This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/069AADE4F66B11F0A47B438A6F6F56BC.roa
File:                     069AADE4F66B11F0A47B438A6F6F56BC.roa (raw, json)
Hash identifier:          Da1dye94VRUQZdY6M6YCRwiJd/Zp6tDRyjrgqoS77MQ=
Subject key identifier:   D0:98:EE:61:D6:FD:86:27:32:3E:0D:9C:7A:40:6E:5E:BC:7D:21:C0
Certificate issuer:       /CN=A9110C8B/serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
Certificate serial:       02
Authority key identifier: 68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/069AADE4F66B11F0A47B438A6F6F56BC.roa
Signing time:             Wed 21 Jan 2026 01:46:38 +0000
ROA not before:           Wed 21 Jan 2026 01:46:38 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154451
IP address blocks:        144.79.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl
                          rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 07:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C8B, serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
        Validity
            Not Before: Jan 21 01:46:38 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69702ffe-08b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f8:4e:98:1f:cb:5e:b4:28:e7:b1:60:3d:69:
                    52:0a:f4:d6:bf:8c:2f:bc:67:19:d7:67:2f:af:8c:
                    53:96:62:38:7f:6c:67:5f:11:a0:fb:55:64:c8:ec:
                    ce:4b:2f:4a:e1:ad:ba:e7:6b:8e:37:31:3b:79:67:
                    b7:07:07:2e:fb:34:cb:87:f1:49:07:ae:3b:8f:3b:
                    77:ee:56:38:8f:16:de:22:77:e4:a4:ee:9c:41:b9:
                    73:ea:67:2c:72:1f:0f:4a:22:63:17:a3:a6:dd:88:
                    ec:e7:2a:81:71:22:04:16:4f:3e:6c:78:2c:e4:b1:
                    d5:d5:41:8d:ff:da:94:e2:56:6e:2c:f2:2d:66:55:
                    04:f8:ff:ce:53:5b:a3:ad:f0:2b:0b:6b:cf:ae:b4:
                    27:87:42:df:27:e0:ca:1c:77:90:1c:d2:9d:a9:18:
                    e3:d7:a2:79:29:f7:a1:00:f9:75:c2:03:54:47:fa:
                    61:03:e2:95:5f:11:f6:ab:de:80:1b:bd:32:71:fd:
                    4a:ba:03:d2:92:87:86:43:eb:9d:f2:78:f4:a3:d2:
                    2e:11:7e:b6:b2:d3:04:b8:03:00:bb:c4:d1:c2:e3:
                    62:22:82:6a:db:95:73:31:a0:15:89:14:0a:0f:59:
                    99:52:f4:c1:3d:ed:e4:26:8f:91:6d:1b:34:b7:6b:
                    ec:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:98:EE:61:D6:FD:86:27:32:3E:0D:9C:7A:40:6E:5E:BC:7D:21:C0
            X509v3 Authority Key Identifier:
                keyid:68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/069AADE4F66B11F0A47B438A6F6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:5e:8e:ff:47:0f:68:fe:13:26:15:2f:b8:2d:de:cf:9a:16:
         4e:fd:a5:69:11:0f:0c:21:0c:1e:6f:bb:6b:ff:f3:12:9c:57:
         f1:e6:c7:d1:3d:66:a1:3a:19:fa:79:af:9e:92:0f:7e:b1:e4:
         c8:89:f4:78:92:3d:3a:c5:98:15:b6:e4:be:c7:d6:ee:17:54:
         e1:86:88:64:8b:51:5f:fa:68:55:e0:ae:0d:7b:12:4f:25:f7:
         ef:df:59:21:af:d8:47:ce:ea:8e:ea:81:75:f9:54:84:26:ed:
         55:52:c6:c9:e5:6d:6e:30:7e:10:66:fb:11:9b:5d:a7:bc:b4:
         5f:5e:60:4a:f3:07:76:95:10:95:95:30:96:d6:0e:bc:c1:28:
         03:47:0e:1b:99:6a:dc:31:b6:04:31:e6:5f:48:aa:5c:03:14:
         61:79:7b:0b:8c:9b:3b:ad:fa:b6:bf:68:5c:54:3f:cf:bc:22:
         47:33:f6:73:91:99:1f:61:87:83:d1:61:ea:0b:83:3b:1e:b1:
         10:a4:ed:0c:92:c7:48:30:5e:ba:ee:fa:e1:4f:46:c8:e3:a0:
         e6:c3:94:66:f9:26:5b:23:95:98:bb:06:68:b4:d2:a9:cc:eb:
         97:9c:68:81:ff:32:8f:d1:cc:99:33:90:fc:4e:2c:dd:0b:27:
         38:65:2d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:41:29 2026 by rpki-client