This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/0099AE56536911EE8594503BC4F9AE02.roa
File:                     0099AE56536911EE8594503BC4F9AE02.roa (raw, json)
Hash identifier:          ZpCx0RDhO/3a016yxSmp4qzmXeudCkZizqsM58t9iRc=
Subject key identifier:   77:BA:0D:BD:6D:0C:21:E4:3E:29:9D:BC:87:B7:15:88:9B:B8:77:89
Certificate issuer:       /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
Certificate serial:       01BA
Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/0099AE56536911EE8594503BC4F9AE02.roa
Signing time:             Fri 09 Jan 2026 03:22:23 +0000
ROA not before:           Fri 09 Jan 2026 03:22:23 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     4768
IP address blocks:        192.107.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 02:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
        Validity
            Not Before: Jan  9 03:22:23 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6960746f-c309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e8:74:74:c2:3e:3b:a8:9c:83:4c:b8:99:d0:
                    08:38:7f:53:7e:f2:5d:8d:ab:f8:5c:5e:c6:6b:30:
                    19:a8:1a:b1:40:b4:7f:af:61:0a:fa:44:93:e8:9b:
                    91:8f:64:d3:f8:46:ad:cc:c6:10:06:20:3e:20:51:
                    d5:db:ae:3f:2a:88:14:02:a8:c6:14:43:d8:f0:7d:
                    47:05:e3:7c:68:7c:bb:10:04:bc:a6:cf:3a:f9:e9:
                    a0:f3:b7:bf:60:93:e6:0f:1e:90:dd:f9:20:d9:4d:
                    e0:5e:e9:9b:0b:68:84:04:1c:46:09:95:d9:02:2d:
                    af:84:d4:90:1d:0e:fa:01:c9:cb:d6:ea:b3:f2:66:
                    1b:85:7d:b9:2b:50:e3:ee:6f:99:3c:d1:ec:91:f0:
                    36:e0:2d:d9:2a:3c:dd:a5:9b:1f:eb:96:75:f9:5f:
                    97:b8:90:71:6c:c5:ca:d4:06:63:d8:15:07:cf:bb:
                    7c:fa:4c:7f:00:9b:76:ad:5a:ac:56:aa:c8:6d:df:
                    3c:8a:c9:fc:3b:9d:9b:91:58:44:87:ff:71:74:bf:
                    a8:38:b2:be:a1:a2:31:e0:3e:39:c6:94:49:24:96:
                    23:74:33:64:8d:e2:60:80:7a:db:b5:d1:b9:ee:d4:
                    d9:1c:10:d3:65:95:d2:b3:5f:2d:6b:12:eb:53:f6:
                    a0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BA:0D:BD:6D:0C:21:E4:3E:29:9D:BC:87:B7:15:88:9B:B8:77:89
            X509v3 Authority Key Identifier:
                keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/0099AE56536911EE8594503BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.107.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:9f:05:ea:4e:49:ed:a6:43:b8:2a:54:4d:ee:ff:fc:e7:b1:
         32:70:ca:15:39:ea:87:98:4d:74:cd:ab:47:af:c2:d1:3a:54:
         91:a8:97:18:f1:9c:8b:0b:c0:bf:71:9b:d7:0a:9e:bc:a7:54:
         bf:49:96:d7:b5:ed:ba:80:5b:4e:4c:8e:e7:8f:96:9e:31:6f:
         ed:38:3c:0f:e7:79:c9:16:d9:fd:98:36:77:2a:60:a9:a0:b7:
         57:9b:ab:d1:01:d9:a2:34:05:7f:c1:ff:64:3c:fb:d1:a0:7e:
         f1:31:7c:91:3b:6c:3d:d3:01:04:87:73:0f:03:ff:1e:b0:6f:
         58:5f:41:98:5f:51:9a:57:9d:24:f7:e0:fb:59:38:e6:80:cc:
         75:02:73:e4:4d:5d:d7:08:81:c6:2a:34:19:4a:e8:02:b6:f5:
         4f:57:c5:2a:dd:e0:d2:5a:b4:19:62:63:9f:65:a5:b1:52:8b:
         80:35:f2:4b:b0:cb:54:18:cc:10:bd:fb:ae:28:ff:ec:71:f7:
         6f:a8:8e:a9:04:fc:9b:2f:3d:c3:4b:3c:99:a2:b4:e1:88:c0:
         3c:f3:c8:12:f6:3d:a1:0a:f8:2c:58:c0:c5:81:9c:83:52:41:
         04:96:9d:81:e0:28:ab:2b:2f:ed:c8:f2:f0:b0:c6:13:cc:dc:
         48:42:d6:94
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC
MjdEODQ3QTQwHhcNMjYwMTA5MDMyMjIzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTYwNzQ2Zi1jMzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1uh0dMI+O6icg0y4mdAIOH9TfvJdjav4XF7GazAZqBqxQLR/r2EK+kST6JuR
j2TT+EatzMYQBiA+IFHV264/KogUAqjGFEPY8H1HBeN8aHy7EAS8ps86+emg87e/
YJPmDx6Q3fkg2U3gXumbC2iEBBxGCZXZAi2vhNSQHQ76AcnL1uqz8mYbhX25K1Dj
7m+ZPNHskfA24C3ZKjzdpZsf65Z1+V+XuJBxbMXK1AZj2BUHz7t8+kx/AJt2rVqs
VqrIbd88isn8O52bkVhEh/9xdL+oOLK+oaIx4D45xpRJJJYjdDNkjeJggHrbtdG5
7tTZHBDTZZXSs18taxLrU/agjwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHe6Db1t
DCHkPimdvIe3FYibuHeJMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz
NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS
NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzBEMzcvMDVFRUNEODY1MzVCMTFFRTlCRjIwQTZCQzRGOUFFMDIvMDA5OUFFNTY1
MzY5MTFFRTg1OTQ1MDNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADAa3EwDQYJKoZIhvcNAQELBQADggEBAOCfBepOSe2mQ7gq
VE3u//znsTJwyhU56oeYTXTNq0evwtE6VJGolxjxnIsLwL9xm9cKnrynVL9Jlte1
7bqAW05MjuePlp4xb+04PA/neckW2f2YNncqYKmgt1ebq9EB2aI0BX/B/2Q8+9Gg
fvExfJE7bD3TAQSHcw8D/x6wb1hfQZhfUZpXnST34PtZOOaAzHUCc+RNXdcIgcYq
NBlK6AK29U9XxSrd4NJatBliY59lpbFSi4A18kuwy1QYzBC9+64o/+xx92+ojqkE
/JsvPcNLPJmitOGIwDzzyBL2PaEK+CxYwMWBnINSQQSWnYHgKKsrL+3I8vCwxhPM
3EhC1pQ=
-----END CERTIFICATE-----
Generated at Sun Jan 18 04:51:02 2026 by rpki-client