This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/07FBA006084E11EF89D29620C4F9AE02.roa
File:                     07FBA006084E11EF89D29620C4F9AE02.roa (raw, json)
Hash identifier:          9DSn+zGfL95qDZ32w1sJ9OMjoR2cYSPxUDsDDarH1os=
Subject key identifier:   0E:01:A7:F1:3B:10:9D:77:F4:8D:50:1A:4E:94:93:13:7C:2B:ED:88
Certificate issuer:       /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C
Certificate serial:       0609
Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/07FBA006084E11EF89D29620C4F9AE02.roa
Signing time:             Wed 04 Feb 2026 22:19:34 +0000
ROA not before:           Wed 04 Feb 2026 22:19:34 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     10207
IP address blocks:        223.25.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl
                          rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 08:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1545 (0x609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF5E4, serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C
        Validity
            Not Before: Feb  4 22:19:34 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6983c5f6-e872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:be:39:bd:b0:26:88:4b:97:3d:d3:e4:91:37:
                    fc:36:e8:4e:88:7d:c9:fd:c6:5c:ae:32:6c:71:5b:
                    5b:2e:20:c4:4d:3d:d5:43:7d:a5:c3:99:d8:75:0c:
                    6c:6e:81:db:55:4c:09:4d:5a:56:8b:f2:73:04:8b:
                    9c:9c:1d:85:e9:68:dc:15:98:99:e5:33:3d:ae:16:
                    2c:51:c8:1b:4e:16:b2:de:20:ac:b3:3a:81:b3:89:
                    0f:94:b6:8d:1e:c8:a6:8e:8a:6a:58:cb:84:30:3d:
                    89:fa:1b:97:96:1f:b3:89:af:cf:70:ff:6a:83:d5:
                    22:cf:64:7b:8e:bb:c7:4c:00:c5:a8:9a:f2:96:12:
                    f9:b2:1d:b5:d6:78:57:39:71:44:9c:cf:82:d5:b6:
                    07:3e:e3:03:b1:f6:33:5e:71:b0:c4:30:27:57:08:
                    aa:8f:67:fe:75:4f:74:50:84:c6:5d:e5:dc:36:51:
                    ba:ae:58:b4:54:bf:05:89:de:af:2f:79:11:82:73:
                    64:ea:36:fe:91:ed:9f:d5:73:2e:a5:99:2f:4a:2e:
                    25:e0:2c:67:b9:4f:7c:ec:9a:7e:f4:0c:fc:6f:78:
                    bc:f9:72:c7:3f:f0:c9:fb:8d:c6:82:41:f5:11:1c:
                    1b:39:5f:db:54:de:c3:10:84:fe:4f:ca:8c:78:ce:
                    c8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:01:A7:F1:3B:10:9D:77:F4:8D:50:1A:4E:94:93:13:7C:2B:ED:88
            X509v3 Authority Key Identifier:
                keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/07FBA006084E11EF89D29620C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.25.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:51:21:f1:be:57:f7:0f:0f:e5:44:52:30:71:5e:d8:c2:ea:
         5a:be:91:36:6e:f9:44:2a:fb:ec:a5:c8:4e:e4:2d:7d:4e:3a:
         6d:aa:ef:3d:37:82:8c:32:4a:6e:2d:09:e3:ee:70:6a:9e:2f:
         45:70:56:d7:3c:4e:1b:13:30:cd:93:99:07:1e:12:08:5c:8b:
         07:4a:a4:61:a9:28:75:04:c4:4e:6b:3d:31:af:d7:f7:2f:e2:
         67:29:fd:7a:b9:99:72:88:7f:97:4d:37:45:42:ed:be:fe:ca:
         18:92:a6:6b:10:0f:2c:0f:4c:d7:c8:08:71:a1:4d:48:5f:e0:
         ae:56:94:85:2c:94:d6:3e:bc:da:8b:e4:64:b2:9b:94:50:c0:
         3a:1f:fd:b1:57:95:59:7d:c6:c4:79:f0:ff:3b:87:0b:89:92:
         70:44:3c:bb:17:c7:0c:c2:a8:4f:a0:80:41:2a:74:5e:80:51:
         48:ab:c4:c5:eb:06:43:1d:14:a3:73:fe:25:4c:77:e3:bd:1c:
         88:d5:10:6c:13:ee:1a:ed:51:88:01:cf:8c:f3:0f:98:17:0f:
         b5:69:ed:ef:50:8b:d7:d2:4f:91:9a:3f:15:a0:78:b4:31:8b:
         99:e1:18:52:5a:50:d8:7e:72:cc:33:42:e8:fc:cb:19:85:02:
         a7:4d:42:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 18:52:40 2026 by rpki-client