This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/D84D1046F4C411F09228F896416F56BC.roa
File:                     D84D1046F4C411F09228F896416F56BC.roa (raw, json)
Hash identifier:          hIfigoZ3BBRSgf4yMYNeZeLZt4wSBTQJHHRaUGV73zU=
Subject key identifier:   33:E6:5C:0B:73:D8:0C:F4:93:E6:F1:B0:5A:6F:A4:A9:D7:29:4E:18
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       02F9
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/D84D1046F4C411F09228F896416F56BC.roa
Signing time:             Sun 18 Jan 2026 23:24:33 +0000
ROA not before:           Sun 18 Jan 2026 23:24:33 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        202.134.230.0/24 maxlen: 24
                          202.134.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 01:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761 (0x2f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jan 18 23:24:33 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=696d6bb1-c460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b3:f5:f3:23:35:a7:4a:4d:2f:3a:d4:8c:88:
                    96:3b:4e:3a:4c:5d:3b:de:38:82:9a:ee:09:ff:71:
                    6d:58:00:d7:0e:6e:5a:6a:8c:c7:07:6b:aa:f5:b5:
                    ee:c4:74:e4:d7:b3:b5:18:bb:1b:05:18:66:11:27:
                    69:18:85:7e:e4:b4:00:2b:72:4f:75:5f:38:49:53:
                    2f:78:0b:a7:6a:53:a7:fb:03:b9:6a:5a:af:39:ff:
                    ca:70:0a:36:2b:5f:42:e3:09:42:29:5f:59:5e:a3:
                    b1:45:51:f3:23:4e:b8:7b:0e:bd:d9:c4:f5:9f:fd:
                    b9:4b:5a:be:f2:1d:b3:f3:67:30:12:8f:da:09:91:
                    df:61:21:4d:c3:60:67:b5:df:2e:b9:71:63:c9:80:
                    6b:20:1c:dd:a0:00:c9:59:c0:97:96:ee:67:81:8e:
                    a8:88:ae:b4:63:cb:db:b1:c7:ae:72:57:91:2a:58:
                    92:87:9f:28:96:52:f3:5d:29:d8:6c:0e:ec:17:c6:
                    0b:88:15:9f:e5:16:67:c5:9c:f2:73:b9:9f:0d:49:
                    d0:9c:35:dc:5c:a9:49:32:4d:19:79:a5:a8:66:a9:
                    07:72:de:3e:e5:70:d3:0b:91:74:8a:62:86:eb:cc:
                    78:99:43:ae:b7:fb:96:6e:fc:7f:b6:62:2e:ff:e7:
                    b9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E6:5C:0B:73:D8:0C:F4:93:E6:F1:B0:5A:6F:A4:A9:D7:29:4E:18
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/D84D1046F4C411F09228F896416F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.230.0/24
                  202.134.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:bb:34:b7:a4:a3:54:4d:a9:a7:6c:c1:b1:bb:06:cc:05:fd:
         eb:20:91:1a:27:62:45:50:71:1b:39:7b:d5:b2:47:3d:e1:51:
         17:9c:a4:d9:8b:47:74:fa:9c:7a:ae:22:a7:36:44:96:6a:fe:
         03:16:2f:e1:3d:24:42:5a:72:2a:0d:82:65:e6:4a:14:23:05:
         8d:ff:25:5d:ca:45:32:5c:4a:77:c9:59:59:56:be:f0:ff:c3:
         6f:d0:15:73:38:41:7c:b4:d9:75:a8:28:64:cb:c3:3f:6a:55:
         1e:cd:21:00:13:00:fb:46:87:9e:9e:01:fa:93:dd:16:ac:dd:
         29:c4:d3:f5:7f:9a:ea:85:29:e4:5d:bb:fe:7e:0c:f5:a9:51:
         05:b4:25:dc:d1:76:60:5f:ba:ec:b9:87:58:d9:0b:16:4e:93:
         75:0d:de:2b:84:7a:af:ca:dc:4d:b0:5a:de:4b:bd:a3:48:61:
         70:c9:1c:95:3a:b8:6c:2b:dc:83:26:50:37:5b:9e:ee:62:83:
         b6:1f:a3:33:52:34:9b:16:ae:83:25:8f:36:cc:b4:1f:ec:e3:
         49:26:57:24:2a:5f:e9:9c:ea:58:48:6f:7d:fb:12:f4:a4:27:
         2d:17:cd:c7:a5:7c:cf:b3:f4:0c:53:6a:87:69:b8:ca:fe:60:
         ac:b5:28:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:28:36 2026 by rpki-client