This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/DE11F1B4F74011EE9C9F952CC4F9AE02.roa
File:                     DE11F1B4F74011EE9C9F952CC4F9AE02.roa (raw, json)
Hash identifier:          v7ewDlnHh2ODyUCWWmpizMcwqiBTCpdKV1w/1N2RmQs=
Subject key identifier:   26:75:9F:FA:F4:AF:F9:B6:FC:B6:4C:5B:D3:F0:27:64:C6:D1:92:D6
Certificate issuer:       /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial:       1A2E
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/DE11F1B4F74011EE9C9F952CC4F9AE02.roa
Signing time:             Thu 08 Jan 2026 17:13:53 +0000
ROA not before:           Thu 08 Jan 2026 17:13:53 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     3786
IP address blocks:        118.214.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
                          rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6702 (0x1a2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
        Validity
            Not Before: Jan  8 17:13:53 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=695fe5d1-a333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:55:b9:fb:d7:9e:49:93:ad:70:58:a7:53:
                    26:ba:b1:07:a8:e9:7a:d3:d2:c2:f0:7b:1e:34:aa:
                    da:da:2f:eb:ac:00:9b:64:90:83:c0:75:f7:89:49:
                    84:b5:19:de:71:f4:9e:ce:34:09:ff:33:ac:bf:e9:
                    d8:ef:a9:78:72:bc:42:14:a8:13:ef:da:5e:4e:58:
                    1c:48:9b:4f:e3:ff:93:f2:30:7c:d0:02:ba:33:04:
                    b2:2d:26:d3:ab:b7:4f:c0:d7:c7:43:09:46:f0:b5:
                    e2:57:cf:90:84:10:ba:44:cf:8f:f6:2f:5c:35:56:
                    79:a5:08:20:84:58:f2:c0:cc:d3:17:b2:3a:64:da:
                    42:e1:68:11:4c:2a:19:c8:c0:da:85:30:ee:39:0f:
                    48:46:ad:4e:5e:d6:56:60:a0:69:37:63:58:34:45:
                    62:ec:5b:7b:16:9f:12:69:c4:84:27:73:aa:b4:3f:
                    6a:52:30:78:ad:d1:e5:89:8f:16:b7:5b:22:db:61:
                    bc:55:b6:d7:f9:5a:8f:9d:33:70:f8:e9:7b:30:ae:
                    8d:0b:93:9d:31:41:90:19:a1:99:51:a0:8e:3f:14:
                    b0:b4:02:b3:0e:c9:59:87:8d:4b:35:b5:ac:6c:29:
                    20:cb:8f:2c:18:fd:cb:fd:b3:40:c6:87:85:3b:2e:
                    ea:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:75:9F:FA:F4:AF:F9:B6:FC:B6:4C:5B:D3:F0:27:64:C6:D1:92:D6
            X509v3 Authority Key Identifier:
                keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/DE11F1B4F74011EE9C9F952CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.214.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:33:0b:b8:f4:92:2b:82:9f:cf:41:41:c1:41:a3:75:b4:00:
         f9:0a:2d:28:eb:17:4a:e0:77:f3:74:f7:1d:ac:8d:27:99:1a:
         cb:23:ca:d7:d1:ec:d9:9d:36:e4:dd:f3:62:e4:57:35:21:68:
         fd:83:46:8b:7e:f4:41:93:bc:63:0f:dd:b7:b9:fd:d8:07:b2:
         71:42:ee:da:af:ed:1e:0b:13:9a:75:20:04:9a:33:2d:f5:fe:
         77:ca:d5:e1:3a:6d:ca:d0:1a:fd:c0:2e:c8:2f:45:f1:64:84:
         f4:2c:6a:5a:8e:56:19:f7:2c:e7:19:bf:6d:4a:17:38:ce:dd:
         4e:92:e7:72:dd:14:57:f9:b0:11:93:29:35:2a:15:b6:f9:52:
         12:a6:f9:bc:65:95:d2:28:81:58:c5:99:d0:30:af:b3:d9:85:
         0e:73:99:84:ac:3c:38:82:d3:c5:ef:a6:eb:2b:4d:41:31:75:
         14:47:d7:4a:1a:1d:4f:09:3f:8e:41:ea:3c:39:aa:11:18:c1:
         f0:a6:f1:c5:45:00:b3:5a:56:4b:9d:d4:f9:65:00:56:35:b1:
         a4:94:20:57:9e:7c:f2:fe:f9:45:97:a7:dd:d1:b4:51:d5:a4:
         f5:cc:68:dd:01:13:1a:39:df:2c:52:77:03:52:59:a4:ba:5c:
         97:e3:c9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:55:56 2026 by rpki-client