This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/342A14D6F0E911EEAAAD9A6CC4F9AE02.roa
File:                     342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (raw, json)
Hash identifier:          xBDn9AWjOK6Aqn3gbjUogny+8VL+MgIvem+Ks8BAr84=
Subject key identifier:   43:30:E8:AF:ED:42:9C:53:9D:3F:97:1D:C3:8B:F8:D7:27:D0:10:37
Certificate issuer:       /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Certificate serial:       019E
Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/342A14D6F0E911EEAAAD9A6CC4F9AE02.roa
Signing time:             Sat 03 Jan 2026 03:25:20 +0000
ROA not before:           Sat 03 Jan 2026 03:25:20 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     134204
IP address blocks:        180.94.28.0/24 maxlen: 24
                          180.94.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
                          rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
        Validity
            Not Before: Jan  3 03:25:20 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69588c20-4142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e3:3c:f2:55:ac:0b:35:35:df:57:79:db:55:
                    e5:8b:d2:8c:2e:1b:2e:6d:33:02:6d:d7:1d:0f:59:
                    46:70:29:f1:45:8f:d0:88:c4:59:9f:a2:47:63:8b:
                    20:80:7b:0d:5b:7b:ca:8c:b3:da:a6:22:1a:77:b2:
                    f4:e7:3b:a6:f7:00:34:2a:e3:76:00:af:19:e0:b8:
                    0f:0f:be:7a:d0:bf:5d:66:55:9b:29:05:90:57:38:
                    19:c8:9e:a5:76:ae:42:cc:51:cb:bd:70:63:2b:f4:
                    01:f9:8f:4a:e1:be:2d:43:1f:cb:00:d7:24:30:7d:
                    71:c8:61:d6:9c:28:1a:ce:58:ba:84:56:3d:04:cc:
                    06:5f:69:e9:d9:77:89:9b:a5:52:47:1c:01:d2:a1:
                    b4:8b:c3:24:ae:95:7b:46:19:ba:81:64:f7:5d:18:
                    f0:24:cc:60:81:7c:fb:f6:a5:af:67:b3:2e:b4:b0:
                    48:5b:78:33:bd:62:7e:d7:8c:6b:99:0e:f5:d1:0e:
                    b3:56:70:c5:27:15:b2:0b:43:d2:6e:25:25:da:a3:
                    4c:75:9a:c1:6a:ef:09:13:1c:7c:40:43:96:ae:c0:
                    7e:d7:5c:9e:e2:7c:c6:c1:7c:42:cc:a9:28:36:ce:
                    99:ef:77:57:63:53:fb:72:a1:f3:b1:5c:4c:fa:01:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:30:E8:AF:ED:42:9C:53:9D:3F:97:1D:C3:8B:F8:D7:27:D0:10:37
            X509v3 Authority Key Identifier:
                keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/342A14D6F0E911EEAAAD9A6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:f3:56:fb:44:6b:da:d1:4a:f4:70:d1:c3:60:d9:10:31:15:
         52:bf:c4:a0:49:6e:21:d6:59:74:21:b3:66:ac:ed:00:87:e6:
         16:83:af:30:01:37:a8:d0:4b:66:86:7e:d6:d4:df:b7:4a:d0:
         f3:85:3b:8c:52:73:13:be:8b:2e:d8:65:40:fc:d1:bb:86:24:
         b0:da:b1:6b:43:be:99:2c:2a:39:41:fc:e9:56:64:ea:ee:20:
         d6:21:e1:f1:b0:2e:93:f7:38:f9:b5:94:00:75:e8:f9:74:e6:
         34:38:44:22:8b:e2:d3:e5:ac:41:0f:d8:18:9f:6a:54:60:09:
         3f:68:26:de:ba:e4:90:17:8e:a2:15:8d:9e:02:c0:f1:31:72:
         4d:4a:89:1c:53:13:c6:61:0b:c4:f7:23:79:13:08:1a:16:f6:
         66:b3:fe:04:cc:75:ef:70:47:7d:a9:8f:30:75:9f:bf:d5:4c:
         7f:a1:df:b7:b7:3d:40:03:0b:d6:77:a1:69:6f:e6:a5:e2:fc:
         8e:d5:2b:57:eb:87:0d:3e:c9:f3:b2:cc:37:b8:c7:b3:b9:7c:
         9a:67:dc:ac:96:96:ed:99:b9:55:e8:bb:60:bb:15:ef:ed:d9:
         18:ac:98:e8:08:08:8c:9a:e1:b7:d4:70:08:14:4e:22:05:14:
         e6:c7:fc:53
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MzkzOUYxMTAvBgNVBAUTKDA3MUUyNTg1NUU2QTM1QjNEODA4RkY3QTYwQTA4Qjg3
ODEzNTYzNjIwHhcNMjYwMTAzMDMyNTIwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU4OGMyMC00MTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxuM88lWsCzU131d521Xli9KMLhsubTMCbdcdD1lGcCnxRY/QiMRZn6JHY4sg
gHsNW3vKjLPapiIad7L05zum9wA0KuN2AK8Z4LgPD7560L9dZlWbKQWQVzgZyJ6l
dq5CzFHLvXBjK/QB+Y9K4b4tQx/LANckMH1xyGHWnCgazli6hFY9BMwGX2np2XeJ
m6VSRxwB0qG0i8MkrpV7Rhm6gWT3XRjwJMxggXz79qWvZ7MutLBIW3gzvWJ+14xr
mQ710Q6zVnDFJxWyC0PSbiUl2qNMdZrBau8JExx8QEOWrsB+11ye4nzGwXxCzKko
Ns6Z73dXY1P7cqHzsVxM+gEwMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEMw6K/t
QpxTnT+XHcOL+Ncn0BA3MB8GA1UdIwQYMBaAFAceJYVeajWz2Aj/emCgi4eBNWNi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTM5Ri8yMkU1RjY1NjhB
QzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5iUFlDUDk2WUtDTGg0RTFZ
MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J4NGxoVjVxTmJQWUNQOTZZS0NMaDRFMVkySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzkzOUYvMjJFNUY2NTY4QUMxMTFFRTg1MTNCQjFEQzRGOUFFMDIvMzQyQTE0RDZG
MEU5MTFFRUFBQUQ5QTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAG0XhwwDQYJKoZIhvcNAQELBQADggEBAMbzVvtEa9rRSvRw
0cNg2RAxFVK/xKBJbiHWWXQhs2as7QCH5haDrzABN6jQS2aGftbU37dK0POFO4xS
cxO+iy7YZUD80buGJLDasWtDvpksKjlB/OlWZOruINYh4fGwLpP3OPm1lAB16Pl0
5jQ4RCKL4tPlrEEP2BifalRgCT9oJt665JAXjqIVjZ4CwPExck1KiRxTE8ZhC8T3
I3kTCBoW9maz/gTMde9wR32pjzB1n7/VTH+h37e3PUADC9Z3oWlv5qXi/I7VK1fr
hw0+yfOyzDe4x7O5fJpn3KyWlu2ZuVXou2C7Fe/t2RismOgICIya4bfUcAgUTiIF
FObH/FM=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:06:00 2026 by rpki-client