This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/6A4C0AE89B1111EEADD68539C4F9AE02.roa
File:                     6A4C0AE89B1111EEADD68539C4F9AE02.roa (raw, json)
Hash identifier:          AfvEohb/PfXr6q8VsGeLfKrSZSjnU6OR4EKMkOZ59zw=
Subject key identifier:   91:1B:7D:55:B9:27:D2:63:59:7C:98:99:D8:1A:89:47:AC:52:A4:F6
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       25DC
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/6A4C0AE89B1111EEADD68539C4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:14:08 +0000
ROA not before:           Fri 02 Jan 2026 16:14:08 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     55932
IP address blocks:        147.50.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9692 (0x25dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jan  2 16:14:08 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957eed0-f8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:94:60:cd:a3:46:25:35:2b:2b:f8:ba:dd:11:
                    79:6a:e2:c0:f4:5f:18:8f:f9:d1:82:96:00:97:44:
                    11:ce:e0:e0:0f:2d:71:47:c7:e7:d3:31:b2:8b:12:
                    e1:da:8e:0c:ac:a4:ae:ef:c7:11:1a:cd:28:52:af:
                    cf:bf:d1:1a:a0:5f:61:d5:be:e1:c8:65:55:6f:56:
                    79:56:ad:6b:99:bb:d1:7d:5a:f7:1d:8c:8b:1a:6d:
                    db:ca:44:ac:f0:21:63:b2:77:db:72:59:2d:d8:17:
                    5e:c9:46:51:1c:47:8d:95:81:72:98:c4:34:2c:c2:
                    89:e2:d4:bb:f9:27:51:cf:34:ae:70:8d:85:1a:b7:
                    83:13:69:c1:89:d3:77:7b:41:bd:cf:ef:b2:77:0c:
                    ed:ce:3f:89:c7:92:a7:97:92:47:69:fc:92:80:b1:
                    3b:f5:a6:71:d2:dd:ae:f7:eb:4f:2c:6d:af:3f:ac:
                    80:c7:0e:a8:74:b2:29:97:83:64:2e:32:50:bc:71:
                    55:8c:15:38:c1:cf:f9:5f:f4:22:d4:bb:88:63:b6:
                    01:1b:4e:ce:d3:32:3a:a1:f1:57:a8:44:40:ca:95:
                    64:4c:3a:59:92:9d:81:f1:57:d1:68:bb:36:36:96:
                    a6:37:73:11:1c:c9:05:c9:1e:b8:b6:bf:11:7c:98:
                    62:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1B:7D:55:B9:27:D2:63:59:7C:98:99:D8:1A:89:47:AC:52:A4:F6
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/6A4C0AE89B1111EEADD68539C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:8a:4a:59:9d:20:9c:35:c3:64:6f:a4:f3:9a:ed:01:01:47:
         8c:3a:47:2a:ca:a0:45:97:33:b9:e9:f0:d1:b9:f7:bb:41:29:
         8f:2e:b1:ba:02:9a:99:2a:c7:b3:34:f1:69:12:b3:25:c4:c3:
         1d:b7:65:0c:f0:07:3f:00:54:29:be:f8:ec:39:bb:14:b5:1d:
         77:4a:23:45:58:f5:34:6e:01:ec:87:19:a7:a1:dc:f6:42:0c:
         86:2e:48:26:f7:97:9f:26:91:56:7c:c9:76:ef:b7:4c:10:e5:
         17:86:0a:95:8b:ff:68:b2:03:92:61:71:de:94:c1:93:41:dc:
         ff:cf:fd:dd:f3:08:fc:f0:e8:2d:ff:6a:23:c0:57:55:86:2b:
         a9:25:9e:bc:76:43:17:ac:d0:6d:11:6e:58:fd:ab:14:e7:be:
         49:56:f5:31:2c:cc:af:7c:55:16:2c:5f:10:d6:42:d6:7f:f8:
         84:9f:68:f4:8f:db:2e:e8:34:b4:59:48:73:23:15:a6:fc:ce:
         81:6b:28:08:bb:a7:b6:52:90:f1:c1:b3:51:03:a6:dd:70:0a:
         fb:2c:ea:5f:eb:4e:20:d6:2a:df:20:3e:46:dc:d0:ac:bf:99:
         d0:bf:a7:b6:17:b5:af:5f:18:5c:2b:b2:e8:49:ed:66:b1:ce:
         b8:0b:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:54:33 2026 by rpki-client