This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/7B50FA5EA13911EF8B634635C4F9AE02.roa
File:                     7B50FA5EA13911EF8B634635C4F9AE02.roa (raw, json)
Hash identifier:          uUpm9NFHi6MmOb1nvSZuJIDcyqZZGqDMO8KCT1mXOjs=
Subject key identifier:   0F:C6:4E:D3:E3:8D:AE:05:68:0E:EE:40:BF:E6:A6:74:54:CA:8D:E2
Certificate issuer:       /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Certificate serial:       01C0
Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/7B50FA5EA13911EF8B634635C4F9AE02.roa
Signing time:             Wed 21 Jan 2026 03:22:40 +0000
ROA not before:           Wed 21 Jan 2026 03:22:39 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     55747
IP address blocks:        202.37.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
        Validity
            Not Before: Jan 21 03:22:39 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6970467f-a290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:b5:f8:96:f6:cc:b8:c6:35:22:9c:1c:f0:
                    66:3b:9b:a1:d3:5d:fc:3c:a2:e6:a5:f7:42:e0:9e:
                    9b:6a:49:7b:11:69:68:5f:9c:78:e8:79:b0:6b:a0:
                    b5:da:18:80:f3:92:c0:aa:b2:b7:92:14:89:6e:db:
                    57:da:39:cd:82:31:3d:d9:4a:66:95:3b:b1:4f:10:
                    c3:f5:c7:40:27:0c:04:13:d0:b1:dd:71:c5:87:81:
                    a3:2b:c7:90:b7:bd:a9:f8:94:c5:9b:09:6a:56:c3:
                    f5:d2:52:35:1c:66:b1:d7:79:48:af:32:42:e7:78:
                    ab:58:41:f8:fa:5f:b0:4c:cb:8f:0a:9a:cd:e0:01:
                    57:22:ac:5b:75:c5:c6:fe:98:ad:26:87:8b:3c:36:
                    a1:4e:7e:b0:dc:a0:6a:9f:8c:10:63:c4:9c:1b:45:
                    92:19:61:0b:2d:01:1e:49:9c:86:f7:07:40:35:6a:
                    ca:54:0a:f2:50:c7:ff:6f:a6:64:f8:36:54:4a:c9:
                    13:91:78:d7:4f:5c:7d:2c:9b:bf:45:8e:22:93:b5:
                    90:ad:98:86:d9:b8:2c:14:f6:3d:28:c2:e3:77:46:
                    4e:dc:e7:34:e0:54:c9:a5:aa:ba:0e:28:0c:b8:d8:
                    6e:00:16:11:a9:67:a9:d5:a8:e6:3d:95:a3:a1:31:
                    d0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C6:4E:D3:E3:8D:AE:05:68:0E:EE:40:BF:E6:A6:74:54:CA:8D:E2
            X509v3 Authority Key Identifier:
                keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/7B50FA5EA13911EF8B634635C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:f4:12:22:22:e9:95:98:20:cc:a4:c9:7f:ee:9c:cf:97:ad:
         33:a8:66:7d:ec:3a:cc:91:8e:5a:f9:c2:15:b7:ba:77:36:31:
         f6:53:d5:8e:a1:4f:e4:c7:50:e4:ba:06:09:89:b2:61:57:c7:
         a4:f9:9b:54:39:e9:71:ec:71:3a:37:e7:af:e0:82:9a:68:46:
         c3:59:38:42:6f:38:45:ad:16:a9:c7:60:5b:3c:3f:1a:68:cc:
         09:a6:c4:cd:6d:55:3f:34:37:49:e4:72:0d:3f:dd:63:55:3a:
         e1:5c:31:c3:74:ac:23:73:3b:38:ea:6e:88:b3:a0:e8:57:b3:
         36:11:af:d8:9d:32:92:61:2d:3c:10:69:b8:40:08:c5:29:db:
         e6:6e:e4:4d:f7:05:d3:e4:d4:bb:06:5f:6c:9b:48:43:02:f5:
         f3:be:ae:43:67:f1:57:b5:17:ce:6b:df:49:aa:c0:7a:a7:8b:
         fa:1b:6a:8f:4f:7d:7c:4f:56:4f:23:1f:94:12:d8:5c:63:30:
         77:45:2d:ab:b5:3a:a2:04:08:9c:0d:5f:07:72:3c:d5:35:e0:
         33:91:01:85:ad:96:e7:8e:fc:07:8a:97:77:d0:aa:3f:46:ca:
         fe:81:3f:a4:05:e9:5c:60:2d:d4:bc:ca:5a:61:de:83:59:01:
         31:b3:8a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:49:26 2026 by rpki-client