This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/744F6602B5B511EEACE32B4DC4F9AE02.roa
File:                     744F6602B5B511EEACE32B4DC4F9AE02.roa (raw, json)
Hash identifier:          m21/hJuumO8I3kSMv3Qd+0tnwJZBWnNTyYHWOsCOgQc=
Subject key identifier:   86:5A:E8:D4:6C:CC:F6:C4:CB:14:13:95:6F:8F:21:B4:33:10:C3:EA
Certificate issuer:       /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
Certificate serial:       0173
Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/744F6602B5B511EEACE32B4DC4F9AE02.roa
Signing time:             Mon 05 Jan 2026 03:23:03 +0000
ROA not before:           Mon 05 Jan 2026 03:23:03 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     56304
IP address blocks:        192.156.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl
                          rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FDDD, serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
        Validity
            Not Before: Jan  5 03:23:03 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=695b2e97-948d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ac:cf:b6:f3:01:9b:1d:01:fb:7a:a9:2f:49:
                    5c:e2:2e:4c:90:f7:43:82:b5:6f:92:1c:28:fb:b8:
                    04:88:93:b7:8d:bb:72:99:3b:63:e1:b7:4f:5e:6d:
                    c4:67:ee:1e:5c:23:9b:c3:53:2b:37:c1:74:24:2f:
                    21:6d:b9:e8:31:7d:df:5d:ab:39:19:2d:05:62:2f:
                    89:21:24:1b:05:40:ba:56:1b:f6:8c:ad:93:ab:21:
                    29:1f:97:75:c5:9c:9a:6e:e6:63:ed:ba:62:88:27:
                    b0:1c:2e:79:a9:17:47:39:a3:bf:24:c1:a8:fc:6c:
                    58:a0:bc:62:76:3e:e9:b5:96:3c:4a:e5:12:e0:1e:
                    58:fe:4c:d7:7f:6a:18:2a:a5:e3:34:bb:3d:4b:4e:
                    68:41:a6:95:42:8a:66:26:6d:20:85:18:18:51:21:
                    af:9a:10:1b:ea:e2:ef:6a:0f:81:25:5e:1e:8d:5c:
                    c9:70:bf:5e:56:f2:9f:97:68:43:22:07:2d:23:06:
                    09:7d:97:28:c1:08:a7:37:10:4c:33:88:ad:2f:51:
                    df:7a:06:35:bf:49:2b:7f:df:6d:5c:dc:45:8f:b7:
                    b8:54:76:30:5e:91:7d:97:df:10:d2:2f:50:08:b2:
                    c6:94:9c:55:b8:c8:30:c1:a7:5c:83:91:d5:52:67:
                    87:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5A:E8:D4:6C:CC:F6:C4:CB:14:13:95:6F:8F:21:B4:33:10:C3:EA
            X509v3 Authority Key Identifier:
                keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/744F6602B5B511EEACE32B4DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.156.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:2b:78:3a:8c:00:d4:57:6e:db:8f:e0:5e:99:f5:79:15:5d:
         e1:f8:57:6e:0f:2c:1d:4c:e3:a4:35:ea:d6:11:04:6d:5f:ec:
         03:e6:02:b0:72:e3:19:a6:5b:fb:df:da:20:75:b0:0a:13:7a:
         9e:bd:84:56:02:89:8e:7d:52:1a:35:8e:8e:ae:ef:e7:45:35:
         1b:4e:fa:66:c4:e7:25:27:c8:01:12:57:45:37:a3:c9:b7:a5:
         65:7f:27:d3:ab:84:3c:85:00:32:71:c6:13:60:ff:82:39:98:
         31:4f:41:90:68:7a:22:71:3d:94:71:b5:7a:54:1f:30:61:4c:
         57:6a:73:ca:38:f6:0f:9a:9d:8a:ec:c6:a9:c8:22:3e:b6:6b:
         ec:bc:38:9e:4c:76:90:95:bf:7e:ac:c3:ae:38:fe:10:b6:9e:
         8a:d7:4f:51:ba:6e:9f:bb:06:d5:a1:51:ff:2a:15:84:81:d7:
         de:ae:e3:17:bf:2b:19:ba:ee:f4:17:75:72:18:86:b1:c9:14:
         4e:30:ac:2c:9a:a4:ae:6d:42:33:1c:db:bb:fe:5d:98:3a:1a:
         90:84:12:0b:07:48:30:9e:88:6e:1d:65:57:73:fb:62:64:ad:
         7c:7f:d6:0d:b1:62:b8:90:f8:ee:fd:ca:4f:11:35:b7:ba:9c:
         7a:04:53:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:55:49 2026 by rpki-client