This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/850C91D6001811F18252CD21426F56BC.roa
File:                     850C91D6001811F18252CD21426F56BC.roa (raw, json)
Hash identifier:          6RVHEq6a8quQ7dV5oRbHpoeX5Rq/ra7jTNMPOMHwsKo=
Subject key identifier:   83:C8:39:F0:D1:64:26:55:E4:2A:48:9B:99:2F:DD:80:3B:7C:BF:10
Certificate issuer:       /CN=A91F1BE5/serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
Certificate serial:       02
Authority key identifier: 8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/850C91D6001811F18252CD21426F56BC.roa
Signing time:             Mon 02 Feb 2026 09:21:14 +0000
ROA not before:           Mon 02 Feb 2026 09:21:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     4686
IP address blocks:        180.235.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl
                          rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 08:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1BE5, serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
        Validity
            Not Before: Feb  2 09:21:14 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69806c8a-1f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:a7:19:88:36:16:2a:f4:5b:df:04:7e:e9:
                    ef:e0:c9:0e:bb:d8:17:16:f7:08:83:69:bd:fa:14:
                    c3:24:fc:98:64:69:63:c9:14:d0:17:28:32:42:9f:
                    37:30:14:51:e2:92:9f:c3:35:9a:c9:2a:49:52:92:
                    5a:1b:58:9b:b9:fd:14:45:27:9a:2a:09:74:41:7c:
                    e7:c3:2b:1a:21:34:27:03:89:37:ea:78:10:06:bd:
                    c3:97:9b:ac:79:a3:02:b6:67:0d:03:96:e1:93:50:
                    65:6a:14:55:83:84:88:1d:f7:97:c1:70:35:75:da:
                    2f:4d:a7:ff:f9:dd:28:24:a7:54:59:4d:f9:61:8c:
                    ec:af:bb:97:34:c2:82:7d:7d:23:2a:a6:b6:03:89:
                    bd:7d:fc:07:9d:00:87:bf:f5:ce:49:76:eb:47:be:
                    d6:4c:a8:ec:4d:46:1e:68:b0:b5:62:db:74:9f:b6:
                    39:64:a0:84:2f:aa:14:b1:68:86:71:1f:aa:4b:1a:
                    9e:4d:a0:e8:d5:f4:f4:72:cf:15:70:14:6f:d9:8c:
                    13:6c:89:59:cf:da:ee:e4:07:5c:cc:71:bf:74:82:
                    6a:ff:ac:55:58:43:38:b3:05:70:05:c3:50:0f:5a:
                    20:b1:21:1c:ba:78:6f:01:49:27:b8:ea:d2:0c:c5:
                    c0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C8:39:F0:D1:64:26:55:E4:2A:48:9B:99:2F:DD:80:3B:7C:BF:10
            X509v3 Authority Key Identifier:
                keyid:8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/850C91D6001811F18252CD21426F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.235.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:41:c5:59:74:ec:cb:41:48:2e:6d:4b:09:cd:f0:22:66:89:
         bf:10:83:35:23:17:ae:bd:58:d3:50:d1:2a:0a:6c:20:b1:02:
         5d:95:45:65:2e:96:08:fd:83:0c:62:66:b6:e3:7c:6f:82:3e:
         1d:ba:63:46:21:e3:dd:70:68:98:de:1c:36:dc:2d:48:e6:23:
         41:54:34:4b:5f:71:e6:eb:22:3e:70:52:2c:8c:85:5a:2d:48:
         9a:98:4e:6a:ea:0a:dd:bb:a0:a6:34:59:40:e5:44:dc:c5:b3:
         fa:f9:3b:41:da:2f:56:5c:62:4e:d3:06:83:77:15:0a:fd:82:
         06:e3:ac:a3:e3:19:4e:e0:9d:f0:03:25:29:fc:bf:45:e1:9c:
         08:73:6c:89:68:53:60:51:2e:3a:05:db:d7:5e:65:dc:47:1d:
         04:2b:90:98:8c:65:b0:eb:61:98:e4:42:63:8c:b7:d0:ae:e9:
         b6:5e:3f:34:7a:ca:66:c6:db:ab:e4:9c:e9:77:f7:78:bd:59:
         1b:92:a0:f3:e4:26:1f:fc:2d:31:9a:61:84:3d:61:19:ad:60:
         c4:00:ae:14:06:6e:db:f2:1e:5f:49:44:99:b2:de:aa:d3:48:
         6c:98:8f:f7:7a:21:70:11:9a:85:e8:89:cd:68:09:c0:c3:be:
         bb:ee:9b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 21:17:47 2026 by rpki-client