This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/767655BE561A11E79F98831DC4F9AE02.roa
File:                     767655BE561A11E79F98831DC4F9AE02.roa (raw, json)
Hash identifier:          P+PfKZViTXpdAD+kS52Q6Ob31BSdpQPHLlD8B4hw+rM=
Subject key identifier:   6D:7C:35:13:A9:60:7B:AD:04:68:BF:E2:6C:45:AF:90:FC:7F:B4:60
Certificate issuer:       /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
Certificate serial:       268C
Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/767655BE561A11E79F98831DC4F9AE02.roa
Signing time:             Thu 22 Jan 2026 16:12:54 +0000
ROA not before:           Thu 22 Jan 2026 16:12:53 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     24389
IP address blocks:        119.30.32.0/20 maxlen: 24
                          123.108.240.0/21 maxlen: 24
                          202.56.4.0/22 maxlen: 24
                          2400:c600::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl
                          rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9868 (0x268c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
        Validity
            Not Before: Jan 22 16:12:53 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69724c85-274f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a2:c7:76:f5:1d:8b:25:ea:8e:98:47:e8:24:
                    c3:1b:f1:b9:10:2c:b7:d3:6f:df:bc:75:b1:95:5d:
                    1e:20:46:11:a8:f1:f6:f2:14:3a:dc:2e:5a:5c:73:
                    8f:72:a8:91:dd:d1:c9:5c:72:50:d6:85:e9:09:3a:
                    b8:67:5e:cf:da:0d:c6:22:84:db:1b:6f:24:59:b7:
                    e0:6f:61:1a:be:29:4f:a4:cf:b3:6e:aa:5a:19:be:
                    ed:76:7f:26:a4:10:03:df:58:9f:26:a5:d2:66:db:
                    e6:a9:a5:24:74:f1:a4:93:1d:dc:12:d1:2b:7a:95:
                    9c:11:ab:7b:4c:1e:a6:16:41:cf:d1:db:68:8e:7a:
                    9f:d7:4a:65:a4:1f:5a:e4:37:ba:8b:7b:c5:bc:f0:
                    1b:96:f7:08:61:78:d7:ad:48:f1:fa:67:0b:0f:85:
                    34:ae:5d:c0:6a:b0:2a:79:64:b3:79:5a:8a:18:25:
                    8e:ed:92:32:e6:5e:c1:52:e3:12:d6:ca:51:aa:07:
                    74:da:2e:a5:ab:25:63:58:8d:0a:2c:61:c6:f9:56:
                    49:fc:9a:71:47:ca:15:0c:54:c2:93:7e:c2:22:a8:
                    1d:ea:0d:eb:f2:f5:cd:e8:9f:18:8d:c2:cc:c9:d5:
                    1c:48:64:7f:1c:9d:bf:e0:bb:ee:b6:a8:18:7f:70:
                    67:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7C:35:13:A9:60:7B:AD:04:68:BF:E2:6C:45:AF:90:FC:7F:B4:60
            X509v3 Authority Key Identifier:
                keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/767655BE561A11E79F98831DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.32.0/20
                  123.108.240.0/21
                  202.56.4.0/22
                IPv6:
                  2400:c600::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:e8:87:dd:29:c7:11:d6:1b:0f:0a:48:ff:d6:42:0a:93:59:
         0f:ea:59:be:46:6f:1e:57:4f:69:1b:6e:d9:02:cc:1d:8e:98:
         d8:31:58:c8:99:35:6d:78:b2:2e:a3:f2:3e:9e:de:4f:d1:90:
         76:8b:e9:44:ef:4b:f0:9b:39:1d:e7:1d:2b:99:4d:07:65:ea:
         3b:e0:9e:5e:e2:7b:63:ce:95:69:23:41:4a:c5:30:cc:2e:5c:
         33:27:b0:af:dc:59:b7:21:ce:b4:42:fc:19:ee:6d:30:a1:03:
         00:b2:36:8e:af:4e:18:ec:d3:b0:2f:22:43:0b:a5:74:bd:64:
         62:c7:13:62:9b:03:dd:30:d3:81:72:f7:10:0a:f0:dd:72:c5:
         a6:7a:ea:28:d2:1d:42:c0:c5:76:e7:fb:c3:e4:78:fd:8f:8a:
         f7:db:fd:31:a5:0a:b8:ff:c4:c9:45:59:c8:f4:cc:41:d3:73:
         e0:da:92:9e:84:cb:63:00:1c:09:66:8c:9c:1b:1d:29:b4:e5:
         3c:b1:7f:c9:c6:d5:c8:96:f6:ba:a4:42:81:d7:7e:c1:ee:fd:
         5c:00:72:bd:b0:63:94:4a:3d:ed:67:e5:41:51:ae:90:45:71:
         85:13:64:29:46:23:4f:5c:c5:7e:28:f4:43:94:28:af:e1:a1:
         85:82:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:20 2026 by rpki-client