This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5287B052F6C611F0BAAC3BD94E6F56BC.roa
File:                     5287B052F6C611F0BAAC3BD94E6F56BC.roa (raw, json)
Hash identifier:          Sg06snkU5wYoNk8R0eQw/a/A10uBheOY/F8J/gaJD/4=
Subject key identifier:   F5:18:B1:A8:8A:19:EB:0D:83:1D:C1:C7:2E:1F:31:91:7B:2E:3C:E1
Certificate issuer:       /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial:       0209
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5287B052F6C611F0BAAC3BD94E6F56BC.roa
Signing time:             Wed 21 Jan 2026 12:40:10 +0000
ROA not before:           Wed 21 Jan 2026 12:40:10 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     22616
IP address blocks:        101.2.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
        Validity
            Not Before: Jan 21 12:40:10 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6970c92a-7839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:62:30:b0:2f:5a:66:a4:38:26:4c:1c:ef:ee:
                    ae:a5:ef:15:c8:9b:d2:ac:fa:96:88:3c:07:c9:31:
                    26:fe:58:a6:a9:f3:34:ab:ff:46:9f:d3:52:c9:57:
                    09:aa:c5:92:7e:d4:7f:9b:ef:0d:44:7c:50:90:84:
                    1a:a1:ed:b7:c0:cf:0d:4e:87:9d:f0:75:51:ff:1c:
                    b5:da:92:f8:3f:0a:3a:9a:14:f6:02:f3:d6:16:69:
                    d5:26:23:94:e5:63:f3:5f:51:ee:2b:a2:35:e1:51:
                    47:8a:da:c1:bc:ba:8a:61:5a:e8:b0:8f:12:e7:28:
                    8d:88:02:f1:75:14:95:84:a7:94:63:09:3b:74:6f:
                    18:17:72:b9:3e:d8:dc:0c:c4:39:72:0c:c1:00:ef:
                    fb:8f:41:02:5e:4c:23:3a:7a:aa:6d:b7:40:f9:8b:
                    47:ff:cd:e0:dd:6e:6c:85:c8:a4:a7:e8:dc:de:a6:
                    23:68:56:3f:e9:4f:a3:4e:db:9b:1d:75:45:0f:13:
                    26:6d:75:1c:fc:5c:15:e9:a2:28:19:82:4f:38:55:
                    ef:e4:5e:43:b8:5c:4d:e8:60:c4:46:33:6e:c7:c6:
                    25:d0:a3:50:d6:6f:4e:e0:db:56:fc:47:cc:c4:46:
                    32:53:d6:75:78:ff:df:14:43:97:09:63:3a:12:07:
                    5f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:18:B1:A8:8A:19:EB:0D:83:1D:C1:C7:2E:1F:31:91:7B:2E:3C:E1
            X509v3 Authority Key Identifier:
                keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5287B052F6C611F0BAAC3BD94E6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.2.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c5:2b:f5:30:d5:46:bb:99:98:f7:1d:06:da:a3:58:1c:39:ca:
         1c:fd:0b:cb:3c:67:01:77:ef:27:3d:78:5b:b7:15:fd:b5:46:
         76:48:a0:3d:9d:75:ca:92:b3:41:12:e9:fa:f0:6f:d4:2a:df:
         fa:8d:49:28:f6:49:7f:78:63:e6:2a:0d:f3:d4:67:27:dd:49:
         c2:72:3a:62:0f:5e:f9:f4:ee:9e:97:d0:79:85:c0:14:3c:4f:
         7c:9e:f4:b3:78:b9:e5:d6:41:62:37:6a:02:ba:df:59:ec:79:
         04:80:11:30:40:cc:fb:3e:4e:da:70:bd:b1:e1:2b:50:ae:51:
         2b:55:15:7c:55:e2:3b:a2:d4:1e:1b:da:f9:4e:52:d1:c4:fb:
         08:f2:e5:b5:d2:a5:e5:42:53:8f:05:a6:45:e2:21:2f:8c:b9:
         53:9f:7e:81:d8:83:ed:cc:50:7a:b9:51:1b:f9:e2:27:81:b5:
         6c:d0:06:40:4e:5d:b6:da:35:c5:5e:9f:61:41:dc:6e:a3:d3:
         b1:b8:13:ba:c2:e2:2c:c7:f8:af:e0:4d:08:be:04:59:e5:bf:
         23:5d:cd:64:c4:a3:53:fc:1a:9e:cd:cd:ba:ae:01:5c:39:2c:
         7a:80:67:16:32:70:27:80:d3:e7:99:fd:c2:37:db:21:12:31:
         bb:ed:df:55
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTcxNjkxMTAvBgNVBAUTKEU1MENCMjUwQkZBRDA4NjNFODVDMjkwMkVBMDIxOUQ1
M0NDMDgxMkUwHhcNMjYwMTIxMTI0MDEwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTcwYzkyYS03ODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkmIwsC9aZqQ4Jkwc7+6upe8VyJvSrPqWiDwHyTEm/limqfM0q/9Gn9NSyVcJ
qsWSftR/m+8NRHxQkIQaoe23wM8NToed8HVR/xy12pL4Pwo6mhT2AvPWFmnVJiOU
5WPzX1HuK6I14VFHitrBvLqKYVrosI8S5yiNiALxdRSVhKeUYwk7dG8YF3K5Ptjc
DMQ5cgzBAO/7j0ECXkwjOnqqbbdA+YtH/83g3W5shcikp+jc3qYjaFY/6U+jTtub
HXVFDxMmbXUc/FwV6aIoGYJPOFXv5F5DuFxN6GDERjNux8Yl0KNQ1m9O4NtW/EfM
xEYyU9Z1eP/fFEOXCWM6EgdfyQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPUYsaiK
GesNgx3Bxy4fMZF7LjzhMB8GA1UdIwQYMBaAFOUMslC/rQhj6FwpAuoCGdU8wIEu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82QjdGOTkzQ0VC
QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi81UXl5VUwtdENHUG9YQ2tDNmdJWjFUekFn
UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVReXlVTC10Q0dQb1hDa0M2Z0laMVR6QWdTNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTcxNjkvNkI3Rjk5M0NFQkFFMTFFRThBMEVEOTY0QzRGOUFFMDIvNTI4N0IwNTJG
NkM2MTFGMEJBQUMzQkQ5NEU2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAZlAsAwDQYJKoZIhvcNAQELBQADggEBAMUr9TDVRruZmPcd
BtqjWBw5yhz9C8s8ZwF37yc9eFu3Ff21RnZIoD2ddcqSs0ES6frwb9Qq3/qNSSj2
SX94Y+YqDfPUZyfdScJyOmIPXvn07p6X0HmFwBQ8T3ye9LN4ueXWQWI3agK631ns
eQSAETBAzPs+TtpwvbHhK1CuUStVFXxV4jui1B4b2vlOUtHE+wjy5bXSpeVCU48F
pkXiIS+MuVOffoHYg+3MUHq5URv54ieBtWzQBkBOXbbaNcVen2FB3G6j07G4E7rC
4izH+K/gTQi+BFnlvyNdzWTEo1P8Gp7NzbquAVw5LHqAZxYycCeA0+eZ/cI32yES
Mbvt31U=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:13:58 2026 by rpki-client