This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/B762E3ECF52811F0806C00125D6F56BC.roa
File:                     B762E3ECF52811F0806C00125D6F56BC.roa (raw, json)
Hash identifier:          NzHl/dftbvadWt4IIsQhv25aNRet3VTkFs43VrGAUo8=
Subject key identifier:   20:2B:7C:4F:B0:C6:A9:20:46:5E:42:72:51:C8:C1:1C:9E:4E:76:CA
Certificate issuer:       /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial:       08D2
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/B762E3ECF52811F0806C00125D6F56BC.roa
Signing time:             Mon 19 Jan 2026 11:19:27 +0000
ROA not before:           Mon 19 Jan 2026 11:19:27 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154047
IP address blocks:        182.255.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
                          rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258 (0x8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
        Validity
            Not Before: Jan 19 11:19:27 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=696e133f-6ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:08:cd:cb:7f:5c:1c:66:f2:bb:24:b3:53:
                    ac:e7:9c:81:8b:b6:bf:97:4d:37:7c:74:bb:25:a2:
                    5a:89:4e:e6:0d:9f:39:3a:19:13:54:a0:98:28:bd:
                    ac:e8:43:a5:eb:dd:ff:ef:f8:b4:d3:6b:9d:51:fe:
                    5e:f8:8f:24:c7:a4:2f:52:c8:03:78:fe:9d:39:c1:
                    be:aa:04:7d:9b:35:22:74:c1:c9:43:e1:6f:29:75:
                    c3:60:64:64:08:3e:d6:eb:ed:37:68:27:35:24:d9:
                    47:f9:37:2b:e7:17:d1:f6:a6:57:68:36:cf:bd:25:
                    1b:b2:de:b0:31:ac:4c:5d:2d:be:9a:a8:82:66:a8:
                    8e:31:80:ca:a8:c2:62:f4:0d:69:95:65:c0:fe:98:
                    98:e7:c6:38:02:bd:45:0f:cc:fa:cb:bd:c7:59:cf:
                    52:4b:07:f5:4e:c3:97:77:be:f0:8f:73:4a:b8:71:
                    52:7b:5a:e8:6d:10:f3:f5:1c:38:f5:e8:88:54:28:
                    80:87:c5:73:5b:74:19:34:5d:e7:b4:6f:2a:c2:93:
                    f4:62:90:88:74:ac:ac:6d:f6:ec:07:3b:a7:88:1f:
                    80:c7:5b:1f:b3:82:ab:da:de:c0:36:d8:8f:9d:a9:
                    2f:4b:e7:75:30:34:1c:cc:a0:3f:00:2e:d3:69:f3:
                    c3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2B:7C:4F:B0:C6:A9:20:46:5E:42:72:51:C8:C1:1C:9E:4E:76:CA
            X509v3 Authority Key Identifier:
                keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/B762E3ECF52811F0806C00125D6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:f3:44:3d:29:b5:cd:52:9c:0d:d0:10:62:fe:43:63:3f:c8:
         8d:fa:21:a7:3e:56:81:3b:18:bb:6c:2c:d8:bf:09:48:bf:e5:
         94:af:0e:43:9c:ad:d1:57:0c:98:6c:ac:bc:16:e2:fe:e8:a6:
         23:4f:b4:d2:30:39:13:b0:61:85:51:de:f4:b4:14:c7:b9:14:
         87:9f:39:ed:57:0f:a5:2e:a9:d1:cf:0a:a0:a2:6b:78:0c:30:
         74:7c:ce:27:01:72:87:95:ae:c8:76:ed:b6:c1:a2:91:52:20:
         56:ba:08:04:79:ab:e0:ba:fa:ea:bf:e3:dc:b5:8f:7a:14:a7:
         f0:ff:29:ac:ef:d5:21:23:07:cb:78:59:45:7e:e7:c1:cc:f9:
         81:69:75:aa:e5:be:67:23:ca:c5:b6:bc:23:cd:da:d7:6e:1d:
         f8:1a:8e:8a:8f:2c:07:d1:2c:4b:f6:c4:f3:35:ee:0b:69:fc:
         80:84:cd:65:80:24:8d:e4:61:16:2c:30:53:46:55:c1:cc:6c:
         0a:4f:8c:b4:5a:ac:c8:77:ba:dc:8e:9d:3f:34:72:61:b0:d0:
         49:78:c9:04:f7:f2:e3:9f:a5:fe:68:49:12:79:c9:30:42:31:
         f5:ab:22:c3:f4:43:14:0c:f5:78:12:97:04:79:b4:1c:57:89:
         22:5c:6a:94
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2
OTQyNDE2RDEwHhcNMjYwMTE5MTExOTI3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZlMTMzZi02YWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAubgIzct/XBxm8rsks1Os55yBi7a/l003fHS7JaJaiU7mDZ85OhkTVKCYKL2s
6EOl693/7/i002udUf5e+I8kx6QvUsgDeP6dOcG+qgR9mzUidMHJQ+FvKXXDYGRk
CD7W6+03aCc1JNlH+Tcr5xfR9qZXaDbPvSUbst6wMaxMXS2+mqiCZqiOMYDKqMJi
9A1plWXA/piY58Y4Ar1FD8z6y73HWc9SSwf1TsOXd77wj3NKuHFSe1robRDz9Rw4
9eiIVCiAh8VzW3QZNF3ntG8qwpP0YpCIdKysbfbsBzuniB+Ax1sfs4Kr2t7ANtiP
nakvS+d1MDQczKA/AC7TafPDQwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCArfE+w
xqkgRl5CclHIwRyeTnbKMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND
OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG
dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTU0Q0YvRDhGM0FDQUNDQzhGMTFFQUJDMUYxNDQyQzRGOUFFMDIvQjc2MkUzRUNG
NTI4MTFGMDgwNkMwMDEyNUQ2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAG2/z4wDQYJKoZIhvcNAQELBQADggEBAHrzRD0ptc1SnA3Q
EGL+Q2M/yI36Iac+VoE7GLtsLNi/CUi/5ZSvDkOcrdFXDJhsrLwW4v7opiNPtNIw
OROwYYVR3vS0FMe5FIefOe1XD6UuqdHPCqCia3gMMHR8zicBcoeVrsh27bbBopFS
IFa6CAR5q+C6+uq/49y1j3oUp/D/Kazv1SEjB8t4WUV+58HM+YFpdarlvmcjysW2
vCPN2tduHfgajoqPLAfRLEv2xPM17gtp/ICEzWWAJI3kYRYsMFNGVcHMbApPjLRa
rMh3utyOnT80cmGw0El4yQT38uOfpf5oSRJ5yTBCMfWrIsP0QxQM9XgSlwR5tBxX
iSJcapQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:12:56 2026 by rpki-client