This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/E39F4ED65C2411EEB54C4F43C4F9AE02.roa
File:                     E39F4ED65C2411EEB54C4F43C4F9AE02.roa (raw, json)
Hash identifier:          J9YGptWflbGV2JaXinbDtAZUW1YZRHNJL5vf2fh2XOY=
Subject key identifier:   0F:18:4E:65:66:76:00:5A:F6:8D:94:2A:BA:4E:20:E6:83:D5:7D:E6
Certificate issuer:       /CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF
Certificate serial:       01B8
Authority key identifier: 85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/E39F4ED65C2411EEB54C4F43C4F9AE02.roa
Signing time:             Sat 17 Jan 2026 02:22:20 +0000
ROA not before:           Sat 17 Jan 2026 02:22:20 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138015
IP address blocks:        203.57.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl
                          rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C9E8, serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF
        Validity
            Not Before: Jan 17 02:22:20 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696af25c-de44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:a4:60:42:15:26:ea:4f:e5:26:15:1f:18:
                    f9:0e:ba:5f:ba:07:31:dc:03:bb:21:ef:11:4c:bc:
                    bd:26:88:23:23:f3:69:a4:28:5f:1a:b3:a1:ed:20:
                    49:a0:76:16:e8:77:b0:c3:d6:63:9c:31:19:86:8b:
                    06:8f:2a:75:bd:da:c3:0d:54:61:17:e0:ad:a0:a1:
                    70:c2:af:71:92:9d:61:70:9d:2e:af:00:0a:9e:89:
                    63:cb:c8:0e:dc:c5:44:cd:33:00:0d:7f:9b:d7:2b:
                    0e:01:7f:e2:dd:d6:b0:e9:6e:8b:62:12:1e:6f:ee:
                    2e:26:16:2e:7a:ee:39:5e:ee:0d:36:24:08:d0:79:
                    50:33:e0:dc:de:fc:d7:ab:50:6e:36:19:1a:c1:0f:
                    2c:2e:1a:32:9e:cd:31:ba:88:f1:20:43:c9:06:71:
                    44:0e:00:72:78:6b:2a:5b:87:15:99:89:e5:d4:0a:
                    c4:9c:21:8c:19:52:1e:87:68:5b:92:17:e4:35:40:
                    3a:58:b9:09:aa:63:dc:f6:57:f0:cd:ae:f7:8f:dd:
                    db:3d:d1:e5:5b:8a:bf:f8:01:5e:36:d7:df:98:9a:
                    60:d6:2a:a4:89:58:6c:33:a7:89:63:df:10:47:56:
                    35:14:68:f9:98:4e:a8:1a:12:0d:47:20:48:c8:a2:
                    fa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:18:4E:65:66:76:00:5A:F6:8D:94:2A:BA:4E:20:E6:83:D5:7D:E6
            X509v3 Authority Key Identifier:
                keyid:85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/E39F4ED65C2411EEB54C4F43C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.57.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:5d:e8:7e:4f:10:59:2e:ee:58:b1:dc:e0:3f:06:fc:c0:f4:
         71:38:1c:19:5a:c3:bd:5c:a2:21:a0:e4:2d:39:0a:0b:46:d7:
         68:90:20:a5:ab:8b:3c:6d:e7:fd:47:7b:2f:ea:e0:23:7a:10:
         27:95:f3:9c:b4:40:97:47:3b:18:bd:03:f2:33:85:71:65:b8:
         87:e3:fd:85:56:0d:ce:ce:3d:dc:a6:94:64:34:4d:31:bb:58:
         82:7c:48:22:b4:76:2b:5a:37:79:cb:33:58:ef:d7:ff:fd:e5:
         da:f6:8a:d0:01:1e:f8:43:ef:2b:9e:11:17:52:64:93:15:ed:
         91:18:a8:ad:81:e5:e7:fb:e9:eb:b5:0e:ba:48:37:b3:99:24:
         48:63:72:18:60:b9:36:76:7c:20:6c:38:4a:8f:9f:1d:86:0b:
         55:59:21:cb:55:23:2e:13:33:96:f0:e5:6c:4e:7c:c0:0a:ab:
         80:df:57:3f:da:cb:4a:a8:66:f8:72:01:b8:18:00:0c:ad:20:
         8f:f5:e4:69:27:d2:a2:a4:0a:0c:70:64:36:f2:a7:81:e5:63:
         14:c7:00:cd:2c:85:aa:c0:ec:91:67:5d:6d:6c:a3:3a:cc:9e:
         30:3b:e0:cb:b1:ea:77:1b:34:8d:73:c7:56:73:a8:37:4b:5f:
         d1:bf:91:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:11:30 2026 by rpki-client