This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C0944D9067A511F0A26BDB35C4F9AE02.roa
File:                     C0944D9067A511F0A26BDB35C4F9AE02.roa (raw, json)
Hash identifier:          vwDtMSZcVJCcYZLp0EmacBp2VXxXpWsy0rQL6BJzpoc=
Subject key identifier:   7B:62:8F:AB:0B:43:0E:FB:58:B3:8F:80:08:A0:09:4A:FD:3F:ED:49
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       074F
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C0944D9067A511F0A26BDB35C4F9AE02.roa
Signing time:             Tue 23 Dec 2025 07:40:50 +0000
ROA not before:           Tue 23 Dec 2025 07:40:50 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131435
IP address blocks:        148.222.90.0/24 maxlen: 24
                          148.222.91.0/24 maxlen: 24
                          148.222.93.0/24 maxlen: 24
                          148.222.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Dec 23 07:40:50 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=694a4782-6d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9f:a3:ce:6c:a9:fe:d1:31:10:e7:3b:9d:cf:
                    47:bc:69:fb:37:3e:d8:7b:07:1e:19:2a:ae:35:68:
                    33:32:6c:c8:dc:3f:03:10:a7:2e:f6:26:14:0d:89:
                    30:5e:b3:44:0f:91:b3:43:87:88:ac:e4:1f:b7:32:
                    2c:b3:6e:f4:4f:23:81:9b:59:4c:6b:ec:fd:82:ca:
                    f1:0b:4e:13:70:ca:a4:20:d1:99:b1:2e:26:7f:79:
                    f4:af:3b:7c:79:2c:2d:6a:88:6e:c0:47:ee:39:c7:
                    ee:f7:1a:5e:04:7b:6c:3c:09:56:b8:db:06:82:63:
                    15:e2:23:c4:50:0d:1a:0e:a8:18:48:fa:92:50:49:
                    8d:33:ed:a1:04:5e:d5:f9:ac:97:8f:7f:9c:ff:b8:
                    f7:a0:8d:7a:6e:05:57:06:81:6c:83:03:25:04:b8:
                    95:23:98:81:67:f3:33:db:8e:02:29:85:bd:53:5c:
                    de:1c:2b:37:b9:55:33:e3:20:24:1a:ee:4e:a1:aa:
                    ac:b8:b0:98:ce:60:35:9e:93:96:9a:2c:97:ca:66:
                    2b:d6:9a:07:b5:57:c0:c9:d2:57:52:8a:96:dd:22:
                    22:47:90:42:e3:2d:59:aa:34:6e:ba:7d:77:f2:95:
                    3b:69:7a:bf:30:00:8c:19:ab:cc:4e:b7:fc:e8:98:
                    87:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:62:8F:AB:0B:43:0E:FB:58:B3:8F:80:08:A0:09:4A:FD:3F:ED:49
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C0944D9067A511F0A26BDB35C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.90.0/23
                  148.222.93.0/24
                  148.222.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:ae:e2:e6:5e:c1:1f:c4:05:e9:67:9b:fb:55:91:c6:5b:06:
         d4:9e:d8:9a:10:10:36:8f:18:63:d6:6b:94:a5:e2:fe:7f:3b:
         83:44:57:a8:83:41:0d:97:d3:3b:da:de:bb:b4:37:6b:cb:b4:
         b0:f0:77:42:e0:8f:67:b2:95:c0:32:1f:98:05:42:f1:b9:7c:
         fc:a2:61:9b:a3:91:b3:a6:37:4c:f4:16:ca:33:3f:af:d3:00:
         ea:4a:6f:dc:f4:77:19:5b:cd:f3:43:f7:ee:31:12:80:8c:7c:
         14:f1:45:22:72:59:fc:c1:b3:7c:fe:f9:f2:13:da:4b:f4:2b:
         a1:f1:72:20:d7:4e:2b:93:be:75:b8:f6:99:b6:24:e8:a0:62:
         9d:01:2a:e8:43:f2:23:a6:cd:32:a8:cf:b5:5b:e4:5f:c2:e5:
         fb:af:33:f7:d8:3d:10:6b:aa:39:6b:66:d5:64:fc:b1:e7:ed:
         1e:46:63:80:d7:3d:77:b3:7e:88:bf:5f:dc:a3:81:18:6e:c0:
         38:0e:ac:f6:df:57:df:d0:06:6b:af:38:bc:21:c1:c1:5f:fe:
         d1:7c:1f:bb:d9:15:c8:2b:40:81:5e:d1:bc:28:e6:01:34:54:
         71:bc:cd:ed:3b:9c:8b:73:45:b6:26:ec:ab:65:18:5b:83:a8:
         de:da:88:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:11 2026 by rpki-client