This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/260428EC312211EEAF54935BC4F9AE02.roa
File:                     260428EC312211EEAF54935BC4F9AE02.roa (raw, json)
Hash identifier:          hc9wCWP1WEpuKLSMKP8mb2EgyLJQaateqF+mXzUo/B4=
Subject key identifier:   F5:E0:2D:08:16:C2:BF:84:7F:6A:44:9E:BC:D8:33:EE:91:C2:D6:6C
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       25D1
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/260428EC312211EEAF54935BC4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:13:58 +0000
ROA not before:           Fri 02 Jan 2026 16:13:58 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     133581
IP address blocks:        147.50.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9681 (0x25d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jan  2 16:13:58 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957eec6-c7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:5d:31:eb:76:f4:d6:5f:50:29:43:fa:df:
                    69:8a:93:83:fa:5d:aa:2e:bd:33:23:29:cc:c1:c0:
                    d3:5e:56:88:d3:a4:62:15:67:30:6f:8f:a6:18:05:
                    ae:cc:ca:4d:34:c8:f9:55:d5:0a:fe:ed:05:df:8c:
                    d9:c0:29:fa:cc:a1:16:0b:a1:8c:f9:9b:d2:e0:05:
                    c8:cb:7c:c6:02:8c:59:e3:11:b4:03:a9:65:19:4a:
                    51:19:5d:04:77:b4:03:24:54:e3:4a:5d:26:76:19:
                    a5:06:a8:29:92:08:99:fe:28:db:3b:a6:6f:e9:82:
                    99:88:36:18:6c:d9:29:69:dd:b9:2c:ee:78:6e:48:
                    09:99:54:50:d7:72:e3:e4:87:de:ef:ac:14:4a:45:
                    7f:22:64:87:d0:ec:b1:4d:de:2b:b0:a7:16:d9:f4:
                    03:ce:b9:86:20:e5:f5:4e:0c:3b:db:6f:7b:92:df:
                    2a:16:ed:e8:6b:1b:4c:fd:c0:e3:40:7d:09:e4:d9:
                    a1:81:ab:fd:85:a8:42:e0:8b:ee:54:2d:f6:17:30:
                    bc:b9:79:d0:92:f8:fc:f4:bb:46:c6:b4:d0:36:4a:
                    af:79:e6:27:d6:5d:58:78:d5:50:e9:3c:6a:fc:8b:
                    1d:51:68:ce:f9:07:59:a3:79:7a:c7:30:c5:0f:97:
                    e6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E0:2D:08:16:C2:BF:84:7F:6A:44:9E:BC:D8:33:EE:91:C2:D6:6C
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/260428EC312211EEAF54935BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:22:fd:55:fd:86:8d:f0:24:8c:a7:6b:7c:a5:02:60:66:c7:
         56:74:ef:b3:d0:9b:5a:46:25:11:62:0a:0e:ce:af:4c:c9:3a:
         29:17:7a:80:fc:41:85:aa:2b:71:67:c0:60:e3:e5:77:ab:e4:
         3d:01:98:b0:bd:9b:32:21:03:e5:73:01:48:70:12:1b:14:2a:
         b4:d1:e3:53:86:8f:9e:a7:e5:ed:42:f4:dd:a7:1e:23:ef:52:
         52:11:33:7e:34:03:d5:17:9e:e8:79:5f:4e:6d:ce:2e:de:f9:
         28:21:ca:fc:18:c8:b6:2d:f0:d6:8a:11:a5:6b:94:a9:2e:41:
         cf:b2:99:90:ce:c8:fe:c8:40:80:c4:c8:b4:9a:d6:db:ca:9d:
         b8:37:07:76:8a:b1:c8:77:c7:7c:84:11:e7:fb:7a:27:0c:3c:
         e9:19:61:15:b7:a7:41:7b:93:a5:60:c8:16:60:b6:a7:09:f4:
         71:cf:0f:d5:a1:99:ea:0a:e5:5e:8d:7c:cf:6b:02:b9:a2:09:
         56:8a:12:3c:f8:81:27:d5:b2:15:9d:93:4f:d9:f9:06:99:8b:
         99:c2:1a:d3:b5:c6:66:ce:66:1b:4d:2b:86:5d:71:d3:a6:a0:
         60:d9:c2:f3:ba:53:91:cb:6e:6d:36:84:9a:7a:f8:9a:1f:50:
         2e:cc:02:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:41:08 2026 by rpki-client