This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/44CA7E22F0D811EEA8D08633C4F9AE02.roa
File:                     44CA7E22F0D811EEA8D08633C4F9AE02.roa (raw, json)
Hash identifier:          Q2tNsX/bbY1aU3/KQcz3D7iyQHWeVGXI/zhuHVYrdRI=
Subject key identifier:   75:30:B9:ED:7C:49:19:78:3B:02:0B:9E:43:17:B6:B6:0E:42:2A:C4
Certificate issuer:       /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A
Certificate serial:       016F
Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/44CA7E22F0D811EEA8D08633C4F9AE02.roa
Signing time:             Mon 19 Jan 2026 03:23:13 +0000
ROA not before:           Mon 19 Jan 2026 03:23:13 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     152183
IP address blocks:        36.50.147.0/24 maxlen: 24
                          2402:1b60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl
                          rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E53C, serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A
        Validity
            Not Before: Jan 19 03:23:13 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696da3a1-b9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:29:45:00:89:7a:3b:5c:97:c4:9a:a0:d5:b5:
                    b0:68:ff:6d:af:da:a8:08:e2:76:ea:2f:98:99:f9:
                    e0:99:5b:90:4a:cf:d1:f8:41:b6:61:9f:68:f0:b4:
                    aa:85:1e:27:89:32:8d:e4:e3:a3:be:fa:17:2b:6f:
                    66:9b:1d:44:f3:85:74:33:ae:79:02:ee:81:89:a0:
                    c1:24:3d:db:9e:c3:1a:d0:e7:6a:ee:ed:4a:91:18:
                    70:b2:a9:37:75:34:6b:f6:85:d0:15:5e:81:7d:cc:
                    59:15:f8:fb:25:12:84:44:60:66:31:bd:00:3e:f6:
                    ab:b3:73:47:e5:75:6d:9d:c2:1f:1f:c9:f1:3f:27:
                    4b:02:2a:f0:2d:f8:8a:d2:58:14:ac:d8:0a:f1:6d:
                    8e:be:2d:8b:96:21:8a:2b:76:74:4f:45:d6:ee:79:
                    ed:fc:7b:46:c2:ef:31:2e:29:f0:15:40:cf:08:e4:
                    c2:8e:1a:5e:49:d2:36:44:4a:fb:c7:86:4b:94:c5:
                    94:09:81:17:da:db:e0:c8:fc:59:e3:22:a2:73:81:
                    ba:48:1d:75:aa:8b:a7:a5:69:9b:0f:36:9e:35:ae:
                    e2:7e:fc:10:7b:a5:a9:31:9d:e1:cc:88:92:b5:a9:
                    1b:62:c1:7e:66:e0:5c:ac:dc:4d:96:ce:c1:0c:cf:
                    b0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:30:B9:ED:7C:49:19:78:3B:02:0B:9E:43:17:B6:B6:0E:42:2A:C4
            X509v3 Authority Key Identifier:
                keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/44CA7E22F0D811EEA8D08633C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.147.0/24
                IPv6:
                  2402:1b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:98:66:6f:29:1d:83:5c:ad:32:b4:3d:e4:9a:a1:df:dc:f1:
         41:c3:51:b3:f4:52:c9:b6:b4:c3:20:fc:76:59:3a:54:43:66:
         86:90:8d:e7:80:e1:6e:99:67:a3:9c:ff:dc:70:10:65:15:66:
         7a:8b:7c:62:49:fb:04:e8:7d:5d:5f:58:e6:a5:6a:11:d0:da:
         c0:fe:20:ba:11:c0:86:36:34:df:d5:8a:2e:c2:38:a4:41:12:
         e6:15:eb:7a:c3:08:84:f5:7b:15:b6:d1:8e:ac:18:ea:16:70:
         b6:5e:ab:0c:cb:de:4f:d9:48:51:8b:62:d3:ab:ea:3a:97:74:
         ed:55:07:06:db:12:8d:d9:c7:d9:0b:4c:47:85:48:5f:aa:38:
         c2:3e:ce:58:8f:cb:c9:d1:20:81:81:4e:7a:60:38:dd:41:99:
         a5:d5:2d:c5:07:a5:70:49:1c:69:ac:dc:d5:dd:64:ef:07:5e:
         31:31:2c:0e:73:ce:9a:fd:78:5c:76:b3:a4:b6:c5:55:06:3d:
         c7:28:47:03:17:c6:88:76:9e:05:19:33:60:af:99:fe:13:d7:
         95:b0:db:d1:c6:59:23:1e:3f:70:9e:3e:af:6d:c2:e3:d6:28:
         25:17:77:b8:26:d4:d1:7c:10:76:dd:41:f0:ef:02:9b:f1:92:
         89:c4:92:0c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MkU1M0MxMTAvBgNVBAUTKDdFRENFNzE5MjU4QkVERjkwQUE4NkM5QUVCMDhDREQz
MUVFRjU3N0EwHhcNMjYwMTE5MDMyMzEzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZkYTNhMS1iOWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6ClFAIl6O1yXxJqg1bWwaP9tr9qoCOJ26i+YmfngmVuQSs/R+EG2YZ9o8LSq
hR4niTKN5OOjvvoXK29mmx1E84V0M655Au6BiaDBJD3bnsMa0Odq7u1KkRhwsqk3
dTRr9oXQFV6BfcxZFfj7JRKERGBmMb0APvars3NH5XVtncIfH8nxPydLAirwLfiK
0lgUrNgK8W2Ovi2LliGKK3Z0T0XW7nnt/HtGwu8xLinwFUDPCOTCjhpeSdI2REr7
x4ZLlMWUCYEX2tvgyPxZ4yKic4G6SB11qounpWmbDzaeNa7ifvwQe6WpMZ3hzIiS
takbYsF+ZuBcrNxNls7BDM+wfwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFHUwue18
SRl4OwILnkMXtrYOQirEMB8GA1UdIwQYMBaAFH7c5xkli+35CqhsmusIzdMe71d6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy80QkQwRTVGOEQz
N0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdma0txR3lhNndqTjB4N3ZW
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z0em5HU1dMN2ZrS3FHeWE2d2pOMHg3dlYzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkU1M0MvNEJEMEU1RjhEMzdEMTFFRUJBMDVCRDE2QzRGOUFFMDIvNDRDQTdFMjJG
MEQ4MTFFRUE4RDA4NjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAAkMpMwDQQCAAIwBwMFACQCG2AwDQYJKoZIhvcNAQELBQAD
ggEBAJ6YZm8pHYNcrTK0PeSaod/c8UHDUbP0Usm2tMMg/HZZOlRDZoaQjeeA4W6Z
Z6Oc/9xwEGUVZnqLfGJJ+wTofV1fWOalahHQ2sD+ILoRwIY2NN/Vii7COKRBEuYV
63rDCIT1exW20Y6sGOoWcLZeqwzL3k/ZSFGLYtOr6jqXdO1VBwbbEo3Zx9kLTEeF
SF+qOMI+zliPy8nRIIGBTnpgON1BmaXVLcUHpXBJHGms3NXdZO8HXjExLA5zzpr9
eFx2s6S2xVUGPccoRwMXxoh2ngUZM2Cvmf4T15Ww29HGWSMeP3CePq9twuPWKCUX
d7gm1NF8EHbdQfDvApvxkonEkgw=
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:56 2026 by rpki-client