This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/8659FCFEB12811EE98786F82C4F9AE02.roa
File:                     8659FCFEB12811EE98786F82C4F9AE02.roa (raw, json)
Hash identifier:          pA2CTOoVDstDIwP9+WcJpg+mmFpi5C2LMeocnNKjKiw=
Subject key identifier:   68:31:16:70:D5:28:BD:0E:97:33:75:FB:2B:02:1D:C2:28:FE:6F:54
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       25D2
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/8659FCFEB12811EE98786F82C4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:13:59 +0000
ROA not before:           Fri 02 Jan 2026 16:13:59 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     133848
IP address blocks:        147.50.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9682 (0x25d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jan  2 16:13:59 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957eec7-a2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8c:d4:46:f4:6e:3f:25:47:67:28:d5:f4:27:
                    96:9e:76:4d:59:13:1e:a1:af:3a:2d:c6:9d:06:c1:
                    df:0a:01:98:d7:99:e6:6b:5f:bb:f8:b9:60:55:81:
                    69:e3:ed:b3:7a:fe:bb:4f:91:64:8e:80:1f:0d:49:
                    51:d3:76:54:11:e3:b5:0e:22:6b:47:d3:4d:da:e5:
                    3d:9d:c1:c7:1f:41:49:69:4e:44:4d:fa:9a:3c:ef:
                    3a:03:c2:3c:9e:b1:93:92:68:00:2b:e6:5e:4f:3d:
                    4f:6e:45:8e:f0:ce:68:f1:0c:2c:9a:52:ea:8a:33:
                    68:a1:46:01:db:b7:33:6b:32:04:cf:86:b4:55:b0:
                    9e:8f:69:16:91:93:d7:1c:f7:01:25:75:a2:c7:34:
                    61:15:2a:52:e9:39:51:41:01:bd:a9:2d:72:50:c7:
                    95:4e:93:69:c2:d3:2a:9a:af:69:c7:4d:43:d7:a6:
                    0a:0d:bb:7c:12:40:44:09:ad:33:9c:96:17:18:8b:
                    f0:07:1f:e4:31:24:b6:af:f9:a8:0a:00:30:4a:e1:
                    8a:3b:0a:0d:21:ae:d8:aa:f2:28:69:1a:f1:82:c9:
                    70:4a:54:a3:cc:2e:13:2d:7b:9b:2f:1a:62:e2:a8:
                    dd:db:0f:47:da:5e:bb:00:b4:e4:8c:99:c6:4e:0c:
                    1b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:31:16:70:D5:28:BD:0E:97:33:75:FB:2B:02:1D:C2:28:FE:6F:54
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/8659FCFEB12811EE98786F82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:e8:45:2c:f7:01:25:19:61:47:e5:35:76:b3:35:85:c2:6b:
         53:7e:ee:a5:b2:ab:3e:7d:bb:34:d9:67:9c:ba:07:54:fd:19:
         84:03:3a:a3:38:3c:12:f9:81:b1:57:2f:f5:60:53:b6:1f:4a:
         c4:7e:2e:2a:a1:cc:cb:4d:1c:34:f9:d0:e6:f3:c5:87:34:6d:
         be:86:bc:91:be:f1:9c:65:fb:22:d7:b3:7b:fa:73:2d:d9:88:
         c3:c1:d7:3b:ef:22:c6:45:0e:29:d0:53:a3:16:b0:eb:93:a7:
         f1:d0:5c:28:ab:61:b5:63:f1:97:d3:6f:db:72:37:f4:29:82:
         f7:eb:23:a6:b2:71:06:59:b6:6a:d4:2f:c3:d8:18:9f:53:7c:
         e0:61:7c:3e:8f:26:ee:c8:a0:4d:be:01:3a:b5:d6:32:58:14:
         f7:6c:46:b2:fc:d2:9a:eb:8e:b2:14:36:84:31:ef:90:14:71:
         b7:3f:b1:cd:db:cb:e4:73:00:92:cc:fc:ae:cc:5c:f0:90:27:
         fc:e6:1d:3d:3f:06:97:0a:4b:28:e2:f4:7a:62:52:cf:eb:a7:
         52:14:16:3b:92:20:59:01:05:67:bf:e0:56:a8:c3:c9:7b:90:
         28:84:e2:3f:5d:45:b2:86:aa:b0:29:86:cd:70:f0:bc:d1:7c:
         5b:f3:81:b8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx
NDhDNkI0RkEwHhcNMjYwMTAyMTYxMzU5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU3ZWVjNy1hMmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3IzURvRuPyVHZyjV9CeWnnZNWRMeoa86LcadBsHfCgGY15nma1+7+LlgVYFp
4+2zev67T5FkjoAfDUlR03ZUEeO1DiJrR9NN2uU9ncHHH0FJaU5ETfqaPO86A8I8
nrGTkmgAK+ZeTz1PbkWO8M5o8QwsmlLqijNooUYB27czazIEz4a0VbCej2kWkZPX
HPcBJXWixzRhFSpS6TlRQQG9qS1yUMeVTpNpwtMqmq9px01D16YKDbt8EkBECa0z
nJYXGIvwBx/kMSS2r/moCgAwSuGKOwoNIa7YqvIoaRrxgslwSlSjzC4TLXubLxpi
4qjd2w9H2l67ALTkjJnGTgwbYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGgxFnDV
KL0OlzN1+ysCHcIo/m9UMB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG
NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0
UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvRDkwMTEyODQzRjRGMTFFNTk1MTJFMDRDQzRGOUFFMDIvODY1OUZDRkVC
MTI4MTFFRTk4Nzg2RjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACTMmIwDQYJKoZIhvcNAQELBQADggEBAAroRSz3ASUZYUfl
NXazNYXCa1N+7qWyqz59uzTZZ5y6B1T9GYQDOqM4PBL5gbFXL/VgU7YfSsR+Liqh
zMtNHDT50ObzxYc0bb6GvJG+8Zxl+yLXs3v6cy3ZiMPB1zvvIsZFDinQU6MWsOuT
p/HQXCirYbVj8ZfTb9tyN/QpgvfrI6aycQZZtmrUL8PYGJ9TfOBhfD6PJu7IoE2+
ATq11jJYFPdsRrL80prrjrIUNoQx75AUcbc/sc3by+RzAJLM/K7MXPCQJ/zmHT0/
BpcKSyji9HpiUs/rp1IUFjuSIFkBBWe/4Faow8l7kCiE4j9dRbKGqrAphs1w8LzR
fFvzgbg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:23:13 2026 by rpki-client