This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/A136D9C8031C11F18A4069F11A3D8C67.roa
File:                     A136D9C8031C11F18A4069F11A3D8C67.roa (raw, json)
Hash identifier:          jKsDPoY1Dg+u2JaSgVRWkHZrWgXXJ22g5yM+ayLnabg=
Subject key identifier:   A9:3D:12:AD:C0:68:14:43:4C:31:83:63:6E:6A:2D:12:9D:64:0B:CD
Certificate issuer:       /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
Certificate serial:       0605
Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/A136D9C8031C11F18A4069F11A3D8C67.roa
Signing time:             Fri 06 Feb 2026 05:28:12 +0000
ROA not before:           Fri 06 Feb 2026 05:28:12 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     401362
IP address blocks:        202.170.73.0/24 maxlen: 24
                          202.170.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl
                          rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Feb 2026 22:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1541 (0x605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
        Validity
            Not Before: Feb  6 05:28:12 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69857bec-9f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:63:8a:e5:72:23:f8:77:13:9b:fe:53:58:
                    b0:b0:8d:83:9f:ec:23:9e:07:23:88:81:78:e3:6a:
                    42:0b:5a:19:67:88:f6:17:da:98:17:8a:b9:c4:e2:
                    e1:00:99:7e:c0:27:64:67:a7:8d:f9:56:a4:94:f2:
                    c1:c7:b8:20:f6:ca:0a:81:16:97:b3:c4:22:79:4a:
                    38:82:ba:6f:15:7f:5e:1d:56:eb:4a:2f:5b:46:5e:
                    45:26:19:89:0e:05:1f:fa:4c:0f:e9:1a:e2:3d:85:
                    2f:99:77:9a:dd:4d:a8:ff:4b:0a:31:33:99:b2:06:
                    4d:56:52:c5:99:d2:4c:3b:60:65:24:4c:d2:01:9f:
                    15:75:82:5e:d1:d8:42:94:70:0c:82:a4:39:a1:a5:
                    17:84:33:ee:bd:02:36:9e:fc:c8:8a:a9:2b:3b:ca:
                    e6:c7:46:b9:6a:e7:b9:fc:b0:fd:8e:74:a0:4d:b8:
                    ae:13:99:f0:a4:4f:5b:1b:1b:6f:c4:a1:df:e2:a0:
                    32:d9:d2:13:dd:bc:7d:b6:a3:fe:b7:99:83:0e:b4:
                    be:e1:b1:3c:f8:ac:f4:5a:8e:96:04:b1:da:06:62:
                    ae:f5:27:8f:25:bd:7f:24:5e:80:43:7b:ee:24:21:
                    c7:7c:23:7d:2d:fe:02:36:fe:4c:1d:57:d1:ca:01:
                    d6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3D:12:AD:C0:68:14:43:4C:31:83:63:6E:6A:2D:12:9D:64:0B:CD
            X509v3 Authority Key Identifier:
                keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/A136D9C8031C11F18A4069F11A3D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.170.73.0/24
                  202.170.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:c1:30:86:24:51:1e:4d:fc:48:20:d2:63:0e:f2:ab:bb:93:
         10:37:ca:35:4e:16:18:14:4e:c8:96:c0:f2:b6:9f:8d:78:8c:
         7b:7a:74:dc:ef:1f:3f:c4:74:d1:44:ad:63:87:0d:3f:3b:da:
         c5:f0:26:1a:90:dc:cb:14:26:e0:3c:f3:28:a8:8b:fb:a0:5d:
         5b:5d:c6:eb:46:5a:f4:ca:69:17:70:a6:16:a6:e6:56:8f:0f:
         fa:dc:69:8e:07:ee:c6:36:4b:47:eb:f5:db:16:12:4f:83:54:
         f8:c7:71:96:85:c5:3a:2a:90:d1:8f:c7:6b:9c:1c:26:e1:4b:
         3a:18:59:3e:75:62:01:63:4d:98:13:98:f1:90:bb:bb:fd:cc:
         d1:fe:c5:df:25:f1:51:53:90:e1:de:69:08:df:c8:c1:16:88:
         43:5a:a4:f1:76:c6:b5:a2:d5:33:0e:8e:c8:d0:71:73:03:65:
         72:c0:b7:f2:b1:c3:ce:6f:be:26:b9:d0:ea:f9:e7:78:5b:67:
         34:63:a3:d5:2d:9a:53:b5:51:77:34:a9:57:f9:1c:8b:c5:37:
         c0:11:ba:6a:07:40:f7:ca:bf:16:a9:e1:27:f7:ca:5e:a3:ab:
         97:18:b9:0a:e4:1f:39:c5:bd:67:10:39:95:88:43:56:e8:03:
         1d:0b:0a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 19:03:53 2026 by rpki-client