This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/749B738AF28F11F095D4F2986B6F56BC.roa
File:                     749B738AF28F11F095D4F2986B6F56BC.roa (raw, json)
Hash identifier:          8X5qEPD3XLdQkKN/BWUJAA+EQzpFrDr+iH35qZux4s0=
Subject key identifier:   38:4F:A3:86:F9:36:BB:D7:02:10:60:2C:BB:23:6F:AA:73:02:DB:F1
Certificate issuer:       /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
Certificate serial:       0D9A
Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/749B738AF28F11F095D4F2986B6F56BC.roa
Signing time:             Fri 16 Jan 2026 03:57:20 +0000
ROA not before:           Fri 16 Jan 2026 03:57:20 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     17502
IP address blocks:        144.48.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl
                          rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3482 (0xd9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
        Validity
            Not Before: Jan 16 03:57:20 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6969b720-4b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8e:7e:73:1e:5c:ce:42:bc:1c:53:d3:12:3d:
                    07:e9:87:a6:84:cc:e4:78:9b:08:04:3d:87:c3:c1:
                    e3:de:0b:3c:01:88:55:ef:c7:7a:c3:14:b0:b7:9f:
                    4d:11:6f:f5:aa:65:98:0f:c6:d7:df:77:c8:58:e3:
                    54:5f:85:31:1b:5f:8b:39:98:71:bb:33:e9:47:c2:
                    c6:5f:37:af:74:9d:f4:03:93:b4:2a:b9:6e:09:3a:
                    5c:45:dd:a9:05:76:d5:02:d4:91:eb:bc:73:17:f2:
                    5b:95:12:02:df:18:12:15:64:40:c8:80:66:a2:bc:
                    04:4e:81:7b:fc:92:56:6b:45:3f:d0:91:75:d0:bf:
                    8d:10:b6:69:d8:79:6e:ef:b5:b3:f6:a5:da:0c:74:
                    f7:6b:ba:8a:e0:e1:cb:b1:98:07:fc:7a:28:31:95:
                    41:1a:ae:5f:bc:db:5f:88:71:e7:ca:5d:12:64:a6:
                    59:9d:8c:22:39:d3:e9:8c:ea:e0:a4:08:b7:98:9a:
                    e9:79:88:87:a5:84:3c:1c:3f:ab:ac:ea:e3:cf:ce:
                    1c:cf:7b:53:f2:15:fd:ad:85:98:c5:5a:25:37:76:
                    c4:7a:ca:29:9e:fe:14:95:d5:cd:20:66:9e:57:b7:
                    0f:a8:3a:59:3b:94:68:2f:6a:85:32:ca:fd:f0:c6:
                    c0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4F:A3:86:F9:36:BB:D7:02:10:60:2C:BB:23:6F:AA:73:02:DB:F1
            X509v3 Authority Key Identifier:
                keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/749B738AF28F11F095D4F2986B6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:3f:bc:60:52:e3:e7:d3:1d:3f:98:9b:96:4e:05:c5:d9:33:
         cb:98:9e:3c:4f:ed:a4:f8:83:c2:53:89:d3:dc:9f:ab:0a:51:
         8d:cc:91:21:e7:06:82:19:58:07:2a:12:71:66:c2:2e:88:7b:
         f2:89:ba:ee:20:68:3f:2b:70:9d:72:50:ac:b4:32:a9:5d:f5:
         60:a3:8b:59:49:4f:94:f6:f2:59:4d:d2:58:2d:09:f6:b6:4c:
         0b:7f:cc:ae:e7:bc:9c:5e:67:8c:0f:79:bb:b6:26:bb:2a:07:
         e4:da:26:f5:12:78:02:45:af:5f:d0:70:2d:0e:45:06:81:d5:
         fa:2c:58:08:db:e2:83:17:26:5a:03:be:af:7b:f0:a9:33:0f:
         eb:a7:e1:07:cb:47:db:c3:40:c6:fc:29:e7:98:63:af:4e:10:
         fe:b9:09:23:82:96:11:10:72:30:b5:35:f7:71:d7:18:43:a1:
         df:6f:70:d3:bd:bd:da:f5:c6:41:4b:d5:b5:3b:9c:ae:fa:37:
         19:ff:12:ad:ac:7c:76:5f:d3:a7:8a:d1:ec:b1:41:51:b0:f1:
         e2:db:87:ad:aa:b8:d3:13:49:85:54:a2:d1:c9:4e:11:62:0b:
         0f:ed:4e:75:f1:49:29:97:52:e9:0b:20:44:ab:40:2e:25:48:
         a0:e6:ba:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:40:08 2026 by rpki-client