
                    cd:10:20:11:2a:a2:8e:1b:63:4c:7b:e5:8e:51:87:
                    9d:ad:3f:6b:50:19:9b:52:23:9a:59:c2:01:9d:2c:
                    dc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:09:CF:AE:25:91:83:49:23:11:0B:7D:C0:29:78:02:3B:8B:C6:06
            X509v3 Authority Key Identifier:
                keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/900E2272349F11EDA1460419C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.82.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:d4:ca:57:d4:96:e1:5e:10:a4:ff:2b:72:04:cf:22:ba:28:
         2d:93:2a:c6:3f:e1:20:be:72:22:87:8f:fb:03:5f:4d:b9:cc:
         c2:1e:a0:7a:4a:f8:b2:38:98:1d:36:d2:ae:0c:ad:f0:1a:21:
         28:9d:cf:ab:86:29:57:90:8f:49:36:a1:02:43:6a:23:e7:a4:
         46:8e:83:a5:49:c0:0a:91:9e:ef:15:fa:7c:cc:69:ff:d2:b1:
         8b:1f:e8:3c:1a:ac:e3:98:c1:2a:11:4e:f6:3c:8c:bc:b3:0e:
         72:59:58:6a:f7:d9:03:ad:ef:7b:fc:25:6e:0c:ff:fb:0c:f1:
         08:eb:94:aa:8b:31:51:17:d2:c8:cf:68:a5:b6:3a:29:e4:de:
         e9:1e:cf:61:86:f6:60:b8:2d:3e:e1:29:26:02:ef:c7:2b:bb:
         1e:d8:d2:44:fb:76:0d:de:d7:0f:0d:3a:50:65:57:e6:91:bc:
         82:7c:b6:65:02:84:f0:ff:8a:8b:d5:81:32:fa:f7:cb:1a:2d:
         3b:2f:1e:37:59:a5:be:38:38:96:09:ff:fa:6b:42:92:ac:e8:
         b9:bf:31:0e:80:89:ca:72:f9:6d:38:09:8b:ac:41:04:a6:62:
         8e:d1:da:36:27:9f:04:58:8d:70:1e:08:01:a7:ae:ec:ac:31:
         99:33:ee:6f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MzNFMTYxMTAvBgNVBAUTKDMxQzRGOTA2NEY4OUU1NkIxOTRFQjg4NDkyRTkwMjFD
MTUyREVCM0UwHhcNMjYwMTI4MjAxNzAzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdhNmViZi1kMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1aAGQs2opaDEqGy6JdCznRbTiNntf+fXhaQUEi+KhGoEccxqKfL77nGm4qjI
wKYki8zkwysr6F3NkwZK3TzbC+CAA/csS20xEUU3LaCoJoXANEzJO4/nHwAEKMGF
T2MXc85FXmhLdSO0pwGUrm2Sx5jT6Sbiw6O7OurzRhpWVX3ZxPutUw2cYOxqujfr
0mfFBUAWTEy3QHE6IosRhlSCodGyOfsNKIR0TkkLQfWM0fp6CBWHODNIYprh/m1I
tS+I01lKl1t4yEysFJJ5VICzJJ83LdSB+nuCfeqba/2IlrLNECARKqKOG2NMe+WO
UYedrT9rUBmbUiOaWcIBnSzcnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO0Jz64l
kYNJIxELfcApeAI7i8YGMB8GA1UdIwQYMBaAFDHE+QZPieVrGU64hJLpAhwVLes+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9EQzU0RDlBNkFD
NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9NY1Q1QmstSjVXc1pUcmlFa3VrQ0hCVXQ2
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01jVDVCay1KNVdzWlRyaUVrdWtDSEJVdDZ6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzNFMTYvREM1NEQ5QTZBQzc0MTFFQTg2RUE5RjQ4QzRGOUFFMDIvOTAwRTIyNzIz
NDlGMTFFREExNDYwNDE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKUvowDQYJKoZIhvcNAQELBQADggEBACrUylfUluFeEKT/
K3IEzyK6KC2TKsY/4SC+ciKHj/sDX025zMIeoHpK+LI4mB020q4MrfAaISidz6uG
KVeQj0k2oQJDaiPnpEaOg6VJwAqRnu8V+nzMaf/SsYsf6DwarOOYwSoRTvY8jLyz
DnJZWGr32QOt73v8JW4M//sM8QjrlKqLMVEX0sjPaKW2Oink3ukez2GG9mC4LT7h
KSYC78crux7Y0kT7dg3e1w8NOlBlV+aRvIJ8tmUChPD/iovVgTL698saLTsvHjdZ
pb44OJYJ//prQpKs6Lm/MQ6Aicpy+W04CYusQQSmYo7R2jYnnwRYjXAeCAGnruys
MZkz7m8=
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:27:07 2026 by rpki-client