This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/9C06E51EE37A11EA84A20810C4F9AE02.roa
File:                     9C06E51EE37A11EA84A20810C4F9AE02.roa (raw, json)
Hash identifier:          VLsVnxxlVtlgcvP3UYgj2e5kasbUoQl98RO4NGwLI8I=
Subject key identifier:   CF:30:D3:C0:CB:90:B1:0C:86:A3:11:B2:69:6B:6D:C2:73:A7:94:27
Certificate issuer:       /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Certificate serial:       0E3B
Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/9C06E51EE37A11EA84A20810C4F9AE02.roa
Signing time:             Tue 30 Dec 2025 15:11:34 +0000
ROA not before:           Tue 30 Dec 2025 15:11:33 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     24492
IP address blocks:        185.175.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
                          rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3643 (0xe3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
        Validity
            Not Before: Dec 30 15:11:33 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6953eba5-65f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d1:77:2c:1f:b8:85:c3:d1:2b:6c:cc:db:cd:
                    8f:e7:8e:ff:df:eb:c5:50:a5:eb:1f:ad:2f:f5:71:
                    f7:95:c5:cf:b3:0f:3c:b2:54:c2:ae:2c:00:35:4b:
                    c7:21:aa:4e:00:11:17:b8:f2:57:e9:9f:22:74:74:
                    9d:94:a5:49:ff:a0:df:72:3c:9a:a0:20:3f:40:7e:
                    dd:ef:2d:3c:5b:d7:3a:ea:6d:32:2c:27:ff:99:94:
                    a7:ba:87:30:0d:c9:55:79:81:c7:58:9c:91:2a:7a:
                    62:88:f7:35:da:36:cc:7c:92:10:46:c4:f9:86:d5:
                    02:df:35:bb:74:0f:62:7c:64:3e:05:4b:ee:87:67:
                    1d:1d:15:c8:9f:77:4a:d5:99:a0:21:59:6c:9a:1a:
                    46:41:a0:c0:d2:b8:9e:49:dc:4d:af:8f:4d:1c:54:
                    52:bc:bd:df:f2:ae:0c:fa:4b:ad:b7:f3:1f:fb:82:
                    d0:a8:56:15:c4:e7:64:e7:e0:9d:eb:ec:63:0c:64:
                    4a:fa:6d:cd:64:c3:0f:13:cb:93:66:f0:e0:66:90:
                    32:86:fa:10:6a:ea:41:af:24:14:a1:e6:73:13:42:
                    ff:d2:eb:4e:5e:87:04:be:22:d7:53:49:79:38:32:
                    a6:e0:24:24:ef:c0:f4:b8:60:53:e4:f3:e7:ba:af:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:30:D3:C0:CB:90:B1:0C:86:A3:11:B2:69:6B:6D:C2:73:A7:94:27
            X509v3 Authority Key Identifier:
                keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/9C06E51EE37A11EA84A20810C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.175.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:e9:16:f3:7e:76:7d:43:a1:98:ad:24:26:ea:25:48:ed:2d:
         1d:7a:81:a6:1a:8d:34:f2:71:ca:95:43:14:d4:1d:23:a3:fb:
         ce:ec:2d:19:e9:29:b1:71:f5:77:bd:cd:71:81:2b:24:f6:50:
         bb:0e:39:d3:f1:d4:cd:86:84:3d:b2:98:1a:9e:67:97:1f:1e:
         2e:f7:dd:7d:52:0e:2a:7c:c9:3a:e0:2c:a3:02:7b:ef:23:22:
         3f:d1:e9:22:7d:86:09:a3:98:92:d3:c4:c9:b6:ce:c5:b8:cc:
         51:c4:fe:a4:08:8b:f9:dd:be:ee:f2:8e:1b:4f:65:74:b9:81:
         9a:63:9e:e9:9d:78:20:1f:71:9b:ac:08:6b:1e:51:59:90:5d:
         49:7f:b4:2e:9a:3d:a2:42:fa:2e:d0:68:15:cd:a3:83:a5:07:
         58:f6:51:93:3c:37:fc:74:37:f3:c5:22:ff:f6:45:fd:ec:84:
         d5:bf:fa:23:8e:97:86:fc:c3:e2:ac:c2:3b:c2:fa:d7:f0:7a:
         c2:82:17:9c:35:29:63:95:ca:09:56:41:26:46:58:5a:25:f3:
         27:4c:a7:b3:79:1b:e1:68:0c:36:b4:9a:a1:dd:a7:53:7f:1d:
         bb:0d:05:d0:f4:d2:31:5c:c6:87:58:c2:d6:c2:02:24:55:fb:
         ab:3d:9a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:44:27 2026 by rpki-client