This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C8E40D62260211EB8B2D4373C4F9AE02.roa
File:                     C8E40D62260211EB8B2D4373C4F9AE02.roa (raw, json)
Hash identifier:          ttezL/jIP5yrPw1cIZytBJVRAnxppeO+gBVX/NTdwgs=
Subject key identifier:   DC:4E:E4:EC:A6:51:A9:97:D4:80:1F:95:56:2B:76:C8:06:43:62:CA
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2B2E
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C8E40D62260211EB8B2D4373C4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:13:55 +0000
ROA not before:           Fri 02 Jan 2026 16:13:55 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9546
IP address blocks:        49.229.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11054 (0x2b2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:55 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957eec3-b54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:1c:1e:78:8f:2c:f7:70:6a:4f:d0:a7:91:
                    32:ce:c8:45:f7:9a:6c:ae:82:26:2a:af:7a:d2:8b:
                    2b:16:67:f7:02:5b:73:cc:24:df:72:fa:c9:99:93:
                    dc:d8:fb:6a:a1:c8:22:11:21:33:1d:08:98:6a:05:
                    61:02:a1:11:bf:0a:84:bd:61:76:46:87:3b:f2:13:
                    79:cc:ad:db:ea:38:52:7e:cb:45:60:26:e4:2e:bb:
                    a4:f0:32:5c:95:09:65:8b:97:cf:86:d1:79:37:fa:
                    c1:09:ce:63:c8:fe:c2:32:1e:d3:f2:ba:58:43:b3:
                    a7:04:7d:39:ce:a5:4a:d9:22:db:17:4c:3b:ca:38:
                    39:50:7f:b5:28:ca:91:c8:9f:4e:83:a1:ad:fc:14:
                    b7:03:67:13:68:8e:5c:fc:4b:0f:36:09:fe:40:d2:
                    7f:27:46:b2:bd:01:be:35:76:01:5d:27:42:ce:9c:
                    41:48:42:c9:1a:26:1b:b8:2c:41:94:70:be:df:fb:
                    a1:95:b4:93:e3:01:d3:d5:c0:91:ab:d8:02:64:98:
                    d4:10:9a:cb:c8:41:47:96:cc:fc:ef:02:b1:56:b8:
                    fc:57:72:c0:0d:89:c4:24:89:a3:a7:27:a3:c5:2e:
                    95:57:c5:7c:59:b8:4b:a3:03:86:93:f3:49:eb:e8:
                    c7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4E:E4:EC:A6:51:A9:97:D4:80:1F:95:56:2B:76:C8:06:43:62:CA
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/C8E40D62260211EB8B2D4373C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.229.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:df:2e:99:66:5a:8c:48:9c:ca:f7:49:6e:31:3e:72:14:83:
         52:18:20:7e:10:d0:c5:b5:f9:38:96:91:ce:25:eb:35:49:96:
         0c:6a:87:d7:b2:ba:43:aa:00:c9:bc:67:d5:04:5d:d6:cc:76:
         78:28:0f:c9:b4:a3:b2:b5:e7:f8:82:68:ca:b0:6b:65:13:ea:
         12:67:4c:f1:b3:4f:04:75:ae:72:93:38:c0:71:6c:44:e5:ee:
         4b:a9:72:ce:f7:b3:0b:2d:46:1a:2f:97:98:6c:08:f1:ef:cf:
         f0:ae:c4:7a:a7:62:f4:59:75:28:cf:30:5d:44:5f:5c:01:1e:
         ff:da:c7:e0:59:f3:65:da:09:71:b0:71:0e:1a:fc:13:df:0e:
         41:d9:be:a6:0a:f2:dd:b7:34:43:bf:98:b6:bb:3d:2b:e0:02:
         95:a0:48:bd:5a:43:66:e1:57:5d:0d:e6:1a:c3:d5:52:e7:0f:
         98:e3:eb:84:dd:08:04:a4:87:5e:d0:2d:df:b1:41:d0:b1:40:
         de:c7:66:da:fe:19:64:36:05:84:04:d8:c1:df:16:02:ce:73:
         58:bb:16:f2:fc:7f:d0:94:d2:84:86:12:b5:01:49:8b:20:f4:
         b5:0c:ca:cb:d0:e9:b9:bc:f8:3d:96:8a:c2:d0:b1:a2:2e:46:
         0d:24:ad:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:22:59 2026 by rpki-client