This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/A6C3D8721A9711EC88A50A2CC4F9AE02.roa
File:                     A6C3D8721A9711EC88A50A2CC4F9AE02.roa (raw, json)
Hash identifier:          EFRjNHsmJOTqV7cESdH1t39rfvm4B5JNL7JCQxg2xgs=
Subject key identifier:   0F:44:09:10:CC:6F:2D:F9:E7:52:E0:AA:09:F3:FD:1F:50:2B:96:E7
Certificate issuer:       /CN=A91EA623/serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B
Certificate serial:       05A8
Authority key identifier: 6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/A6C3D8721A9711EC88A50A2CC4F9AE02.roa
Signing time:             Wed 28 Jan 2026 23:19:31 +0000
ROA not before:           Wed 28 Jan 2026 23:19:31 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     4058
IP address blocks:        202.66.206.0/24 maxlen: 24
                          202.66.207.0/24 maxlen: 24
                          202.76.86.0/24 maxlen: 24
                          202.80.14.0/24 maxlen: 24
                          202.80.15.0/24 maxlen: 24
                          202.88.8.0/22 maxlen: 24
                          202.88.20.0/24 maxlen: 24
                          202.88.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl
                          rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Feb 2026 22:33:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1448 (0x5a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA623, serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B
        Validity
            Not Before: Jan 28 23:19:31 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697a9982-d427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:f6:30:51:b7:93:4b:a5:10:9b:06:14:6a:
                    4a:49:ba:84:f0:38:81:1c:c0:bb:6e:0f:cf:24:b6:
                    e4:43:7d:bc:c2:ab:de:87:e9:72:73:e1:17:d3:49:
                    d9:89:ff:28:79:66:8f:9d:e1:ed:70:ab:2d:1c:70:
                    d3:0e:ad:de:1a:56:a0:d3:61:c0:c9:90:1b:44:98:
                    0e:77:ee:cd:83:8a:9b:08:2e:f2:a1:36:a4:e2:5c:
                    14:33:b6:fa:fe:e5:48:81:13:aa:57:af:05:22:1c:
                    f2:ba:20:d6:76:6c:5a:4c:6f:92:f3:57:0a:98:39:
                    93:61:c9:bf:b0:be:af:2b:4b:fd:0a:0f:85:df:57:
                    66:9f:0a:76:47:66:2e:c4:cf:c1:d0:53:03:56:8d:
                    47:fe:1c:81:01:93:55:c7:dc:93:ef:fe:69:87:8f:
                    89:bc:96:d0:0c:02:a0:76:de:9b:91:56:53:79:86:
                    2b:8f:ea:e4:b6:0b:a3:bf:05:1a:b1:09:4a:e1:78:
                    23:e1:56:13:5b:c7:4c:24:ed:4d:3b:bb:2f:d4:c0:
                    99:03:21:99:3d:aa:e4:96:9a:74:3d:87:b8:31:35:
                    48:ed:bf:72:9e:6f:f1:3b:36:55:bb:76:86:22:7e:
                    e8:57:ec:8b:40:0b:29:5a:88:01:ef:6a:5a:e9:9b:
                    b9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:44:09:10:CC:6F:2D:F9:E7:52:E0:AA:09:F3:FD:1F:50:2B:96:E7
            X509v3 Authority Key Identifier:
                keyid:6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/A6C3D8721A9711EC88A50A2CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.66.206.0/23
                  202.76.86.0/24
                  202.80.14.0/23
                  202.88.8.0/22
                  202.88.20.0/24
                  202.88.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:1e:61:9d:5d:f4:1f:f9:4e:1b:53:d2:83:d9:3b:af:e1:bf:
         a3:7d:d4:42:b8:bd:9f:2a:54:c2:48:9a:37:99:22:22:36:bb:
         71:57:1f:70:fa:33:2a:c2:e6:30:11:9a:d3:c1:26:3e:69:75:
         4d:e8:5e:3b:48:ed:ab:a8:58:1e:14:6c:45:73:00:41:77:ef:
         6a:5c:1a:9a:94:10:20:21:d4:0b:c0:0f:c4:fd:1c:77:1b:88:
         c1:d8:30:82:33:3d:c4:48:4e:32:dd:6f:ff:93:d0:26:6f:09:
         73:65:a0:07:79:ec:67:60:3d:f3:d2:58:cd:52:bf:c9:be:68:
         06:f6:46:19:eb:79:56:cb:5f:16:4d:62:b9:7b:d7:69:5d:ce:
         c6:f6:f6:52:b4:82:35:7a:f6:51:cf:bc:06:4e:88:28:2d:ea:
         ce:ec:23:ac:f1:c6:a5:a4:4f:e9:22:3f:14:5e:65:bb:bb:a8:
         c2:01:23:73:80:42:b5:4d:ce:09:93:21:79:29:9f:d2:8c:ab:
         6e:52:a2:4e:ad:44:7b:e2:fd:14:71:39:8a:d3:35:ef:de:48:
         bd:de:65:1f:45:0f:1b:25:d9:96:d3:a9:7d:99:13:16:56:45:
         cc:e4:c5:92:31:b7:ac:d3:94:a7:a7:9e:c1:56:d1:69:d2:6f:
         49:ef:8f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 13:06:17 2026 by rpki-client