This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/73DC435A39F511F09F296862C4F9AE02.roa
File:                     73DC435A39F511F09F296862C4F9AE02.roa (raw, json)
Hash identifier:          Svu2JeuZ6CYR5ygmEoE5eVNloQDdE5gMCDtzf/8+0c4=
Subject key identifier:   58:78:58:F0:63:60:95:0E:76:82:16:6B:B0:AD:67:5B:3F:0F:A3:84
Certificate issuer:       /CN=A91D0B6B/serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B
Certificate serial:       A8
Authority key identifier: 85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/73DC435A39F511F09F296862C4F9AE02.roa
Signing time:             Fri 23 Jan 2026 05:25:47 +0000
ROA not before:           Fri 23 Jan 2026 05:25:47 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     153518
IP address blocks:        114.129.34.0/24 maxlen: 24
                          114.129.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B6B, serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B
        Validity
            Not Before: Jan 23 05:25:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6973065b-09d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:b3:6a:0e:1b:4d:cf:bd:f6:9c:67:ba:91:
                    25:fc:cb:ea:2e:ee:3a:53:33:1f:66:36:75:03:aa:
                    b0:0a:f7:98:55:56:15:61:02:80:be:ca:f0:f3:0b:
                    92:06:7c:90:3a:15:41:56:c6:06:4f:cd:ee:35:ec:
                    e4:34:d6:4c:8f:04:be:3f:1c:61:e3:76:1a:b1:6c:
                    81:7e:7f:7f:a5:3b:4f:f1:93:0b:60:d8:88:ff:c0:
                    59:32:49:35:b0:27:38:e7:87:9b:25:b4:11:c7:fc:
                    24:46:fc:b9:91:1e:d5:6e:77:d8:c5:97:fe:30:59:
                    98:d4:d5:31:e2:98:5a:46:84:33:dd:b7:54:8d:31:
                    1c:e5:8c:85:c2:0c:fd:13:94:b8:44:df:ea:91:97:
                    99:f9:8d:f4:76:7c:a6:52:5c:d7:c3:f4:52:91:43:
                    e4:3f:24:ab:6e:02:6c:8b:e5:f3:95:33:c2:11:48:
                    1b:80:02:74:59:68:a1:d0:7e:01:f1:5b:93:9f:b6:
                    93:71:97:d0:e9:a3:ac:29:73:92:39:1c:37:c1:00:
                    73:a7:db:4c:0b:e5:95:25:09:18:d4:3d:b1:bc:39:
                    f8:e1:06:3f:24:aa:be:bf:93:c8:05:1d:2b:32:3a:
                    72:4e:cb:49:61:db:13:36:22:c8:bd:70:19:58:65:
                    3e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:78:58:F0:63:60:95:0E:76:82:16:6B:B0:AD:67:5B:3F:0F:A3:84
            X509v3 Authority Key Identifier:
                keyid:85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/73DC435A39F511F09F296862C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.129.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:80:e4:db:61:3b:bb:3b:3b:65:a7:ce:da:f7:5f:8f:58:ae:
         6a:46:51:bb:9e:b8:2f:1a:ec:32:d8:47:f7:8d:de:17:fd:33:
         f9:35:29:20:87:be:7c:1c:8c:fc:c1:f3:d3:1d:e3:fa:a9:3e:
         d0:ad:76:ff:3c:0b:41:b1:2e:4a:bf:46:03:68:d6:b3:eb:8b:
         2e:16:71:35:e0:b8:81:11:c3:42:e2:ab:97:fe:a6:61:64:7c:
         d1:dd:b0:de:5c:ff:fb:ad:88:a8:2f:30:4c:36:9d:d5:1b:21:
         ef:d5:11:7a:08:28:62:54:27:d8:18:2b:9a:89:88:05:f1:73:
         48:3d:8a:36:7a:ed:e1:b2:b5:12:49:61:a9:4a:36:66:84:e2:
         45:56:39:7f:1c:e5:5d:ce:d3:3a:2b:af:ec:b3:44:b9:7e:f2:
         54:49:91:99:12:b5:2f:de:41:b9:d8:d2:ec:a9:c9:6f:b5:0c:
         0d:79:56:c1:d6:29:8c:28:e1:a9:70:e5:c7:79:36:10:75:7f:
         7d:cf:9a:a7:a6:96:f8:ae:aa:7f:f9:61:45:48:f4:3e:8a:9b:
         93:a7:d9:db:f5:1d:e2:51:8a:78:c9:10:15:23:94:45:04:f7:
         ea:b2:33:e2:92:57:77:f6:cf:88:fc:63:04:8f:0e:b7:90:79:
         b9:5f:34:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:47:56 2026 by rpki-client