This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa
File:                     6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (raw, json)
Hash identifier:          ZB9eAMVWfBK9MN4S24RR8d1yaBGavhdyzDSgtXBT9U4=
Subject key identifier:   E4:1D:F9:E1:4C:58:41:65:E1:1B:D5:F0:4F:18:7D:47:36:4A:F2:BF
Certificate issuer:       /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4
Certificate serial:       0193
Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa
Signing time:             Sun 11 Jan 2026 03:23:10 +0000
ROA not before:           Sun 11 Jan 2026 03:23:10 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        36.50.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 03:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4
        Validity
            Not Before: Jan 11 03:23:10 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6963179e-b921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a9:90:27:ca:0e:1f:85:f4:f7:07:63:47:7d:
                    3f:60:65:e2:34:fa:6c:28:2e:c2:7c:3c:bb:27:9b:
                    8f:20:29:23:a8:88:6e:58:f7:59:4f:71:28:e4:dc:
                    fe:7c:38:5f:c3:f8:a0:7b:2a:a0:d7:f5:17:14:46:
                    d3:0d:6b:90:64:8c:6f:75:c4:5e:65:65:fc:48:2a:
                    65:8d:46:9e:ee:b6:3f:70:27:8b:a8:f9:75:5a:a3:
                    64:15:0e:61:91:1d:f5:5f:bc:e6:1e:90:af:0c:10:
                    f0:30:7c:c3:b5:10:99:bb:1d:84:3c:77:04:c4:c8:
                    8c:06:f8:e5:01:98:58:00:2d:75:1b:19:b2:7c:2f:
                    9d:72:d5:93:8b:d4:fd:e0:0b:9d:01:fd:28:51:3b:
                    24:2c:09:be:c2:e6:2a:0e:4a:a5:de:29:aa:06:98:
                    e5:9f:ee:a1:2c:9b:69:16:0a:bd:3a:f9:bb:7f:5c:
                    db:a4:72:79:94:64:52:34:79:7e:f6:c7:0e:ec:c4:
                    6d:bb:f4:58:57:76:7b:2a:84:7e:24:29:62:5a:0c:
                    9b:8f:e0:d8:2f:23:7d:b0:0a:d3:e0:3d:af:df:df:
                    e2:ad:69:69:e8:0f:28:56:14:69:7e:a4:a1:47:7e:
                    3f:b3:eb:ba:12:da:40:08:22:35:b4:39:de:97:4e:
                    cd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1D:F9:E1:4C:58:41:65:E1:1B:D5:F0:4F:18:7D:47:36:4A:F2:BF
            X509v3 Authority Key Identifier:
                keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:f4:f2:f7:e9:0d:06:32:7e:9b:7f:72:8a:11:e8:d5:94:2c:
         cd:c4:0e:96:66:4f:3b:ee:a5:24:90:a2:57:40:08:e9:35:c4:
         a3:ad:51:5f:aa:02:cb:e0:d0:d1:22:c0:46:b3:82:55:16:e3:
         76:e4:90:05:ce:1e:af:f5:d3:e3:90:21:ee:01:5f:41:59:d7:
         f9:21:d8:6c:4b:79:ad:07:d1:35:82:fb:dd:f7:1a:ab:d6:79:
         9b:46:67:1c:0d:7b:e7:52:0d:5b:12:6f:ba:5d:c8:a1:54:d9:
         0c:62:91:53:c7:92:b1:95:bc:f5:13:7f:be:cf:3a:f9:4e:13:
         c3:46:4e:d4:ab:ee:ca:d2:61:83:1c:b4:fb:d0:40:9d:6f:aa:
         38:38:0e:b6:fd:8a:6f:b2:2f:52:56:81:97:6f:2c:83:b2:81:
         85:e3:e9:6b:fa:45:75:01:a0:f6:4c:90:dd:24:72:00:54:a8:
         c4:81:e0:c2:03:e7:d6:5a:e3:25:b8:08:d1:e6:68:56:fb:81:
         dd:4a:0c:81:de:97:ee:fe:30:ed:89:ab:df:59:09:7c:62:3e:
         fb:dc:e0:4c:07:68:9d:ad:23:a9:5c:c0:61:2d:46:6f:25:87:
         28:8c:20:d0:c6:f1:5a:a6:bc:6e:f2:10:14:98:fc:63:a5:dc:
         45:0b:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:23 2026 by rpki-client