This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/51CC36BAC91811EF9DBC1A87C4F9AE02.roa
File:                     51CC36BAC91811EF9DBC1A87C4F9AE02.roa (raw, json)
Hash identifier:          xL3LnCmA2s7pMktysMP3xNnZMdGMks1/9HXCZOsEvI8=
Subject key identifier:   DA:56:1C:55:16:92:23:66:4F:63:1A:57:AF:7A:07:6B:A4:F1:04:2F
Certificate issuer:       /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Certificate serial:       0193
Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/51CC36BAC91811EF9DBC1A87C4F9AE02.roa
Signing time:             Wed 21 Jan 2026 14:23:01 +0000
ROA not before:           Wed 21 Jan 2026 14:23:01 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     147059
IP address blocks:        157.10.28.0/24 maxlen: 24
                          157.10.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
                          rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
        Validity
            Not Before: Jan 21 14:23:01 2026 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6970e145-e675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:2d:2f:1a:0e:78:31:1f:93:8e:73:73:eb:
                    db:13:6a:a4:b9:67:56:bf:f9:4b:60:90:e8:55:79:
                    b6:d7:af:aa:c6:d4:ce:5b:32:63:4f:c1:d8:a6:fe:
                    98:14:90:f3:ba:50:55:10:1a:04:fe:55:fb:4d:54:
                    4f:47:30:bb:30:3e:b4:0c:70:e6:fb:01:e6:a7:9f:
                    0e:4b:da:7a:4b:c1:40:61:fe:77:27:e2:72:71:6e:
                    7d:81:95:79:5a:4f:5a:e9:f4:ff:35:38:ee:51:cd:
                    f6:2a:1e:cb:c3:28:8f:31:29:df:7b:d7:74:02:4f:
                    24:69:dc:f6:a3:02:c9:88:91:66:68:22:9f:17:3e:
                    72:84:31:18:37:de:3a:51:b2:d0:e2:28:93:94:02:
                    0b:3a:61:b0:0e:d8:8f:b2:4d:da:95:d0:86:30:dc:
                    a9:cd:e6:fa:c4:5c:88:6d:67:20:6c:e3:1a:01:84:
                    18:28:e5:ab:a3:4b:f3:fc:f3:2c:b3:d6:ac:8f:96:
                    2d:9f:d6:60:7a:87:bd:ff:52:21:c2:1b:c7:f4:30:
                    32:bb:56:be:4d:90:92:fd:47:bb:8d:c7:05:78:14:
                    d7:17:6c:f7:8d:a3:c6:f6:85:64:fb:d7:b4:6e:2b:
                    48:e1:73:3d:49:30:84:20:09:81:c6:5d:e6:76:17:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:56:1C:55:16:92:23:66:4F:63:1A:57:AF:7A:07:6B:A4:F1:04:2F
            X509v3 Authority Key Identifier:
                keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/51CC36BAC91811EF9DBC1A87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:84:68:6f:df:18:3a:00:61:6b:5b:12:c6:c2:7f:1c:eb:77:
         0f:5b:b6:4d:d0:5b:eb:3a:ee:4e:bc:d8:80:95:41:3c:99:f8:
         4e:39:be:41:ea:57:5b:90:e0:f5:ef:5f:7b:71:dc:90:fe:49:
         d1:17:17:a5:cf:33:c1:63:79:7e:64:fa:9b:15:78:ab:82:38:
         53:7a:60:ac:6c:22:8e:23:1a:ac:b8:08:57:97:f5:cc:2b:e5:
         b8:7e:a5:90:64:9d:53:12:ba:93:39:b3:cf:65:9d:18:2a:03:
         2a:d0:95:a8:ea:9f:48:b3:38:0b:b5:4f:18:c4:db:3a:c3:10:
         37:d0:ea:78:21:bc:7d:29:45:3d:f8:7b:4c:80:d6:5f:b4:6f:
         c7:4f:94:44:b6:d8:09:66:6c:09:d7:f3:89:21:96:91:a0:d3:
         f4:ba:a0:9a:cd:f4:74:c6:9c:67:72:37:7f:2e:19:0a:2a:22:
         db:65:85:6d:0a:6b:07:f2:22:bf:7a:f9:8a:09:44:a7:b2:b3:
         27:5f:56:93:a6:ff:0a:a8:eb:0c:38:3d:33:e7:73:a6:51:f8:
         22:2c:59:58:ee:dc:95:5e:86:9f:cd:7f:c7:32:5e:ca:be:b1:
         0f:e1:f7:f5:fb:55:f9:91:5e:a5:8d:8a:a9:13:18:f2:fc:c7:
         2f:ce:61:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:44:21 2026 by rpki-client