This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/8B7BDC02708811ED95A9DC75C4F9AE02.roa
File:                     8B7BDC02708811ED95A9DC75C4F9AE02.roa (raw, json)
Hash identifier:          j/zBkUBhIp+97ALzNFOjNUIfN+DB+QW4PXS1Cd3s6r0=
Subject key identifier:   ED:02:7A:27:96:0A:46:6D:87:61:59:0C:4F:D7:E8:E3:1D:9F:73:90
Certificate issuer:       /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
Certificate serial:       10A3
Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/8B7BDC02708811ED95A9DC75C4F9AE02.roa
Signing time:             Mon 12 Jan 2026 17:14:55 +0000
ROA not before:           Mon 12 Jan 2026 17:14:55 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     23602
IP address blocks:        124.40.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl
                          rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4259 (0x10a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
        Validity
            Not Before: Jan 12 17:14:55 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69652c0f-6082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:1e:b0:81:a3:46:df:75:7b:98:77:4f:b3:
                    1b:90:aa:81:8b:59:d9:7d:11:f6:3e:ef:a3:c9:76:
                    32:40:48:1e:e2:db:75:c5:3f:77:e7:15:1a:30:bc:
                    e8:51:fa:44:2f:2d:44:be:7a:8e:37:08:b8:07:c7:
                    8a:ae:17:f5:78:28:4a:40:40:58:f5:0f:64:86:ed:
                    45:d4:92:9f:34:4e:a4:7e:65:f4:8d:c1:c9:75:ca:
                    65:f2:0e:6c:06:38:87:60:e2:06:ea:1b:89:ab:3a:
                    68:b6:46:8b:ab:51:22:c2:05:13:7d:3e:bd:e9:c2:
                    a2:1e:f0:27:19:03:b6:b2:51:43:5c:4c:24:68:01:
                    f7:ed:91:cf:03:b4:76:af:67:73:67:b7:c0:d3:d7:
                    c0:ab:71:d4:ac:29:6a:2f:44:97:b3:5b:ae:89:4b:
                    b0:c3:47:f8:84:86:18:48:ea:a1:a5:b8:61:a0:66:
                    70:06:d7:57:71:0f:81:ad:79:f6:05:17:ae:c5:36:
                    6f:5e:bd:3f:37:99:3a:10:b0:56:ff:c6:a7:15:e1:
                    4c:fd:db:b1:cf:81:36:a9:c4:9a:dc:cc:35:dc:00:
                    af:e2:33:8f:88:d8:cb:db:28:27:b6:e5:c5:72:9e:
                    de:75:56:0a:cf:36:10:5d:29:c2:bd:37:de:db:c4:
                    3d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:02:7A:27:96:0A:46:6D:87:61:59:0C:4F:D7:E8:E3:1D:9F:73:90
            X509v3 Authority Key Identifier:
                keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/8B7BDC02708811ED95A9DC75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:60:9b:88:8a:1d:03:aa:52:97:55:6f:4c:80:21:5b:b9:00:
         af:9c:4b:b0:e1:9a:c9:d0:62:50:2d:68:cc:61:4e:0a:b9:69:
         2f:22:83:0a:3f:09:0b:b6:a7:73:ad:d9:37:4a:fb:b3:d9:51:
         e6:b5:7e:f3:57:77:be:93:be:a9:2d:95:04:04:f1:98:ca:b3:
         1a:08:46:71:9c:0d:85:68:4d:09:67:15:ab:15:ba:1a:c1:1a:
         7d:b0:2a:b9:fa:59:0d:7e:9f:c4:5a:71:1f:9e:33:66:e9:95:
         33:9c:d7:f2:bb:26:37:49:85:f3:da:b8:98:61:ed:13:92:39:
         26:b6:e8:72:dc:0a:69:c0:46:88:7c:7c:c7:ec:69:b7:82:21:
         37:e3:7d:d2:df:c1:a0:e5:4f:65:ce:43:49:e3:82:f1:f4:32:
         93:4a:0f:fc:23:2e:d3:6c:c2:f1:dc:08:f4:82:11:f6:52:b7:
         aa:a7:d7:87:0a:a4:20:86:35:aa:6b:8f:aa:22:df:a9:06:03:
         76:15:b4:1d:37:fc:16:52:cb:ab:cc:fa:e9:bb:e7:69:6c:47:
         98:14:03:77:ee:cf:98:de:3c:64:f1:a3:6a:5d:a0:95:bb:d6:
         5c:84:dc:ee:4a:39:ef:09:bf:b2:e2:45:3a:35:c0:5e:b3:f8:
         b7:7e:09:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:21:56 2026 by rpki-client