This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/09799D96F36811F0BB995E0C666F56BC.roa
File:                     09799D96F36811F0BB995E0C666F56BC.roa (raw, json)
Hash identifier:          iU5KhZQ0ZvLhwTa2L5q4T7qsRKTeEKU3dl5jCCeNf28=
Subject key identifier:   5D:EF:31:8E:46:06:0F:F2:B4:9A:C8:74:BC:FE:AC:9A:A8:0F:CD:A5
Certificate issuer:       /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial:       012C
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/09799D96F36811F0BB995E0C666F56BC.roa
Signing time:             Sat 17 Jan 2026 05:47:41 +0000
ROA not before:           Sat 17 Jan 2026 05:47:41 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     24084
IP address blocks:        192.8.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 03:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
        Validity
            Not Before: Jan 17 05:47:41 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=696b227d-7acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:1b:62:13:6a:d0:9d:0f:7d:01:48:fe:8d:
                    45:c2:b9:42:90:38:5c:6c:03:72:70:fb:6b:f6:08:
                    2f:9f:9d:40:fa:22:56:4e:21:a1:7f:da:27:34:7c:
                    34:f6:88:20:01:e2:d7:5f:4c:32:13:2c:ab:0a:f8:
                    76:09:c1:d1:3d:25:e8:19:13:c1:15:fc:fc:38:05:
                    d4:12:27:97:95:13:43:69:2b:24:7e:be:51:39:90:
                    08:3c:6e:78:c6:bb:9c:27:63:30:b9:a5:75:20:51:
                    31:0c:31:c8:bf:8a:7b:1f:a9:58:ec:8a:1e:e5:99:
                    df:f1:86:23:45:75:16:52:6f:fe:46:84:90:f5:35:
                    05:f0:85:67:f3:00:f0:bf:99:13:53:c2:0a:d3:c0:
                    61:84:29:5c:1b:9f:f3:3b:10:4c:c8:54:72:16:39:
                    5c:e2:4e:6c:9a:b9:b7:c1:24:80:f7:8a:81:ad:a9:
                    d7:86:1d:2a:f0:32:e3:01:3c:47:79:80:4c:05:93:
                    38:4e:68:60:eb:d3:19:62:fb:22:2b:49:f1:e2:7f:
                    8e:99:9f:33:e2:8e:c4:5c:0c:52:52:bb:93:b3:15:
                    b7:23:5e:70:5b:1c:e7:20:e8:2a:aa:dc:3f:4a:c3:
                    9e:fb:b6:d6:7c:7c:7a:ce:8f:ca:37:ac:8a:5c:3e:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EF:31:8E:46:06:0F:F2:B4:9A:C8:74:BC:FE:AC:9A:A8:0F:CD:A5
            X509v3 Authority Key Identifier:
                keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/09799D96F36811F0BB995E0C666F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.8.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f1:3c:7a:c1:cf:93:40:f5:62:66:6d:57:62:d4:99:2e:c5:
         23:d7:72:09:8c:bb:0a:76:57:d1:93:72:da:ce:81:a0:15:70:
         61:c9:db:a1:f0:94:fb:d0:5a:41:76:75:0e:3f:d5:60:71:17:
         48:d8:c8:d2:f2:58:1b:e0:63:34:e2:53:62:c4:bc:b8:37:85:
         d0:e3:b8:05:47:2e:94:14:d1:9d:03:38:53:d9:84:36:b8:52:
         fb:9d:5d:bd:83:9f:7e:8c:47:8b:6b:f1:a1:96:62:33:73:c3:
         98:2a:aa:da:2d:dc:2c:c6:65:b6:ee:fd:3d:02:29:d0:fb:d6:
         b2:c4:cd:68:17:1b:5b:a9:b0:37:f5:c0:24:8d:cf:40:6c:6a:
         6d:36:a3:2a:46:a0:35:93:3c:98:ed:8a:6f:90:1f:86:10:cc:
         ba:dc:31:b8:50:c1:5b:65:bd:f2:cd:2f:ff:f0:52:9a:2b:d2:
         5f:7a:28:a4:e2:a5:33:fc:11:eb:68:7c:2e:d8:bf:ce:b8:d1:
         54:bf:57:29:ab:d4:2f:17:a4:48:1d:51:68:cd:2d:b0:52:ef:
         4a:fa:3f:84:16:79:1b:6f:9b:09:97:ce:6e:34:24:bd:d5:f9:
         59:e3:6c:6a:0a:54:57:7e:8e:a5:c8:cd:82:a2:10:e5:96:e8:
         c1:38:91:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:08:21 2026 by rpki-client