This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/B42D2E32421511ECB7A6506EC4F9AE02.roa
File:                     B42D2E32421511ECB7A6506EC4F9AE02.roa (raw, json)
Hash identifier:          7ewoR2pA2tPclYOacuDzg5yNW72VsiIy57lD3FMtXvI=
Subject key identifier:   2C:EF:16:5B:8F:6B:B2:EF:4D:09:35:8E:F6:1D:B0:4C:51:48:80:03
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2B0C
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/B42D2E32421511ECB7A6506EC4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:13:22 +0000
ROA not before:           Fri 02 Jan 2026 16:13:22 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     148984
IP address blocks:        27.254.1.0/24 maxlen: 24
                          49.231.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11020 (0x2b0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:22 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957eea2-7992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e8:81:4e:00:32:c2:cd:6c:69:c4:7f:1c:9c:
                    01:f4:7f:5f:a0:d5:65:c0:a2:74:f0:fd:fb:65:97:
                    48:8e:e4:96:24:55:c3:de:52:0a:5b:ec:c1:f0:8c:
                    36:2b:ea:f3:c2:42:1c:a5:8b:48:11:32:92:67:b1:
                    f2:14:be:1f:7f:14:fc:70:dd:a9:e0:b1:49:e3:d3:
                    48:3e:c8:3b:73:e4:04:d7:3f:42:fa:8e:e3:39:b7:
                    ee:16:c6:57:f6:af:51:81:34:df:df:1f:98:64:8b:
                    27:0b:ba:ec:31:4f:29:3a:09:05:99:93:4b:52:0f:
                    db:d1:d9:a6:fd:99:f2:c5:ea:2a:8c:8f:0a:1d:32:
                    9d:c9:43:9c:67:b6:dc:ec:13:e4:b8:cb:51:6e:02:
                    36:4c:c6:0f:13:35:3e:bf:31:02:18:3d:34:da:be:
                    e1:80:da:b4:75:3e:c5:17:fe:38:bf:fa:47:aa:05:
                    be:fe:8e:b1:7e:55:fb:0b:11:54:cd:eb:73:72:4f:
                    ce:1b:fc:81:8b:1f:c8:54:0f:5a:d5:f2:f3:12:a7:
                    8e:ee:ba:72:ea:1b:0d:80:60:42:d2:43:6d:b5:c2:
                    8a:fe:b6:ea:e1:67:42:0e:8e:97:41:b5:49:cc:21:
                    e3:7f:fb:49:73:37:e9:ff:f8:ba:f9:9b:59:42:e6:
                    b4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EF:16:5B:8F:6B:B2:EF:4D:09:35:8E:F6:1D:B0:4C:51:48:80:03
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/B42D2E32421511ECB7A6506EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.1.0/24
                  49.231.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:cb:98:0b:79:10:26:d3:26:4d:3b:59:6e:32:17:34:73:61:
         44:f7:36:4d:84:69:00:ff:55:e1:5b:05:2c:fa:dd:a3:90:d8:
         f7:c8:68:f0:f0:15:42:e0:fd:37:c5:c2:fa:f9:1b:0f:cc:11:
         78:3f:6b:6c:6f:87:c3:3e:c7:9c:cb:84:ad:5e:04:68:6b:37:
         dc:05:3d:ad:15:92:0d:4c:ad:3c:39:96:e5:3c:a6:65:de:11:
         39:2f:cd:32:42:04:b6:c0:34:40:b5:24:84:6c:9c:4e:34:ad:
         e0:da:c5:58:e6:fa:30:54:30:cf:79:3e:f6:f5:51:81:e6:93:
         7f:b4:57:44:64:af:d0:7b:1d:16:0a:23:46:3f:db:ce:23:0a:
         db:a1:4f:9b:33:8e:5e:ae:46:22:bf:ca:26:4a:30:d9:68:77:
         83:45:5e:51:59:cc:f5:6c:21:da:2d:87:8d:4d:ba:3d:01:22:
         d9:24:ff:2f:0d:e5:2c:e5:c4:02:b4:a3:5f:5a:b3:8f:2b:fd:
         8e:83:0a:0d:8a:05:e9:d8:8f:77:a8:b0:4b:82:f1:45:b9:fe:
         c3:23:c4:76:bc:97:f0:75:59:69:7d:48:79:e6:24:7c:2f:f3:
         fe:5d:c2:f5:e9:c4:5e:8f:26:e0:64:57:bc:5b:80:ed:57:90:
         90:95:19:41
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICKwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU3ZWVhMi03OTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9+iBTgAyws1sacR/HJwB9H9foNVlwKJ08P37ZZdIjuSWJFXD3lIKW+zB8Iw2
K+rzwkIcpYtIETKSZ7HyFL4ffxT8cN2p4LFJ49NIPsg7c+QE1z9C+o7jObfuFsZX
9q9RgTTf3x+YZIsnC7rsMU8pOgkFmZNLUg/b0dmm/ZnyxeoqjI8KHTKdyUOcZ7bc
7BPkuMtRbgI2TMYPEzU+vzECGD002r7hgNq0dT7FF/44v/pHqgW+/o6xflX7CxFU
zetzck/OG/yBix/IVA9a1fLzEqeO7rpy6hsNgGBC0kNttcKK/rbq4WdCDo6XQbVJ
zCHjf/tJczfp//i6+ZtZQua09QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCzvFluP
a7LvTQk1jvYdsExRSIADMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvQjQyRDJFMzI0
MjE1MTFFQ0I3QTY1MDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAAb/gEDBAAx5yswDQYJKoZIhvcNAQELBQADggEBAMHLmAt5
ECbTJk07WW4yFzRzYUT3Nk2EaQD/VeFbBSz63aOQ2PfIaPDwFULg/TfFwvr5Gw/M
EXg/a2xvh8M+x5zLhK1eBGhrN9wFPa0Vkg1MrTw5luU8pmXeETkvzTJCBLbANEC1
JIRsnE40reDaxVjm+jBUMM95Pvb1UYHmk3+0V0Rkr9B7HRYKI0Y/284jCtuhT5sz
jl6uRiK/yiZKMNlod4NFXlFZzPVsIdoth41Nuj0BItkk/y8N5SzlxAK0o19as48r
/Y6DCg2KBenYj3eosEuC8UW5/sMjxHa8l/B1WWl9SHnmJHwv8/5dwvXpxF6PJuBk
V7xbgO1XkJCVGUE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:07 2026 by rpki-client