This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/2764AC08003111F18836FC08486F56BC.roa
File:                     2764AC08003111F18836FC08486F56BC.roa (raw, json)
Hash identifier:          3nIQeKwLdfnMJLy0mBhmQQK5YO5l7GsR5mi5LrMQfcA=
Subject key identifier:   6B:92:0B:8A:B3:38:15:F7:84:1D:A3:07:13:69:CC:EB:F0:97:35:86
Certificate issuer:       /CN=A91DC897/serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739
Certificate serial:       02
Authority key identifier: 6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/2764AC08003111F18836FC08486F56BC.roa
Signing time:             Mon 02 Feb 2026 12:17:34 +0000
ROA not before:           Mon 02 Feb 2026 12:17:34 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     197569
IP address blocks:        151.158.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl
                          rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 08:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC897, serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739
        Validity
            Not Before: Feb  2 12:17:34 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698095de-5059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:cb:c4:1d:4d:5a:46:06:14:4e:47:1f:8f:
                    f3:ec:26:4e:8b:31:89:bf:b4:be:fe:c4:30:50:b0:
                    be:26:8a:8d:ca:1a:fa:1e:15:d9:ed:da:f3:21:41:
                    21:34:06:33:28:3f:9f:0a:9b:ba:d3:db:59:73:6c:
                    81:d9:8c:c8:24:7f:f4:5b:5c:8a:03:fa:7e:c0:76:
                    1e:d2:c9:35:cf:db:cf:c9:6a:d2:73:5e:3e:78:79:
                    0b:be:8a:6b:8f:20:28:35:25:da:96:9d:32:45:f2:
                    4a:dd:6c:b3:10:4b:64:93:db:cc:17:ac:b4:35:79:
                    ed:2d:ed:de:f3:02:66:d8:57:99:ee:bc:9f:65:c0:
                    32:fb:15:66:77:ba:7b:e5:61:f0:83:c9:31:91:5b:
                    f0:04:7c:4c:fd:05:85:bf:f5:74:75:c9:fc:9a:66:
                    a2:55:36:9f:7c:fc:71:d0:27:94:48:5b:fa:c0:4f:
                    22:04:b5:27:b6:ac:89:33:97:15:40:3c:f2:1a:a5:
                    03:4d:ef:d7:9b:77:9f:6d:a2:a6:ad:09:f4:37:d2:
                    07:28:c4:fd:88:15:41:3d:23:0d:b9:51:bb:77:82:
                    d7:a2:2e:3a:4b:9f:ee:74:db:41:5e:1b:32:36:87:
                    0d:e3:3f:da:ee:b9:d1:bb:ad:f4:2a:a4:36:14:90:
                    7d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:92:0B:8A:B3:38:15:F7:84:1D:A3:07:13:69:CC:EB:F0:97:35:86
            X509v3 Authority Key Identifier:
                keyid:6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/2764AC08003111F18836FC08486F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:05:da:4f:6e:21:18:eb:41:10:0f:76:6b:ee:7c:81:08:b2:
         b0:08:7c:63:5f:c8:ac:ec:88:4a:be:d5:ed:3c:f7:5a:38:7f:
         5c:5a:83:e3:ef:75:3d:ef:85:b6:b1:e9:30:c1:50:e0:12:d3:
         cc:44:6a:89:a7:36:54:86:0c:d6:53:22:7d:15:07:40:62:72:
         f9:0f:d1:8d:04:7e:d1:b2:0f:4f:c9:cf:b6:bd:2a:cb:7d:fc:
         e7:28:86:24:95:b4:a3:a7:5d:1e:88:38:38:4f:37:c6:77:de:
         36:3b:5e:22:97:66:d8:fb:97:e1:73:65:a8:a3:b2:70:bf:d1:
         cc:bb:f5:22:50:75:7f:42:01:84:1e:47:0a:78:d6:ca:46:a8:
         a9:d6:7a:31:25:73:54:ad:6e:c6:24:74:b9:17:98:b5:8c:4d:
         92:b2:1a:fd:af:76:54:43:4f:8a:0a:f3:3c:c5:3e:11:a2:c3:
         8f:b3:1a:c5:00:5d:0d:a1:87:d3:5d:83:c2:07:a7:6d:15:8f:
         f0:42:38:66:e1:e7:5d:0e:e7:ab:ce:bb:b6:58:8d:66:3f:73:
         30:8a:92:0e:79:71:10:b6:a9:01:8c:5e:90:8d:35:c3:f0:85:
         a2:5a:93:0d:87:5d:67:66:bd:79:e8:ff:52:62:80:d9:80:d5:
         ab:df:e5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:59:36 2026 by rpki-client