This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/FA7C5B6C996611EC8E565E60C4F9AE02.roa
File:                     FA7C5B6C996611EC8E565E60C4F9AE02.roa (raw, json)
Hash identifier:          twtkk1WApwH4i+a2+1Hbj/9smQsUe3HWcee2VcpojQs=
Subject key identifier:   96:D2:12:85:CB:5A:18:CC:D2:9A:7E:82:27:E1:33:C4:3B:47:D0:BC
Certificate issuer:       /CN=A915CD63/serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D
Certificate serial:       041A
Authority key identifier: 2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/FA7C5B6C996611EC8E565E60C4F9AE02.roa
Signing time:             Wed 07 Jan 2026 00:19:37 +0000
ROA not before:           Wed 07 Jan 2026 00:19:37 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     25222
IP address blocks:        180.94.48.0/21 maxlen: 21
                          2402:1500:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl
                          rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CD63, serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D
        Validity
            Not Before: Jan  7 00:19:37 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=695da699-a8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:0e:01:e4:1e:ee:a6:ed:94:54:8c:1c:c6:
                    e7:1f:47:3f:a3:31:33:43:c5:44:00:bc:56:bb:bd:
                    b6:0c:68:4e:73:1c:b4:a7:93:72:7b:38:1b:f2:f4:
                    35:12:59:cd:4d:56:f8:32:d6:1f:9a:53:5d:e7:7c:
                    9b:5f:39:e5:46:0c:a7:d8:01:1e:96:f4:e3:c4:ef:
                    66:d6:51:f7:51:94:40:5a:e9:3b:e3:6d:3a:3a:17:
                    ba:51:a1:e9:64:a8:8a:3d:3a:58:10:d2:64:d3:6e:
                    51:3e:f5:96:d8:5d:3c:56:4a:d5:af:19:e8:de:4b:
                    0d:f2:ea:aa:c9:9d:16:66:03:ca:ca:52:5c:31:e3:
                    4c:d6:53:e9:ee:a1:30:a9:c2:91:c2:30:41:27:ef:
                    63:46:d6:40:43:a6:1e:da:f4:47:40:b7:9e:75:72:
                    48:75:9d:38:19:19:8b:e9:d6:15:f1:31:1b:8d:b2:
                    32:23:d8:04:99:46:9a:75:43:46:c9:fe:04:4d:8d:
                    7f:63:5a:84:32:63:f7:72:96:f9:47:7d:39:f9:05:
                    2c:7d:cc:e9:90:2a:6a:2e:1f:ea:1d:f7:3f:a8:93:
                    b6:b2:8d:b8:00:7b:08:ec:d6:38:d9:f1:9a:64:7a:
                    c3:e0:f4:f3:11:5a:50:ee:bf:bc:55:22:26:8f:03:
                    13:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D2:12:85:CB:5A:18:CC:D2:9A:7E:82:27:E1:33:C4:3B:47:D0:BC
            X509v3 Authority Key Identifier:
                keyid:2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/FA7C5B6C996611EC8E565E60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.48.0/21
                IPv6:
                  2402:1500:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         72:d4:c1:44:20:ab:33:92:8e:ea:b6:ef:45:06:dc:a4:8b:d3:
         44:d7:bf:84:ea:f7:e6:22:f9:09:2f:00:dc:e0:a3:29:01:f6:
         97:60:4b:e0:88:18:b0:20:73:a2:7a:96:52:87:9d:da:3a:01:
         16:fb:b8:21:6b:75:48:53:e6:fe:62:8e:45:64:d8:ad:bc:4b:
         b8:da:a0:d7:bd:07:25:cb:5f:33:1b:8e:02:4d:50:0e:45:d7:
         8d:5a:40:8a:ce:16:21:79:ef:8e:8c:ab:28:58:b8:2b:91:91:
         ea:2e:82:d3:9a:6e:db:05:1a:c1:82:b9:39:0f:43:8b:3d:df:
         e9:bb:2d:26:01:53:be:96:9a:21:09:fa:e0:25:4b:e4:5f:00:
         19:fd:12:be:4c:d2:c7:c9:2c:a7:57:e5:6b:94:a6:a4:50:cf:
         b6:9b:b4:e5:3c:77:17:b1:9f:0a:b2:b6:3a:d2:16:ca:e0:b1:
         b5:60:34:1f:b4:42:60:fe:98:be:69:d5:42:25:a2:05:f9:1f:
         fd:68:ae:53:0e:b5:5e:5f:46:e3:fd:2b:55:a2:9d:e0:75:c0:
         23:ab:7e:ec:72:bb:84:1a:73:ad:3c:38:36:db:20:b4:32:ec:
         33:c6:13:d8:e6:9d:ba:79:a9:bd:a1:2c:fe:a8:69:1e:ed:94:
         12:80:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:17:06 2026 by rpki-client