This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/63A0A458F38811EFB8E2D638C4F9AE02.roa
File:                     63A0A458F38811EFB8E2D638C4F9AE02.roa (raw, json)
Hash identifier:          zjOMdsDmDuosV0bbp05nA/yPr7MRJPB3mZOLmLlgsqA=
Subject key identifier:   2C:04:A1:02:A6:2C:53:C2:7C:FC:EC:D4:3E:CC:6D:44:F2:87:4F:83
Certificate issuer:       /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Certificate serial:       0104
Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/63A0A458F38811EFB8E2D638C4F9AE02.roa
Signing time:             Thu 01 Jan 2026 05:24:01 +0000
ROA not before:           Thu 01 Jan 2026 05:24:01 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     153362
IP address blocks:        160.187.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
                          rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
        Validity
            Not Before: Jan  1 05:24:01 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=695604f1-ae8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9e:a1:bf:88:c7:e6:b3:d4:14:97:a4:bd:d5:
                    e3:ef:7c:c7:1b:44:3e:74:3a:bd:51:ec:90:95:ae:
                    d8:8d:a0:79:7e:50:47:85:0b:c7:2b:47:13:15:de:
                    5d:0b:8e:e6:82:76:82:3f:fb:d2:57:13:11:bb:7b:
                    27:55:e5:fa:1a:37:c2:ab:31:56:6c:4a:8f:07:48:
                    f1:fb:c9:3b:b0:26:e3:17:3c:6a:e3:2c:ec:47:ab:
                    cf:f9:a9:0d:71:66:6a:b0:ec:93:a1:de:99:ee:4e:
                    e2:bb:33:f5:88:2d:c8:7e:47:02:51:85:8b:25:eb:
                    85:94:d3:b4:c5:70:1b:23:0c:97:99:a6:e5:33:4f:
                    70:ef:ca:d0:07:11:76:b2:e0:12:0c:53:fa:f7:2c:
                    f9:e6:d5:02:83:f9:c7:32:9c:e7:f1:48:16:9e:9f:
                    ef:3e:01:c1:62:e2:43:fe:c9:7e:86:ab:39:1e:ce:
                    90:a4:d7:68:45:48:56:3d:d0:f2:fd:d4:47:58:ac:
                    15:e7:fc:bf:b7:fa:2d:4b:4d:0b:95:0f:c7:bd:e7:
                    92:08:b6:6f:6b:47:a3:e2:77:14:f3:a0:64:fc:c5:
                    88:ec:76:be:f3:0e:7d:d1:41:8e:4f:00:69:5b:82:
                    64:97:25:6f:f0:39:fc:8d:93:bb:f0:8d:8d:5d:52:
                    71:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:04:A1:02:A6:2C:53:C2:7C:FC:EC:D4:3E:CC:6D:44:F2:87:4F:83
            X509v3 Authority Key Identifier:
                keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/63A0A458F38811EFB8E2D638C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:7d:de:cb:27:84:2a:b5:82:02:66:4a:8d:a5:5a:2b:be:da:
         5c:e0:73:2c:bb:7d:da:09:e6:1e:cd:f3:c6:ce:86:b3:f0:78:
         ee:42:e7:2c:68:5d:7b:5e:38:b4:29:af:aa:c5:60:55:b9:c2:
         60:48:e0:56:c2:03:08:f6:74:c9:9b:c7:f3:1f:2d:a0:42:d2:
         39:9b:83:68:28:a7:e2:7a:5e:4d:95:d2:bb:ea:31:ab:13:f3:
         67:ad:42:eb:6a:c4:6b:57:74:f4:6e:1c:ee:5e:cc:ac:fd:ab:
         20:ba:2b:0a:ac:9f:c2:5d:d5:d8:d9:8c:10:83:41:bc:c6:ba:
         63:e3:a0:e1:0a:95:1d:f5:9f:27:3e:ba:3b:c2:a6:d5:b0:45:
         61:a3:ec:92:f3:43:41:25:f1:43:c0:16:63:08:67:e3:af:fc:
         7c:e5:ae:d9:8c:17:58:f0:ec:12:91:d9:da:e7:c1:cd:2a:ad:
         16:6a:9b:3f:95:29:29:70:0a:ca:88:8d:b4:e2:cf:1c:ac:57:
         80:ec:ae:0c:53:f9:c0:10:67:01:f3:44:be:f8:f8:5f:2f:5a:
         56:fc:7e:6f:30:9a:4c:08:cd:b7:1b:49:3d:aa:11:6c:29:86:
         3d:38:3b:53:3b:37:9e:a0:55:1e:60:b4:5d:1d:cc:56:90:e4:
         92:3f:41:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:09:20 2026 by rpki-client