This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/317F90C4D61011E996559038C4F9AE02.roa
File:                     317F90C4D61011E996559038C4F9AE02.roa (raw, json)
Hash identifier:          ri3z4lK7/Cjn9aYtGJzE+yJbCg8nQWmv9/jGXfUfKAw=
Subject key identifier:   FF:C9:16:FC:32:F2:6F:6A:D9:AF:1C:2C:45:69:3C:7E:69:4E:4F:3A
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2B1E
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/317F90C4D61011E996559038C4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:13:39 +0000
ROA not before:           Fri 02 Jan 2026 16:13:39 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     45199
IP address blocks:        49.229.51.0/24 maxlen: 24
                          49.231.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11038 (0x2b1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:39 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957eeb3-3ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2d:66:e5:54:e3:fd:98:21:6a:f5:57:0a:c2:
                    58:1e:a9:bf:0d:6d:30:60:19:26:9c:9e:df:ce:75:
                    f6:ce:8b:ab:c2:6e:8b:ed:da:7b:95:13:a9:fe:a9:
                    75:71:35:46:4b:d9:30:bf:ac:e8:c4:55:f8:b1:50:
                    53:c8:1c:ab:a1:99:3c:87:a3:87:d9:5d:87:d5:5a:
                    2b:30:88:cb:5c:97:bd:d5:31:ea:76:05:85:df:3f:
                    12:8f:b5:b4:8a:34:4c:a4:84:45:95:c8:99:5a:b8:
                    c6:f7:d1:bc:aa:56:99:f4:c3:6b:f3:a5:9a:df:14:
                    c8:e2:17:f7:be:4c:a1:81:c0:31:39:32:d7:5c:8d:
                    45:d1:80:07:47:13:39:a9:4c:39:ed:e6:5d:20:cd:
                    84:12:48:47:a1:4f:59:4a:26:16:fb:0a:b0:bb:dd:
                    d4:e8:ca:7c:67:d5:4d:93:60:bf:7c:88:6d:b0:84:
                    4e:f6:03:da:c6:fd:9d:5e:a8:b5:b7:e2:49:12:bb:
                    ad:ba:1f:9e:b1:f0:bc:ae:6c:26:6f:49:c6:38:9f:
                    dc:e4:7e:97:35:ec:8d:cf:0a:b2:a2:15:c6:73:d5:
                    db:17:da:a0:4d:82:47:6b:05:93:64:8e:53:49:e2:
                    5f:b7:de:d0:a8:0e:5f:9c:01:4b:84:2c:7a:2e:6e:
                    ca:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C9:16:FC:32:F2:6F:6A:D9:AF:1C:2C:45:69:3C:7E:69:4E:4F:3A
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/317F90C4D61011E996559038C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.229.51.0/24
                  49.231.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:78:2d:ec:5a:3c:1e:fa:98:11:b6:36:76:11:57:35:7d:c6:
         7b:3b:f3:98:cd:11:c3:7d:e5:fa:a8:97:eb:3f:7c:fd:f5:cf:
         e6:00:63:ec:b1:a9:d5:5f:b0:fe:72:ac:5a:4f:37:99:a0:80:
         9e:2c:50:6d:2a:d3:10:4c:13:46:e8:d0:c8:7c:5d:b1:4c:94:
         8b:57:d9:a6:f6:e6:d7:85:72:42:74:e6:ca:12:ef:93:70:42:
         10:b3:a0:5a:b7:1f:df:14:6d:4a:2a:66:66:cb:f5:8c:e3:50:
         bf:38:d1:1d:89:af:64:18:95:c5:5c:c3:ca:8c:6e:cb:16:5f:
         a6:b0:5f:4d:16:ec:da:b2:dc:2f:99:a1:bc:a1:38:37:24:78:
         40:34:5f:8d:5e:8d:21:45:77:2c:f6:b2:e4:17:6f:a2:95:4c:
         6c:dd:99:2c:78:b9:34:81:f5:b5:d7:6a:e5:37:68:52:8d:f3:
         9a:58:ab:67:15:7e:93:bf:7d:62:5f:0f:ad:90:18:fb:0c:7b:
         e8:c5:63:a6:e7:80:08:82:d4:2c:85:b5:07:be:cf:97:de:a9:
         2a:cc:f4:a2:7d:91:9a:66:d4:d2:9b:27:eb:e4:09:4c:5d:03:
         56:11:d2:a1:3f:18:ee:40:d7:71:ad:e9:02:21:89:d1:34:b9:
         9a:c5:fb:b5
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICKx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzM5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU3ZWViMy0zZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApy1m5VTj/ZghavVXCsJYHqm/DW0wYBkmnJ7fznX2zourwm6L7dp7lROp/ql1
cTVGS9kwv6zoxFX4sVBTyByroZk8h6OH2V2H1VorMIjLXJe91THqdgWF3z8Sj7W0
ijRMpIRFlciZWrjG99G8qlaZ9MNr86Wa3xTI4hf3vkyhgcAxOTLXXI1F0YAHRxM5
qUw57eZdIM2EEkhHoU9ZSiYW+wqwu93U6Mp8Z9VNk2C/fIhtsIRO9gPaxv2dXqi1
t+JJErutuh+esfC8rmwmb0nGOJ/c5H6XNeyNzwqyohXGc9XbF9qgTYJHawWTZI5T
SeJft97QqA5fnAFLhCx6Lm7KXQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP/JFvwy
8m9q2a8cLEVpPH5pTk86MB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvMzE3RjkwQzRE
NjEwMTFFOTk2NTU5MDM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAAx5TMDBAAx57UwDQYJKoZIhvcNAQELBQADggEBAL94Lexa
PB76mBG2NnYRVzV9xns785jNEcN95fqol+s/fP31z+YAY+yxqdVfsP5yrFpPN5mg
gJ4sUG0q0xBME0bo0Mh8XbFMlItX2ab25teFckJ05soS75NwQhCzoFq3H98UbUoq
ZmbL9YzjUL840R2Jr2QYlcVcw8qMbssWX6awX00W7Nqy3C+ZobyhODckeEA0X41e
jSFFdyz2suQXb6KVTGzdmSx4uTSB9bXXauU3aFKN85pYq2cVfpO/fWJfD62QGPsM
e+jFY6bngAiC1CyFtQe+z5feqSrM9KJ9kZpm1NKbJ+vkCUxdA1YR0qE/GO5A13Gt
6QIhidE0uZrF+7U=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:18:31 2026 by rpki-client