This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/AFA37450139811EA807F1A26C4F9AE02.roa
File:                     AFA37450139811EA807F1A26C4F9AE02.roa (raw, json)
Hash identifier:          Ke7fH3KN7Q8XruOkm5ugTPmirMv/zWAtI3qp8ydtg5I=
Subject key identifier:   51:1E:E9:2A:A7:0D:49:97:D6:73:3C:2C:05:33:71:C1:8E:4C:99:F9
Certificate issuer:       /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
Certificate serial:       1B00
Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/AFA37450139811EA807F1A26C4F9AE02.roa
Signing time:             Thu 22 Jan 2026 16:12:55 +0000
ROA not before:           Thu 22 Jan 2026 16:12:55 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     24389
IP address blocks:        37.111.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl
                          rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6912 (0x1b00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3A74, serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C
        Validity
            Not Before: Jan 22 16:12:55 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69724c87-d3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:a6:bd:a2:87:fb:f6:c3:3a:31:c6:be:76:
                    22:f3:ae:e8:5c:ad:f8:c7:0c:2a:dc:32:4d:ed:63:
                    46:31:79:69:43:d2:e8:00:32:df:45:c0:d3:e2:5c:
                    28:a8:9c:04:35:30:ce:5c:6a:21:17:3b:f6:1f:f8:
                    e3:b5:e9:61:2d:5e:cd:d3:44:87:06:2c:6c:31:7d:
                    03:37:29:47:ad:4a:1d:19:3b:68:5e:53:4b:e1:66:
                    75:27:c5:a0:5b:ae:c3:dd:c6:46:9d:16:f9:d7:fb:
                    c7:7e:4d:5b:8e:85:02:12:ed:63:27:2d:94:c7:fe:
                    80:21:cb:9b:d1:e3:ce:0b:35:eb:47:86:fd:55:91:
                    16:d3:2e:86:c4:05:31:ff:3b:66:5e:af:82:5d:9b:
                    1b:ce:52:e8:b6:40:6d:67:d8:5f:1b:5d:a0:cc:e7:
                    29:92:4a:b4:69:78:f4:be:70:8b:76:3f:98:77:a5:
                    38:3a:88:9a:d4:4a:c8:f9:09:e8:22:a4:69:ef:51:
                    0d:ed:08:3a:27:61:fc:90:5e:2a:38:56:f0:34:24:
                    50:1d:65:35:37:63:39:40:cd:ff:0d:4f:97:fa:f7:
                    52:01:76:38:45:0b:f7:e7:42:ea:d4:f3:7f:51:48:
                    aa:b0:5e:2e:94:f6:dd:45:05:b9:2e:8a:ae:fa:cf:
                    6a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1E:E9:2A:A7:0D:49:97:D6:73:3C:2C:05:33:71:C1:8E:4C:99:F9
            X509v3 Authority Key Identifier:
                keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/AFA37450139811EA807F1A26C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.111.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6e:ca:c5:1d:53:7b:75:4c:40:1b:13:98:4c:df:ab:d7:96:f1:
         23:40:6c:79:50:4a:50:23:f3:88:fc:db:6c:a8:eb:e8:ca:7d:
         70:64:1c:29:a7:53:d9:e0:98:36:55:7b:61:8b:70:14:a7:14:
         dc:db:43:87:0a:f7:5b:0f:26:75:dc:19:2c:88:c6:9d:f0:c7:
         e5:a3:0e:96:a7:b9:1b:7e:fb:2f:83:b5:4c:16:26:66:e9:a2:
         9e:cc:f0:e6:fc:66:43:72:a4:b6:59:3d:63:88:3c:d1:f4:20:
         50:90:be:65:01:c7:d8:7a:5e:fc:19:c6:ce:bc:21:f0:32:af:
         8e:01:e8:c2:ad:c0:9c:38:04:52:9a:27:3e:9c:a0:52:47:cd:
         b2:c8:71:4d:8b:b4:e7:9d:63:eb:ff:fe:0f:e0:1e:9b:ba:4d:
         08:e0:dc:bf:8c:6f:d8:e0:ba:ec:81:ba:53:75:79:8d:38:a7:
         da:4d:b1:86:a2:36:f8:dc:92:e7:1b:f1:fc:cb:c8:11:7e:86:
         3d:8f:8d:97:c4:0a:91:57:dd:5b:e1:cd:28:a9:b7:d4:ba:8a:
         43:fb:f2:ab:33:09:4f:8c:b1:b6:0f:5f:be:fe:c5:72:e5:7d:
         8f:e5:ec:6b:84:d3:29:21:26:cd:ac:8d:3c:d7:ff:c3:b8:b3:
         1a:0a:c1:ef
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QzNBNzQxMTAvBgNVBAUTKDhFMTFGQ0I0RThCRDYzRDI3Qjg0RUIyRDUyNjcwQ0Ex
NzRGOUM0M0MwHhcNMjYwMTIyMTYxMjU1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTcyNGM4Ny1kM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdCmvaKH+/bDOjHGvnYi867oXK34xwwq3DJN7WNGMXlpQ9LoADLfRcDT4lwo
qJwENTDOXGohFzv2H/jjtelhLV7N00SHBixsMX0DNylHrUodGTtoXlNL4WZ1J8Wg
W67D3cZGnRb51/vHfk1bjoUCEu1jJy2Ux/6AIcub0ePOCzXrR4b9VZEW0y6GxAUx
/ztmXq+CXZsbzlLotkBtZ9hfG12gzOcpkkq0aXj0vnCLdj+Yd6U4Ooia1ErI+Qno
IqRp71EN7Qg6J2H8kF4qOFbwNCRQHWU1N2M5QM3/DU+X+vdSAXY4RQv350Lq1PN/
UUiqsF4ulPbdRQW5Loqu+s9qCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFEe6Sqn
DUmX1nM8LAUzccGOTJn5MB8GA1UdIwQYMBaAFI4R/LTovWPSe4TrLVJnDKF0+cQ8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83NTNENzFFRTNB
QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5SjdoT3N0VW1jTW9YVDV4
RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2poSDh0T2k5WTlKN2hPc3RVbWNNb1hUNXhEdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzNBNzQvNzUzRDcxRUUzQUI1MTFFN0I4NjA5RjFDQzRGOUFFMDIvQUZBMzc0NTAx
Mzk4MTFFQTgwN0YxQTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAYlb8AwDQYJKoZIhvcNAQELBQADggEBAG7KxR1Te3VMQBsT
mEzfq9eW8SNAbHlQSlAj84j822yo6+jKfXBkHCmnU9ngmDZVe2GLcBSnFNzbQ4cK
91sPJnXcGSyIxp3wx+WjDpanuRt++y+DtUwWJmbpop7M8Ob8ZkNypLZZPWOIPNH0
IFCQvmUBx9h6XvwZxs68IfAyr44B6MKtwJw4BFKaJz6coFJHzbLIcU2LtOedY+v/
/g/gHpu6TQjg3L+Mb9jguuyBulN1eY04p9pNsYaiNvjckucb8fzLyBF+hj2PjZfE
CpFX3VvhzSipt9S6ikP78qszCU+MsbYPX77+xXLlfY/l7GuE0ykhJs2sjTzX/8O4
sxoKwe8=
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:11:52 2026 by rpki-client