This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/827D7766AACC11EA8113F532C4F9AE02.roa
File:                     827D7766AACC11EA8113F532C4F9AE02.roa (raw, json)
Hash identifier:          +sG8NbgnYW/5yKj+KS6Bj5dJEC1uPTYbZ5sH5bpsSVc=
Subject key identifier:   21:C9:83:77:A2:00:CC:9F:1D:2F:00:B8:91:3A:81:A6:28:C3:66:09
Certificate issuer:       /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
Certificate serial:       0D26
Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/827D7766AACC11EA8113F532C4F9AE02.roa
Signing time:             Tue 02 Dec 2025 17:48:21 +0000
ROA not before:           Tue 02 Dec 2025 17:48:21 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     59268
IP address blocks:        27.126.221.0/24 maxlen: 24
                          27.126.222.0/24 maxlen: 24
                          27.126.223.0/24 maxlen: 24
                          27.126.228.0/24 maxlen: 24
                          27.126.229.0/24 maxlen: 24
                          27.126.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3366 (0xd26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F91EB, serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
        Validity
            Not Before: Dec  2 17:48:21 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692f2665-8667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:63:e5:7a:91:ed:2d:49:39:a8:96:9a:9a:
                    d1:62:21:5d:4a:50:a8:4f:11:6a:53:05:06:cd:c0:
                    20:4e:97:0d:a7:d6:c5:af:cc:43:e7:5e:77:3d:b9:
                    b6:70:2a:2e:e2:80:e6:cd:6e:df:a7:15:27:25:bd:
                    c3:b8:51:26:8b:16:9b:c6:8f:2c:c4:89:a1:e1:c4:
                    72:10:fc:a0:55:59:71:2f:f7:56:19:2d:06:71:81:
                    2f:16:27:d0:2d:a9:0b:01:80:d1:ce:fe:d9:c9:99:
                    7d:b5:f5:d7:72:3c:8d:2d:c5:1b:97:8f:12:08:20:
                    8f:bd:34:63:c1:a7:68:c2:c0:bd:a3:c2:cb:36:4a:
                    6d:30:bb:22:cf:35:06:27:4c:d7:46:d5:9a:30:08:
                    e7:22:1b:02:d5:de:69:28:d3:87:a9:e9:f1:2d:ac:
                    e5:93:3d:8b:0a:95:22:83:09:1a:9b:07:94:c9:22:
                    1e:9b:47:58:ec:d5:9a:ad:95:f9:dd:8f:15:e4:0b:
                    c7:3b:75:75:b1:fc:b9:8f:39:81:8a:47:99:5e:fd:
                    f5:1e:db:33:13:34:c2:5e:73:9c:82:67:70:38:af:
                    ae:5d:22:d0:0f:d6:de:70:27:00:97:26:e5:e4:dc:
                    c2:8e:b7:1e:43:38:fb:bf:c4:05:f9:4e:b1:c2:f0:
                    89:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C9:83:77:A2:00:CC:9F:1D:2F:00:B8:91:3A:81:A6:28:C3:66:09
            X509v3 Authority Key Identifier:
                keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/827D7766AACC11EA8113F532C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.126.221.0-27.126.223.255
