This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/6A47064CD60D11E9A0539B2EC4F9AE02.roa
File:                     6A47064CD60D11E9A0539B2EC4F9AE02.roa (raw, json)
Hash identifier:          +B+mrKT8wNV1iGDCXi8kxsuWdgysdgyF8xgfZPxZnzE=
Subject key identifier:   A6:40:44:B2:86:86:09:B7:D7:1C:45:EE:B1:03:0F:83:BE:0C:4F:3C
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2B01
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/6A47064CD60D11E9A0539B2EC4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:13:10 +0000
ROA not before:           Fri 02 Jan 2026 16:13:10 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     137885
IP address blocks:        110.49.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11009 (0x2b01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:10 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957ee96-dd60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:10:39:a1:80:47:c7:cc:37:c0:95:0e:b5:
                    59:74:5d:4b:b8:a4:8f:73:b4:8a:f7:88:a0:fa:26:
                    76:a3:21:d6:80:8e:74:f4:50:d1:5e:a4:ea:56:3d:
                    11:c4:62:8a:af:a5:68:2d:22:fe:c7:be:58:7b:02:
                    00:b8:40:e4:ad:2c:c8:b6:e6:fe:01:1f:42:72:1a:
                    57:41:31:4e:02:32:a3:bf:3a:4a:45:7c:f8:3a:00:
                    3f:70:66:1c:1e:20:d3:70:6b:1a:a2:bf:e6:8a:64:
                    43:25:d3:6a:1d:9e:67:5c:15:61:ff:0e:59:72:52:
                    83:11:8a:e9:0d:03:76:a3:bf:70:1b:93:10:de:90:
                    3e:d6:74:c1:88:04:0e:d0:55:ed:fc:dd:0d:87:ac:
                    26:22:57:18:bc:b5:99:43:a3:29:14:3f:5d:44:b7:
                    26:7b:2b:cc:82:aa:fd:42:4d:de:f3:e8:97:46:94:
                    de:95:b6:b7:4d:28:45:a5:34:63:c2:f8:de:dc:bc:
                    19:bc:61:47:2d:0e:ee:5b:3e:aa:5a:67:50:4b:ed:
                    44:4d:1b:47:39:87:aa:34:87:96:02:64:35:66:43:
                    47:04:b6:21:19:be:85:67:8c:ca:80:39:36:41:cf:
                    46:2e:40:ed:15:6f:30:84:d8:b2:c9:27:d6:c9:68:
                    09:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:40:44:B2:86:86:09:B7:D7:1C:45:EE:B1:03:0F:83:BE:0C:4F:3C
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/6A47064CD60D11E9A0539B2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.49.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:f1:d6:f7:55:ed:a1:37:50:7f:94:e1:c2:11:61:f8:4e:d2:
         af:44:e1:55:77:5b:e7:28:a4:50:43:37:ed:ce:3d:73:76:a5:
         b8:bc:a1:9b:30:e8:e4:38:12:dc:80:ef:23:c3:9a:fa:5b:0a:
         dd:ae:9c:c6:c1:ca:fa:8e:0a:d7:a8:c5:36:0d:98:ea:03:61:
         8a:81:cc:9b:b8:db:15:27:30:ec:2f:86:05:47:59:97:76:c4:
         d3:c9:dd:1b:56:85:b4:e1:53:1d:d3:ea:1f:fd:dc:67:8e:67:
         ba:0f:67:3a:f0:14:1f:98:12:a0:a4:4a:64:f1:3c:7b:09:aa:
         7c:97:0b:72:32:1e:e4:ff:31:ef:e7:8b:0c:3e:12:1a:87:18:
         32:a4:3c:a0:2a:14:ec:43:90:b6:91:a7:40:95:cb:eb:32:b4:
         13:92:79:9b:df:3c:65:0b:d2:58:50:f4:5d:0c:f5:62:b0:d5:
         0e:6a:f6:de:7b:04:98:5c:e5:dc:8c:dd:12:b4:90:9b:14:f8:
         23:80:bf:ff:6a:b2:fe:22:40:73:d6:44:da:b9:fd:02:f0:d4:
         9e:07:fb:df:b9:40:15:16:25:3c:f4:fa:9f:e9:06:fe:d4:f7:
         67:08:52:fa:48:10:8c:8a:ad:12:98:d0:72:71:3b:c4:a1:53:
         f0:19:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:19 2026 by rpki-client