This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/77E7AC0E492611EDAF439D83C4F9AE02.roa
File:                     77E7AC0E492611EDAF439D83C4F9AE02.roa (raw, json)
Hash identifier:          F4ID8xOHm4fTVUqcFnm0wrYmbvYuu0YXpihGFNmZfno=
Subject key identifier:   95:FA:1E:D0:07:2E:62:12:7F:84:70:B7:42:9E:43:B0:8B:CA:24:0A
Certificate issuer:       /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
Certificate serial:       02FC
Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/77E7AC0E492611EDAF439D83C4F9AE02.roa
Signing time:             Sat 31 Jan 2026 01:21:21 +0000
ROA not before:           Sat 31 Jan 2026 01:21:21 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     136140
IP address blocks:        140.168.240.0/24 maxlen: 24
                          140.168.241.0/24 maxlen: 24
                          140.168.242.0/24 maxlen: 24
                          140.168.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Feb 2026 01:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764 (0x2fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
        Validity
            Not Before: Jan 31 01:21:21 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=697d5911-c19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:34:4f:99:08:a3:89:ae:71:8c:d8:6a:e5:
                    d6:b9:be:2d:a1:a9:30:f3:0f:e5:c6:14:37:34:48:
                    d2:d5:6f:5d:98:0a:c5:92:e0:6c:ab:3f:d8:aa:6e:
                    bc:c5:11:74:45:5a:6f:ca:69:50:71:01:9d:e2:ec:
                    64:d1:45:f9:60:dc:1a:ee:57:28:e9:05:86:56:6a:
                    7c:4a:bb:b6:5c:98:4b:3e:62:de:e0:f1:8d:03:43:
                    98:74:c8:98:96:c5:17:ef:7e:fc:6d:e7:89:97:fa:
                    53:50:4a:07:f3:63:48:fe:3c:9b:31:60:8b:e4:a2:
                    33:48:04:b3:bf:d8:87:30:fd:30:5e:ee:8a:e5:98:
                    58:01:1c:cb:4c:82:1a:c7:d3:5b:3a:64:b4:12:db:
                    eb:98:94:ce:c4:06:90:92:a1:e7:39:17:e2:ed:b6:
                    12:85:9e:70:b9:30:4d:37:b2:ca:c2:3a:56:94:3b:
                    25:b9:aa:a4:9c:7b:50:88:64:3e:d1:b7:8f:49:da:
                    7d:e3:ee:86:aa:43:6d:3b:33:3b:63:51:c6:01:fb:
                    cd:02:05:a4:41:d4:a4:b1:45:d5:45:d9:72:75:c8:
                    5e:3b:25:3c:0f:f5:63:14:16:b5:bb:b8:d2:fc:ae:
                    63:c7:54:ae:2b:da:6d:f3:f0:5b:49:6d:c3:41:75:
                    ec:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FA:1E:D0:07:2E:62:12:7F:84:70:B7:42:9E:43:B0:8B:CA:24:0A
            X509v3 Authority Key Identifier:
                keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/77E7AC0E492611EDAF439D83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.168.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:ea:9e:4c:35:d4:76:5e:13:f4:ed:fa:5e:79:cf:d4:01:0e:
         a7:37:4a:ff:73:c8:0d:1f:15:b9:e1:23:ae:38:f0:32:6c:87:
         23:c1:8c:fb:f6:4a:fd:88:a1:50:33:cf:7a:e4:96:ad:1b:c7:
         cc:ac:c1:1a:50:fc:36:9e:9f:db:4d:3f:67:ba:5a:12:65:63:
         37:94:36:15:44:79:7d:15:ae:13:36:fc:7c:a0:84:87:be:6d:
         40:41:56:eb:ff:e8:be:aa:99:af:31:48:62:50:94:80:1b:a5:
         c2:e5:b6:74:12:d5:87:dd:b3:d3:f4:b1:e5:af:53:f6:41:0c:
         db:35:4c:32:4c:69:34:ed:5b:bc:43:57:7a:28:cb:e7:94:b4:
         bd:db:3f:5b:32:f4:26:95:d2:ca:6f:ad:93:88:18:7a:88:df:
         a0:28:37:0e:27:d2:ef:ed:4f:b8:95:76:6e:a8:23:61:b4:23:
         11:25:2f:c5:b0:b6:d3:58:75:82:6a:26:13:bd:47:af:86:0b:
         a4:e4:61:23:32:64:c1:fb:f6:af:87:19:00:af:8c:f2:51:5b:
         45:a9:47:1c:67:ec:54:b1:cc:ef:c3:72:a8:d9:0b:93:60:d8:
         04:9c:2d:2d:09:80:dd:eb:da:74:7d:e3:b9:ec:da:c2:5c:32:
         e8:8b:ed:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 17:03:57 2026 by rpki-client