This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F077B26084A511EAB3356318C4F9AE02.roa
File:                     F077B26084A511EAB3356318C4F9AE02.roa (raw, json)
Hash identifier:          D9c+pHqhqa/hKFsD+aGoa2GyWTSCN0/qQ4nA2VrDnvs=
Subject key identifier:   76:97:22:A9:5C:86:E2:74:AB:99:90:5D:7C:D3:D7:15:76:A5:A4:B8
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2AF1
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F077B26084A511EAB3356318C4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:12:54 +0000
ROA not before:           Fri 02 Jan 2026 16:12:53 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132866
IP address blocks:        49.229.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10993 (0x2af1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:12:53 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957ee85-db68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:58:8f:ab:63:c4:ef:58:18:ef:ff:d0:46:e1:
                    45:5e:13:b9:8f:cd:6f:7f:53:bb:53:88:f9:2e:2c:
                    c7:74:64:e0:05:bb:81:8c:6e:c3:57:a3:35:5c:29:
                    30:38:c9:dd:6e:44:9f:57:2a:c6:2c:d6:9a:0d:f1:
                    80:2e:70:b0:85:ab:ed:04:96:29:d1:dc:66:dc:54:
                    24:9e:ea:3a:e9:7c:59:18:98:7f:ca:10:a8:61:67:
                    b8:41:c9:48:98:55:19:b0:88:90:af:c5:e9:1b:cb:
                    76:38:c6:32:0f:4a:ef:fb:96:98:e8:cf:e3:98:4b:
                    59:fa:8c:78:21:47:e6:48:f7:5e:2a:de:26:ef:9a:
                    cc:ac:e5:0e:8e:e1:a6:9f:96:27:63:b3:c5:e8:0e:
                    f2:d2:72:1c:2e:8e:2a:d3:bb:b4:89:b9:65:58:f8:
                    a8:10:03:41:b9:35:63:31:80:62:7d:ee:9e:85:4b:
                    50:b1:74:22:f8:b2:23:86:18:c9:ed:9b:5c:08:9c:
                    42:0b:9e:44:08:11:f4:05:c4:95:94:f0:58:ad:e2:
                    c4:c9:c1:c5:d0:b9:b6:95:cd:8b:09:52:8a:8e:9f:
                    89:d0:e2:4a:10:c5:95:ef:c3:d8:5d:99:a6:28:56:
                    16:12:fa:88:3a:e5:d9:48:96:83:5d:31:dc:79:25:
                    0f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:97:22:A9:5C:86:E2:74:AB:99:90:5D:7C:D3:D7:15:76:A5:A4:B8
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F077B26084A511EAB3356318C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.229.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:d8:4f:e4:ce:b5:d3:90:ec:22:f8:83:76:51:5b:79:fb:0b:
         b9:b1:16:27:b5:16:b2:ce:84:17:01:5c:df:bc:ff:a9:53:dc:
         2d:71:35:53:84:01:62:b1:f7:5f:71:8a:5f:e3:44:09:f9:ac:
         72:41:a2:3b:78:00:14:54:b4:d4:79:aa:b1:3c:9a:70:5c:0c:
         62:d9:bf:88:af:d2:cd:80:24:89:9e:6f:f4:f2:07:b1:02:7e:
         e4:91:35:ae:52:9b:0c:f6:11:e7:ac:18:cc:61:b6:95:4a:2f:
         c0:54:76:79:34:8a:6b:d1:2c:9c:b5:c3:44:5b:6b:47:8d:ac:
         c7:eb:f3:b8:79:d1:0e:3e:27:4d:4b:bb:0e:8c:69:ec:98:ba:
         49:4a:c3:68:75:64:ff:b5:37:a4:7b:71:99:35:d9:d2:03:0b:
         55:5a:8a:72:cf:b1:43:3b:7e:89:27:5a:10:e9:cf:b6:b3:65:
         aa:05:1f:de:5b:a5:a5:bf:72:6a:ee:42:40:1c:51:07:fc:4f:
         59:3f:f8:20:ac:b2:f7:3d:78:c7:21:07:39:7c:fd:85:22:2e:
         49:84:d6:08:f2:fb:3f:32:9d:9e:8f:9e:f2:a8:de:31:e5:6f:
         af:51:3c:c9:c1:5a:80:a3:b2:cc:de:12:a9:be:86:b1:3e:70:
         d9:44:8a:49
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICKvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjYwMTAyMTYxMjUzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU3ZWU4NS1kYjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjFiPq2PE71gY7//QRuFFXhO5j81vf1O7U4j5LizHdGTgBbuBjG7DV6M1XCkw
OMndbkSfVyrGLNaaDfGALnCwhavtBJYp0dxm3FQknuo66XxZGJh/yhCoYWe4QclI
mFUZsIiQr8XpG8t2OMYyD0rv+5aY6M/jmEtZ+ox4IUfmSPdeKt4m75rMrOUOjuGm
n5YnY7PF6A7y0nIcLo4q07u0ibllWPioEANBuTVjMYBife6ehUtQsXQi+LIjhhjJ
7ZtcCJxCC55ECBH0BcSVlPBYreLEycHF0Lm2lc2LCVKKjp+J0OJKEMWV78PYXZmm
KFYWEvqIOuXZSJaDXTHceSUPzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHaXIqlc
huJ0q5mQXXzT1xV2paS4MB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvRjA3N0IyNjA4
NEE1MTFFQUIzMzU2MzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAx5SAwDQYJKoZIhvcNAQELBQADggEBALHYT+TOtdOQ7CL4
g3ZRW3n7C7mxFie1FrLOhBcBXN+8/6lT3C1xNVOEAWKx919xil/jRAn5rHJBojt4
ABRUtNR5qrE8mnBcDGLZv4iv0s2AJImeb/TyB7ECfuSRNa5Smwz2EeesGMxhtpVK
L8BUdnk0imvRLJy1w0Rba0eNrMfr87h50Q4+J01Luw6MaeyYuklKw2h1ZP+1N6R7
cZk12dIDC1VainLPsUM7foknWhDpz7azZaoFH95bpaW/cmruQkAcUQf8T1k/+CCs
svc9eMchBzl8/YUiLkmE1gjy+z8ynZ6PnvKo3jHlb69RPMnBWoCjsszeEqm+hrE+
cNlEikk=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:09 2026 by rpki-client