This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa
File:                     00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (raw, json)
Hash identifier:          RDk8brqQwOSnjYaq+zDlbRakXm4WtI5gZfQM2U1Www8=
Subject key identifier:   45:38:76:EB:05:C4:E0:A9:0E:6D:7B:54:AB:20:F5:FD:A1:C1:52:12
Certificate issuer:       /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
Certificate serial:       0146
Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa
Signing time:             Tue 23 Dec 2025 04:24:43 +0000
ROA not before:           Tue 23 Dec 2025 04:24:43 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     131471
IP address blocks:        36.50.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl
                          rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
        Validity
            Not Before: Dec 23 04:24:43 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=694a198b-cab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:f1:25:90:28:16:eb:d4:42:52:7c:ac:0b:
                    60:48:52:ed:41:d8:47:87:b8:95:85:0b:64:a1:34:
                    db:6f:4d:3e:cd:4a:64:6c:69:ed:02:04:ba:9b:a7:
                    82:84:9b:9a:43:47:e6:90:1d:ef:e8:60:16:9f:71:
                    21:0b:c7:b5:91:c6:13:b4:5c:8b:f2:79:e1:13:30:
                    ec:92:f2:fc:df:91:e2:33:2d:73:80:ee:b4:a6:ee:
                    53:fb:35:84:21:e2:ed:a5:c7:f7:69:ef:15:62:2c:
                    d1:61:d6:cc:b8:13:06:91:aa:cc:13:64:e1:38:c8:
                    d6:69:d9:1b:57:66:fa:a6:b4:e6:6c:14:27:0e:97:
                    5c:30:85:e2:d2:62:32:ca:4b:4a:a7:a3:2c:60:11:
                    f8:ce:0c:91:a1:13:55:0e:57:94:33:56:79:23:ee:
                    8d:d9:e9:7a:63:75:99:da:8c:e9:9a:6a:93:39:2e:
                    b9:7e:d2:15:6c:5e:c8:c5:4e:94:fe:f8:73:1b:af:
                    0a:0f:26:ce:7a:32:7b:03:c8:24:f7:f8:3d:c0:94:
                    c4:e4:af:73:e4:77:dc:cb:65:c8:40:fc:0d:5a:c9:
                    81:62:5e:e8:68:62:56:29:21:c5:bb:81:9d:f9:8c:
                    cb:09:54:67:32:8f:16:70:4a:7e:ab:8e:e3:c1:2c:
                    f3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:38:76:EB:05:C4:E0:A9:0E:6D:7B:54:AB:20:F5:FD:A1:C1:52:12
            X509v3 Authority Key Identifier:
                keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:b8:f4:d8:47:1b:9e:52:86:97:31:dc:37:b4:1b:75:e4:80:
         ad:45:25:f2:82:f5:cd:38:f2:7a:e0:77:4b:50:20:74:f6:ec:
         c1:2c:f4:2a:dc:55:0a:f6:3b:97:b2:67:5e:1e:83:f9:d0:d8:
         b7:83:06:bd:fb:bc:b7:ed:cc:ab:97:0c:4b:f0:bf:2a:2c:41:
         49:fd:2f:8b:6c:34:55:5e:62:7a:25:ee:f3:63:35:bd:50:9d:
         a2:7a:b1:5c:5f:3f:1e:27:b0:10:1b:21:84:22:ba:a2:0d:6c:
         ca:d6:ee:29:49:b0:0e:72:50:98:09:cc:3d:6e:2a:8f:ed:f5:
         b9:5b:62:b3:cd:63:fc:b2:b3:7e:26:a8:f1:54:92:7a:c9:c8:
         1d:cc:ce:22:0c:ec:62:12:06:c0:9c:e2:ee:e1:29:e3:20:cf:
         ef:3d:cc:75:58:30:b3:fa:84:cc:0c:f3:3b:29:c4:98:2f:6e:
         54:ec:1d:df:d2:5d:b9:a9:ec:6b:86:01:b5:be:84:83:a1:e4:
         41:18:8a:76:3c:1d:ff:28:a5:46:bf:5c:d2:e6:45:d6:6e:02:
         d3:03:9b:15:d7:34:3b:8e:66:c2:63:26:16:b9:89:19:f8:b5:
         ec:f7:96:14:27:05:53:a7:78:ee:6f:8b:25:7d:a8:aa:50:99:
         60:3f:9d:64
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MkU4MEMxMTAvBgNVBAUTKEZFQkI0Mjc2Njc1QTA0NzU0QTUzNTNENTcwN0U1Nzky
MUNERjQzOTIwHhcNMjUxMjIzMDQyNDQzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTRhMTk4Yi1jYWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoOnxJZAoFuvUQlJ8rAtgSFLtQdhHh7iVhQtkoTTbb00+zUpkbGntAgS6m6eC
hJuaQ0fmkB3v6GAWn3EhC8e1kcYTtFyL8nnhEzDskvL835HiMy1zgO60pu5T+zWE
IeLtpcf3ae8VYizRYdbMuBMGkarME2ThOMjWadkbV2b6prTmbBQnDpdcMIXi0mIy
yktKp6MsYBH4zgyRoRNVDleUM1Z5I+6N2el6Y3WZ2ozpmmqTOS65ftIVbF7IxU6U
/vhzG68KDybOejJ7A8gk9/g9wJTE5K9z5Hfcy2XIQPwNWsmBYl7oaGJWKSHFu4Gd
+YzLCVRnMo8WcEp+q47jwSzzdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEU4dusF
xOCpDm17VKsg9f2hwVISMB8GA1UdIwQYMBaAFP67QnZnWgR1SlNT1XB+V5Ic30OS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTgwQy85QUQ4QjU1NEZC
RkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJIVktVMVBWY0g1WGtoemZR
NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19ydENkbWRhQkhWS1UxUFZjSDVYa2h6ZlE1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkU4MEMvOUFEOEI1NTRGQkZBMTFFRUFFRTVGRTFFQzRGOUFFMDIvMDBBODZBNkNG
QkZEMTFFRTlEODNCRDVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAkMkgwDQYJKoZIhvcNAQELBQADggEBAI249NhHG55Shpcx
3De0G3XkgK1FJfKC9c048nrgd0tQIHT27MEs9CrcVQr2O5eyZ14eg/nQ2LeDBr37
vLftzKuXDEvwvyosQUn9L4tsNFVeYnol7vNjNb1QnaJ6sVxfPx4nsBAbIYQiuqIN
bMrW7ilJsA5yUJgJzD1uKo/t9blbYrPNY/yys34mqPFUknrJyB3MziIM7GISBsCc
4u7hKeMgz+89zHVYMLP6hMwM8zspxJgvblTsHd/SXbmp7GuGAbW+hIOh5EEYinY8
Hf8opUa/XNLmRdZuAtMDmxXXNDuOZsJjJha5iRn4tez3lhQnBVOneO5viyV9qKpQ
mWA/nWQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:11 2026 by rpki-client