This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/D6F15CD4F4C411F09228F896416F56BC.roa
File:                     D6F15CD4F4C411F09228F896416F56BC.roa (raw, json)
Hash identifier:          f3HBV9fv8zNp/cK8fbaaDaGnRt25leigbjDgBtonzco=
Subject key identifier:   F5:81:02:D6:1B:C7:48:F8:DC:C7:0D:0F:5F:45:27:27:EC:85:F0:21
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       02F8
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/D6F15CD4F4C411F09228F896416F56BC.roa
Signing time:             Sun 18 Jan 2026 23:24:30 +0000
ROA not before:           Sun 18 Jan 2026 23:24:30 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138096
IP address blocks:        202.134.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 01:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760 (0x2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jan 18 23:24:30 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=696d6bae-1942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:e7:5c:3b:10:18:c4:75:15:f9:88:b4:8f:
                    03:1a:e9:3a:62:0b:3c:63:5d:be:ef:1a:d6:b2:61:
                    71:15:8e:30:e3:cd:8b:57:02:d7:6d:fa:87:b4:eb:
                    22:a9:53:2f:7f:e4:b6:3c:16:f2:fa:4a:ad:e3:cd:
                    e0:69:83:10:f1:0e:29:ef:74:d7:27:81:fa:98:ab:
                    ef:ec:41:47:ef:85:cf:ed:eb:f4:34:c0:0f:5b:25:
                    a2:15:5a:fe:fc:6f:09:5c:9a:ea:5b:9f:53:a0:65:
                    6d:91:2e:24:1c:3d:fb:72:28:51:69:de:8e:c8:59:
                    83:46:9d:90:55:ce:f8:73:0f:dc:25:db:f7:0f:c4:
                    17:30:e1:a9:c4:a9:d6:5e:33:5b:2f:8b:02:a3:70:
                    aa:e7:49:83:9d:5b:1e:0d:a7:14:4a:41:08:c5:a3:
                    5c:58:50:37:c2:9a:1b:ec:4d:17:60:9a:69:8a:26:
                    08:40:b0:f8:a4:fe:bf:77:da:4d:3c:70:4b:f3:56:
                    36:0f:5f:16:b7:c1:d1:c5:f8:f4:f1:92:26:b1:0f:
                    08:54:83:2d:94:ff:6e:70:73:c4:7b:4e:cb:dd:ed:
                    d5:5d:45:2f:c3:19:28:c2:ac:65:36:6e:39:16:f2:
                    7c:38:fd:72:af:f1:da:1d:c6:ed:c2:90:43:27:8b:
                    31:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:81:02:D6:1B:C7:48:F8:DC:C7:0D:0F:5F:45:27:27:EC:85:F0:21
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/D6F15CD4F4C411F09228F896416F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:4f:99:9b:df:92:68:a6:50:91:3e:a5:87:c3:29:bf:0b:a9:
         bc:e1:9d:3c:e7:80:c9:b0:f3:12:b5:fc:65:1c:72:0f:91:c7:
         aa:9a:6e:82:94:19:df:04:02:4c:f1:c4:b7:9b:4c:32:37:cf:
         f8:26:ad:52:33:11:e0:a2:4f:b8:6c:b0:f7:e1:69:93:a1:c6:
         6f:2c:c1:8f:3f:63:45:fa:39:0b:9f:f3:b9:18:36:36:22:85:
         fc:2f:ae:dc:68:6e:27:a9:67:a9:e7:46:ec:6f:27:c1:e4:33:
         a2:e0:7c:d2:da:f7:1a:46:4c:c9:98:a5:5f:c3:8a:6f:84:12:
         71:1c:33:b9:0a:0c:81:c9:45:2c:e0:92:e4:21:f2:9c:d6:b1:
         57:d7:cf:a6:58:84:31:38:21:ae:4a:c6:12:2e:14:80:e7:75:
         5d:a0:18:a0:1a:9d:aa:72:e8:9c:0e:5a:9a:1c:a8:7f:af:7b:
         f5:f5:48:17:28:45:a4:12:62:11:2c:08:47:ba:66:69:c8:d1:
         14:f2:28:47:d8:e5:1e:da:f9:e3:9a:13:df:ea:42:1f:d6:fa:
         ec:58:81:07:2c:cf:83:36:a2:f1:c3:e6:4c:7a:ee:88:b3:c2:
         18:d3:c7:c6:d4:21:ab:d2:9f:7f:ea:c5:56:70:6b:38:7c:12:
         b4:23:f7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:28:38 2026 by rpki-client