This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/19270196406311ECB405CB27C4F9AE02.roa
File:                     19270196406311ECB405CB27C4F9AE02.roa (raw, json)
Hash identifier:          1UGikhqVC/p0q/nRUe3Y/KltgB00K+avhNJIYpdz6SE=
Subject key identifier:   64:34:12:F6:8F:3D:86:FD:2A:32:36:9B:62:DF:4E:30:77:4E:A2:3B
Certificate issuer:       /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Certificate serial:       052D
Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/19270196406311ECB405CB27C4F9AE02.roa
Signing time:             Thu 08 Jan 2026 23:19:05 +0000
ROA not before:           Thu 08 Jan 2026 23:19:05 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     45753
IP address blocks:        175.41.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
                          rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1325 (0x52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
        Validity
            Not Before: Jan  8 23:19:05 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69603b69-3619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2b:e7:13:8e:3e:eb:5c:65:ee:8b:63:67:9f:
                    44:41:ca:aa:ba:64:8c:58:4b:24:f1:94:87:1d:84:
                    05:8f:ae:c4:83:49:40:c4:fd:63:f9:ef:7c:36:ff:
                    99:33:a9:50:7c:47:c8:c6:9b:ae:67:90:2b:e3:e6:
                    9f:10:ea:e6:08:4d:04:f6:b2:0e:0e:73:5a:ba:60:
                    e8:dd:8d:7d:00:a4:d9:18:86:25:16:6d:89:a6:09:
                    56:a5:6a:f2:cb:70:71:46:9d:0e:5a:2b:dd:16:78:
                    da:c0:d2:63:6f:23:82:9b:1c:e2:65:80:5e:e1:46:
                    8a:ba:9e:8d:11:26:8e:96:9f:bc:a9:8a:59:9d:78:
                    6b:2c:36:b3:db:aa:76:fa:b1:f2:27:40:ef:26:a8:
                    4f:b1:1f:d3:0a:fd:4f:9e:a6:11:e3:78:66:e1:55:
                    9d:64:c7:b6:48:f8:2c:12:48:bf:85:a5:75:94:d5:
                    b7:e7:15:33:cf:08:5f:86:60:0b:57:a6:45:5d:e5:
                    b2:88:9d:d3:29:7c:a8:16:71:8e:3e:7a:b1:08:94:
                    dc:62:e0:30:86:55:c2:4b:ff:f3:e5:66:b1:79:cd:
                    7f:61:e1:19:72:7e:b4:92:fa:94:d4:4c:9a:1c:8f:
                    fb:54:23:84:d4:71:ef:f3:47:03:a6:9f:c8:9b:b4:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:34:12:F6:8F:3D:86:FD:2A:32:36:9B:62:DF:4E:30:77:4E:A2:3B
            X509v3 Authority Key Identifier:
                keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/19270196406311ECB405CB27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.41.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:27:39:97:67:88:31:4d:0f:bc:35:7f:03:58:6b:c4:ab:f8:
         e0:8f:ca:ea:f9:52:b1:2b:3f:6a:a2:0a:0b:14:bb:b6:9f:78:
         0d:0d:26:05:af:89:3d:f6:49:f7:7f:73:bc:93:d1:4f:dc:5a:
         e1:74:1e:51:0e:f5:cf:1b:68:b2:fd:f5:5b:8b:d1:92:38:a3:
         58:37:14:fb:21:7f:0c:0e:a9:89:4f:d2:4d:8b:17:70:6a:ac:
         55:d6:2d:e7:9a:10:d1:8a:93:87:85:34:08:56:de:22:9e:d8:
         12:d3:ca:12:d4:3b:22:d7:45:1b:69:e0:04:ae:b4:a6:44:d6:
         0a:d7:f3:ce:8f:f0:fd:eb:b1:f1:c1:7a:9f:2f:d3:96:f8:99:
         f6:c3:6c:b0:27:eb:52:3b:b5:fa:92:7d:b0:b3:2c:00:e1:3b:
         eb:fd:6e:dd:5d:ee:c2:ef:a0:33:e7:99:e4:d3:b5:56:51:ab:
         64:74:df:09:98:69:c0:d3:14:96:b6:1a:a8:61:cf:01:02:ed:
         27:54:8b:57:c3:d4:37:d9:c9:a0:b1:0a:8c:5d:7b:59:b3:0b:
         d2:8b:22:c5:ac:c4:fb:e8:b0:38:50:d8:7d:dc:e3:36:a4:b6:
         75:6c:94:73:7a:f9:37:e1:d5:75:ac:82:53:16:de:b3:43:be:
         cb:87:4e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:48 2026 by rpki-client