This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DC334248DA5211F08B25A6E192D3641D.roa
File:                     DC334248DA5211F08B25A6E192D3641D.roa (raw, json)
Hash identifier:          /gJXXPVQq9vG3NP0QoCvMYsQ1wpCCayu68y1jEAQEA4=
Subject key identifier:   17:FF:53:7D:6B:A3:B0:59:3A:45:D5:7E:20:7F:49:D4:98:A5:D4:9D
Certificate issuer:       /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial:       11A2
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DC334248DA5211F08B25A6E192D3641D.roa
Signing time:             Tue 16 Dec 2025 07:43:54 +0000
ROA not before:           Tue 16 Dec 2025 07:43:54 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     397373
IP address blocks:        139.190.234.0/24 maxlen: 24
                          139.190.235.0/24 maxlen: 24
                          139.190.236.0/24 maxlen: 24
                          139.190.237.0/24 maxlen: 24
                          139.190.238.0/24 maxlen: 24
                          139.190.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4514 (0x11a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
        Validity
            Not Before: Dec 16 07:43:54 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69410dba-2e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:40:8d:e5:d5:e8:f8:79:74:db:fc:d4:99:7a:
                    46:cb:a1:07:81:62:bc:8f:ad:e3:39:0d:52:41:44:
                    37:f5:aa:b9:e6:85:75:08:3d:3f:d2:2b:1a:ee:83:
                    c3:17:b2:f2:7c:75:6b:c9:c2:64:93:c3:cb:22:f6:
                    f3:5d:5d:51:fa:6f:b5:8e:b6:56:da:09:33:a7:7e:
                    1f:8a:2c:1b:f9:92:c4:82:70:b9:a6:f2:49:b1:03:
                    48:14:2d:cd:20:34:d4:2e:52:02:a8:c7:2b:11:13:
                    7d:23:7c:57:5a:ae:2f:c7:b7:b9:66:22:93:22:a5:
                    ed:54:3c:d2:18:43:5e:16:86:95:10:e0:a5:d1:9c:
                    e6:95:1e:b8:03:f8:20:91:37:50:a7:55:cb:f6:03:
                    0f:e8:e2:7d:fb:40:85:1b:51:c1:12:9d:c1:94:68:
                    0f:ec:b3:45:9e:2d:3b:64:d4:87:aa:9f:40:a3:cc:
                    17:c4:78:bc:ab:9c:0c:25:33:61:f4:19:4f:f3:41:
                    d0:c0:7b:34:77:79:92:e2:ee:3e:d0:6a:3f:5a:7e:
                    96:7a:ff:e7:f4:19:ae:33:69:70:b5:0d:57:38:ba:
                    94:0f:b9:0f:63:5e:cb:0b:b9:97:a8:75:4b:c1:eb:
                    ca:26:3e:dd:d0:e4:a6:86:f0:77:8b:ad:0d:78:71:
                    b1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FF:53:7D:6B:A3:B0:59:3A:45:D5:7E:20:7F:49:D4:98:A5:D4:9D
            X509v3 Authority Key Identifier:
                keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/DC334248DA5211F08B25A6E192D3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.190.234.0-139.190.239.255

    Signature Algorithm: sha256WithRSAEncryption
         2d:f7:07:f6:dc:70:35:f1:0f:3f:fc:75:2b:d8:d0:8a:68:58:
         7d:97:2a:0d:60:63:af:25:7b:7e:ab:1b:7c:82:e1:f9:c7:0d:
         21:50:32:33:6d:24:e7:94:c6:12:0c:9e:b5:a5:f2:f6:96:fa:
         e0:f4:1b:65:dc:97:87:98:3f:3e:b1:c3:ea:fc:09:71:d6:3a:
         2c:2d:0e:1a:81:7a:d6:b5:30:3d:61:a4:ac:e0:05:5e:7b:4d:
         36:e8:42:68:f6:2a:c8:64:e7:16:8d:a9:dd:2d:74:be:32:d8:
         7e:07:38:5b:9c:4d:8c:27:db:dc:9c:77:49:a8:8d:e6:06:b3:
         89:c7:59:8e:d7:2a:ed:ad:70:6b:b6:3f:f3:a8:bc:19:2f:5d:
         51:9c:56:9d:0d:84:64:1f:44:04:ed:6e:1d:4d:58:41:7c:30:
         6c:a9:2a:e5:c1:4d:33:9d:e5:03:59:06:97:85:01:68:b8:0e:
         c7:88:cd:45:39:27:d3:5d:8d:1f:b0:24:d2:d1:06:13:10:39:
         fe:73:4d:00:99:bf:94:37:a0:d2:73:15:9d:92:07:1a:78:30:
         5a:d2:03:5b:04:9c:56:e8:f9:e1:e6:3a:0c:01:60:ef:ab:b5:
         5e:83:1f:7d:ab:fe:da:55:70:e5:a8:ef:0f:ce:64:f5:26:20:
         a1:8b:95:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:24:18 2025 by rpki-client