This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/6E491F58A79211EFABD45B2BC4F9AE02.roa
File:                     6E491F58A79211EFABD45B2BC4F9AE02.roa (raw, json)
Hash identifier:          R/HRMQag37lESOC5pQI4jAlDKWwH2lwmeGWYDb5gKhk=
Subject key identifier:   0B:DE:F6:7F:7F:BA:B7:EF:E6:F8:51:3B:22:6A:72:93:D0:22:03:74
Certificate issuer:       /CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF
Certificate serial:       EB
Authority key identifier: 2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/6E491F58A79211EFABD45B2BC4F9AE02.roa
Signing time:             Sat 17 Jan 2026 05:23:55 +0000
ROA not before:           Sat 17 Jan 2026 05:23:55 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     153451
IP address blocks:        203.23.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl
                          rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6C1B, serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF
        Validity
            Not Before: Jan 17 05:23:55 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696b1ceb-ab4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b5:a6:6e:5a:50:be:bc:ce:f1:5d:74:36:84:
                    17:cd:50:ed:40:4e:ab:ca:e3:bb:db:3a:55:57:30:
                    25:b6:8e:3f:c8:f0:2b:c7:fc:39:81:ba:be:b5:6f:
                    b3:9a:8b:53:d8:e5:6e:6a:62:42:b2:a7:70:5e:27:
                    d3:54:f8:fa:f2:cb:61:de:36:0e:2e:36:cf:f4:ed:
                    45:d7:4b:ab:56:48:31:4a:a9:26:7a:9b:9f:71:00:
                    c9:13:58:6a:34:6f:ec:19:ac:61:7b:59:55:59:3a:
                    4a:22:37:df:45:9a:71:3e:24:cb:3e:eb:67:4d:5c:
                    b5:8a:95:5b:70:cf:02:8b:68:fe:08:63:df:b7:bc:
                    78:c8:4a:b1:a2:95:a6:24:35:17:b3:a9:7b:aa:ae:
                    a6:71:b1:74:e4:97:5c:cd:1f:4a:22:77:8c:95:4d:
                    dd:2e:ea:e8:b2:b4:ed:fd:02:55:00:79:67:82:9f:
                    69:f4:fb:5b:e3:bb:73:bf:72:8b:8c:15:74:4c:7f:
                    42:2c:bd:44:79:07:de:eb:96:a3:cb:b4:43:2e:b1:
                    df:53:21:6e:2a:4e:b5:db:3c:c8:b3:a3:6f:a5:b3:
                    ff:91:64:a2:75:c7:67:41:99:5f:17:62:69:bb:10:
                    ad:7f:a6:27:f7:e2:4d:e5:57:ca:dd:d6:53:d5:ba:
                    86:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DE:F6:7F:7F:BA:B7:EF:E6:F8:51:3B:22:6A:72:93:D0:22:03:74
            X509v3 Authority Key Identifier:
                keyid:2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/6E491F58A79211EFABD45B2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.23.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:04:e4:03:3f:7a:62:7b:2e:4e:74:a8:a5:07:37:5b:15:9e:
         64:96:01:68:b3:2a:c0:c6:2d:6a:21:4e:ad:e7:57:9f:e6:cb:
         f6:9a:73:32:7e:79:cd:e8:47:ca:1a:83:a6:04:e9:9c:67:fc:
         02:89:97:a2:d4:47:59:a0:c7:36:b2:cf:cd:eb:1b:70:e4:fb:
         f6:d0:8a:7d:35:58:a7:76:55:50:86:5d:8f:c3:fd:a4:0f:4c:
         53:22:e5:fe:1f:64:94:62:51:4e:70:ee:fb:3d:2e:bb:58:3d:
         39:66:c3:7c:57:28:b8:f9:e0:e5:12:f5:ce:1f:66:07:ce:b0:
         af:07:d7:4d:b6:e3:21:cd:3d:0d:7e:5f:a0:1b:5f:30:69:bb:
         df:6a:6a:98:72:1a:f0:77:c2:1b:db:9d:e0:63:81:23:ba:e8:
         02:b8:4e:53:a8:92:a6:1c:bc:6e:6b:58:6d:95:ae:1b:0b:25:
         23:82:83:c4:a8:73:ce:d2:19:27:30:70:3f:4f:50:dc:6a:f8:
         2d:80:83:4c:c1:e7:35:80:3b:9e:3d:79:43:fd:fd:ae:4b:57:
         b9:97:b9:89:ef:71:45:ff:bc:36:e0:64:20:f2:44:89:c8:c7:
         0c:52:ec:4b:49:e0:d8:bb:91:2c:67:26:0a:e9:ff:8b:ee:24:
         f6:d0:9a:3b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RDZDMUIxMTAvBgNVBAUTKDJDRkIwQ0VGNkQxNkQ2Njc2RUVBMjExNjQzRUM4RTg1
QzI1Q0YyRkYwHhcNMjYwMTE3MDUyMzU1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZiMWNlYi1hYjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvbWmblpQvrzO8V10NoQXzVDtQE6ryuO72zpVVzAlto4/yPArx/w5gbq+tW+z
motT2OVuamJCsqdwXifTVPj68sth3jYOLjbP9O1F10urVkgxSqkmepufcQDJE1hq
NG/sGaxhe1lVWTpKIjffRZpxPiTLPutnTVy1ipVbcM8Ci2j+CGPft7x4yEqxopWm
JDUXs6l7qq6mcbF05JdczR9KIneMlU3dLurosrTt/QJVAHlngp9p9Ptb47tzv3KL
jBV0TH9CLL1EeQfe65ajy7RDLrHfUyFuKk612zzIs6NvpbP/kWSidcdnQZlfF2Jp
uxCtf6Yn9+JN5VfK3dZT1bqGEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAve9n9/
urfv5vhROyJqcpPQIgN0MB8GA1UdIwQYMBaAFCz7DO9tFtZnbuohFkPsjoXCXPL/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkMxQi9FNTczMDZDQTlB
NzIxMUVGOEVCNDE2MkRDNEY5QUUwMi9MUHNNNzIwVzFtZHU2aUVXUS15T2hjSmM4
djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xQc003MjBXMW1kdTZpRVdRLXlPaGNKYzh2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDZDMUIvRTU3MzA2Q0E5QTcyMTFFRjhFQjQxNjJEQzRGOUFFMDIvNkU0OTFGNThB
NzkyMTFFRkFCRDQ1QjJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLFyQwDQYJKoZIhvcNAQELBQADggEBAC8E5AM/emJ7Lk50
qKUHN1sVnmSWAWizKsDGLWohTq3nV5/my/aaczJ+ec3oR8oag6YE6Zxn/AKJl6LU
R1mgxzayz83rG3Dk+/bQin01WKd2VVCGXY/D/aQPTFMi5f4fZJRiUU5w7vs9LrtY
PTlmw3xXKLj54OUS9c4fZgfOsK8H10224yHNPQ1+X6AbXzBpu99qaphyGvB3whvb
neBjgSO66AK4TlOokqYcvG5rWG2VrhsLJSOCg8Soc87SGScwcD9PUNxq+C2Ag0zB
5zWAO549eUP9/a5LV7mXuYnvcUX/vDbgZCDyRInIxwxS7EtJ4Ni7kSxnJgrp/4vu
JPbQmjs=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:50 2026 by rpki-client