This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/00FEEFF0536911EE8594503BC4F9AE02.roa
File:                     00FEEFF0536911EE8594503BC4F9AE02.roa (raw, json)
Hash identifier:          Y3WwUqtqR90Nv/OpG++CH7lhdTID4yDmn2MU9JlOUJw=
Subject key identifier:   1B:3F:69:83:7A:17:86:3F:FC:0F:3B:56:BF:B4:11:9B:5C:1C:FC:EB
Certificate issuer:       /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2
Certificate serial:       01BA
Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/00FEEFF0536911EE8594503BC4F9AE02.roa
Signing time:             Fri 09 Jan 2026 03:22:25 +0000
ROA not before:           Fri 09 Jan 2026 03:22:25 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     4768
IP address blocks:        202.36.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl
                          rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2
        Validity
            Not Before: Jan  9 03:22:25 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69607471-1cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:de:fa:a4:71:08:b4:e1:3d:b9:81:c2:fa:
                    e6:fd:84:8a:02:86:9d:0b:e6:19:16:7d:97:0a:fd:
                    44:0f:78:5f:2d:9b:d6:6d:c0:1f:e2:17:c8:8b:47:
                    8f:d4:f8:21:aa:c9:c6:d3:56:dc:fe:ac:a9:7b:64:
                    5f:6c:b2:8c:f4:66:59:29:5d:97:0f:18:fe:fc:3f:
                    74:bb:01:39:ed:cb:88:0c:cc:fc:65:e1:30:ce:b4:
                    2a:b5:ed:70:1c:6f:4b:32:c6:78:cb:d1:c7:2a:25:
                    db:32:dd:3c:83:e3:28:67:2f:75:86:1d:e7:78:7f:
                    4f:31:63:5a:5b:7a:39:ff:01:f1:f2:24:71:4d:60:
                    9c:b8:85:40:8a:18:19:6b:7c:cd:8b:b2:45:8f:0f:
                    d3:81:2f:77:5b:65:9b:fd:26:ea:1f:3a:7b:82:fa:
                    ac:5e:b3:5c:f8:28:8a:87:65:c2:2b:46:d6:1f:60:
                    f2:9c:3b:d1:27:d8:b3:a9:73:f8:c3:11:01:96:fe:
                    d6:04:28:f3:c7:77:70:a2:13:f0:43:c6:42:33:af:
                    ed:b2:8f:c2:0b:34:61:e6:1f:d6:af:fd:71:b8:f4:
                    ee:f6:88:53:ca:2a:56:cf:34:d3:3d:d3:d8:ae:26:
                    70:fd:f1:15:b1:ad:d4:94:2b:4f:38:46:55:9e:55:
                    e9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3F:69:83:7A:17:86:3F:FC:0F:3B:56:BF:B4:11:9B:5C:1C:FC:EB
            X509v3 Authority Key Identifier:
                keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/00FEEFF0536911EE8594503BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.36.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:f8:fe:e0:9a:8d:b4:64:b2:62:9a:70:ec:b7:76:8d:63:b5:
         c1:76:e5:cc:4a:b3:0e:b5:8e:b7:4d:f3:9b:53:32:a5:95:1a:
         95:82:4a:d4:33:b1:36:ad:4d:e5:b2:6e:1b:fb:55:e2:39:ee:
         b3:b6:67:3f:99:04:11:98:ae:a0:1e:64:40:06:30:81:23:05:
         64:3a:9e:1f:8a:9a:cc:81:43:0c:6b:10:f0:ca:d1:eb:64:25:
         84:54:d7:51:3a:12:ec:c7:44:29:14:61:e8:a7:a6:d8:65:33:
         59:2b:0e:48:f3:5a:11:44:9b:43:91:a8:30:46:28:da:b5:65:
         fb:2a:53:ee:7d:5e:39:bd:4b:b4:71:38:15:9c:5e:2d:c3:74:
         a3:72:3b:b6:62:d0:66:3e:ed:06:b1:8a:b0:5f:c9:3c:e8:95:
         fd:51:48:2c:92:85:57:c5:f7:4d:1a:40:5a:a6:4f:7f:f8:14:
         00:84:73:d1:9c:cb:f1:ca:52:7c:90:78:e2:71:66:db:8e:fb:
         04:17:a7:f5:a7:be:44:d1:9d:ec:ee:21:a5:b7:e6:b0:ee:72:
         c8:e2:ad:fa:4f:92:64:f0:43:d2:00:11:65:45:f6:05:9a:60:
         7f:b3:ca:2a:37:eb:dc:0e:0c:21:47:66:8d:35:4b:fd:96:5a:
         78:b1:84:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:20:04 2026 by rpki-client