                  27.126.228.0-27.126.230.255

    Signature Algorithm: sha256WithRSAEncryption
         1e:c6:64:61:83:06:2e:7a:cc:28:bf:35:e6:75:35:a9:93:56:
         a0:00:d4:3b:32:56:c1:b7:d9:7e:b2:4f:a3:41:fc:a3:8a:e2:
         dc:a1:1c:47:de:f7:0f:2c:ec:e2:3c:30:9d:5e:c8:cc:8e:35:
         d6:8c:8f:b9:bd:02:6c:2a:4e:03:76:a5:34:56:7b:62:9d:87:
         93:11:d6:cd:47:0d:8b:e4:be:66:2a:f3:bc:5c:7f:5b:25:3a:
         c4:0e:aa:41:30:6e:d5:fa:bd:00:5c:c9:c5:d4:a2:0f:23:d4:
         68:ae:42:d5:8a:5b:00:6d:93:07:b8:fd:68:b1:56:4a:9f:ab:
         ba:3d:8e:36:46:d7:15:1a:fd:4b:1e:0d:31:7d:87:b7:29:f0:
         a7:91:6c:fc:7c:87:53:61:b5:ee:1e:92:84:70:8f:91:f9:c2:
         35:ee:e0:72:48:9e:5f:94:df:be:11:98:30:9b:0e:c8:6a:8c:
         d1:c1:6e:3f:f9:55:03:34:30:d4:ef:44:4a:a8:e8:83:3f:cc:
         7e:26:18:e2:75:08:d2:f7:cc:49:d7:df:c8:bc:8c:6d:77:87:
         49:6a:62:90:96:08:7b:a3:c3:d4:07:7b:ac:8a:c1:cc:2d:ea:
         06:b6:11:bc:bb:3a:55:9e:0d:03:1c:08:88:3c:aa:87:39:f9:
         24:f5:12:70
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICDSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjkxRUIxMTAvBgNVBAUTKDlCQzE2OTAwODAyNzcyQkU2MjkyNjBDNEFBRUQ1RjNG
RUY3RUIzRTcwHhcNMjUxMjAyMTc0ODIxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJmMjY2NS04NjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoxdj5XqR7S1JOaiWmprRYiFdSlCoTxFqUwUGzcAgTpcNp9bFr8xD5153Pbm2
cCou4oDmzW7fpxUnJb3DuFEmixabxo8sxImh4cRyEPygVVlxL/dWGS0GcYEvFifQ
LakLAYDRzv7ZyZl9tfXXcjyNLcUbl48SCCCPvTRjwadowsC9o8LLNkptMLsizzUG
J0zXRtWaMAjnIhsC1d5pKNOHqenxLazlkz2LCpUigwkamweUySIem0dY7NWarZX5
3Y8V5AvHO3V1sfy5jzmBikeZXv31HtszEzTCXnOcgmdwOK+uXSLQD9becCcAlybl
5NzCjrceQzj7v8QF+U6xwvCJlwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFCHJg3ei
AMyfHS8AuJE6gaYow2YJMB8GA1UdIwQYMBaAFJvBaQCAJ3K+YpJgxKrtXz/vfrPn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTFFQi81MEVGRTA3NEY3
MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNyNWlrbURFcXUxZlAtOS1z
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL204RnBBSUFuY3I1aWttREVxdTFmUC05LXMtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjkxRUIvNTBFRkUwNzRGNzA1MTFFOUFEQkE0NTFGQzRGOUFFMDIvODI3RDc3NjZB
QUNDMTFFQTgxMTNGNTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E
JjAkMCIEAgABMBwwDAMEABt+3QMEBRt+wDAMAwQCG37kAwQAG37mMA0GCSqGSIb3
DQEBCwUAA4IBAQAexmRhgwYueswovzXmdTWpk1agANQ7MlbBt9l+sk+jQfyjiuLc
oRxH3vcPLOziPDCdXsjMjjXWjI+5vQJsKk4DdqU0VntinYeTEdbNRw2L5L5mKvO8
XH9bJTrEDqpBMG7V+r0AXMnF1KIPI9RorkLVilsAbZMHuP1osVZKn6u6PY42RtcV
Gv1LHg0xfYe3KfCnkWz8fIdTYbXuHpKEcI+R+cI17uBySJ5flN++EZgwmw7IaozR
wW4/+VUDNDDU70RKqOiDP8x+JhjidQjS98xJ19/IvIxtd4dJamKQlgh7o8PUB3us
isHMLeoGthG8uzpVng0DHAiIPKqHOfkk9RJw
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:16 2025 by rpki-client