This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/3BA64F0AF22611F094D5D2AE526F56BC.roa
File:                     3BA64F0AF22611F094D5D2AE526F56BC.roa (raw, json)
Hash identifier:          wg8jmRTolU3onHd+2GNzw64ljuPJwZiU+NTXHkpkAho=
Subject key identifier:   6A:E0:77:F6:67:CE:81:25:EA:AD:3B:E5:F0:92:DC:69:D3:62:DE:97
Certificate issuer:       /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Certificate serial:       12A3
Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/3BA64F0AF22611F094D5D2AE526F56BC.roa
Signing time:             Thu 15 Jan 2026 15:24:07 +0000
ROA not before:           Thu 15 Jan 2026 15:24:07 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     20473
IP address blocks:        66.42.32.0/20 maxlen: 24
                          66.42.48.0/20 maxlen: 24
                          139.180.128.0/19 maxlen: 24
                          139.180.160.0/19 maxlen: 24
                          139.180.192.0/19 maxlen: 24
                          158.247.192.0/18 maxlen: 24
                          167.179.64.0/18 maxlen: 24
                          207.148.64.0/20 maxlen: 24
                          207.148.80.0/21 maxlen: 24
                          207.148.88.0/21 maxlen: 24
                          207.148.96.0/20 maxlen: 24
                          207.148.112.0/22 maxlen: 24
                          207.148.116.0/22 maxlen: 24
                          207.148.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
                          rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4771 (0x12a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
        Validity
            Not Before: Jan 15 15:24:07 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69690697-b055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:c1:92:69:e6:4d:5c:f0:4e:0c:fa:7a:f1:
                    be:d9:61:d1:cd:15:be:dd:d3:52:44:23:1e:58:ce:
                    e9:05:fc:2b:25:68:d2:62:c5:b3:d7:07:fc:38:59:
                    1f:37:c8:86:70:59:83:c6:b6:a8:e8:84:55:13:d5:
                    9b:a4:70:44:e4:90:b7:68:f1:7b:a7:8e:f4:2d:2f:
                    5c:27:d4:de:28:de:c0:33:f2:d0:26:be:f8:54:e8:
                    01:93:fe:0a:06:69:5c:c1:af:a0:e7:b6:e3:99:de:
                    3d:c9:a4:80:b0:bf:01:44:f5:d0:b2:17:16:10:f5:
                    5e:69:dc:fc:20:7b:93:ec:f3:55:e2:18:a3:9f:c9:
                    d5:2c:f5:e7:e5:75:57:f0:a4:1f:53:98:d5:f0:ea:
                    a2:54:3f:27:43:33:8c:f6:4c:13:36:4d:ef:93:39:
                    83:8d:9f:65:58:03:2a:fc:ff:d5:ec:25:33:00:e8:
                    ee:3b:3e:07:6e:c7:20:9e:ae:06:b7:82:93:6f:b1:
                    92:fc:49:9c:d9:f1:87:62:83:c3:5f:12:f9:52:bc:
                    82:8a:46:15:03:3f:66:cc:5f:d9:9f:13:3a:d1:3e:
                    3c:6a:4b:17:85:75:47:8e:29:e2:97:a5:df:76:e8:
                    9c:f0:b1:39:49:78:86:63:c4:bd:6f:8c:5b:3b:b4:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E0:77:F6:67:CE:81:25:EA:AD:3B:E5:F0:92:DC:69:D3:62:DE:97
            X509v3 Authority Key Identifier:
                keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/3BA64F0AF22611F094D5D2AE526F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.42.32.0/19
                  139.180.128.0-139.180.223.255
                  158.247.192.0/18
                  167.179.64.0/18
                  207.148.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         58:3c:8d:47:d7:d2:aa:d8:f5:39:e6:a8:7d:6f:99:86:74:7f:
         b6:5c:1e:5f:fd:38:0e:e6:de:64:09:8e:41:aa:5b:cc:37:3d:
         9b:a0:1b:f7:ca:e7:f9:35:ca:ba:a6:f2:42:b0:11:74:79:e9:
         b3:97:3b:73:89:bb:f0:87:69:f8:f7:b2:5a:59:5b:97:b3:d1:
         13:68:0b:38:20:31:cc:dd:af:54:74:e0:ea:97:14:6a:87:da:
         73:91:db:35:8b:d0:2c:94:49:b6:46:59:07:f0:53:28:a6:40:
         c9:95:a9:2c:f4:3e:92:b3:09:f5:47:06:05:c7:b6:43:ab:7f:
         5d:07:f7:44:6e:58:f7:23:a0:c6:22:35:ce:af:0c:a6:3a:81:
         0c:82:3a:d9:61:4c:e5:92:cf:8d:c2:74:fa:9c:db:e1:32:75:
         7f:0f:d8:78:53:0d:52:57:95:85:d9:c1:47:20:96:e9:ab:35:
         f7:e9:c9:0d:08:23:98:2b:a2:ac:b2:61:46:7a:a3:49:00:c7:
         05:f6:46:51:89:5d:9c:b3:97:8a:56:a3:8b:85:3c:65:f3:30:
         cf:9f:68:88:0f:8c:32:db:9f:45:21:ba:9a:85:08:9a:00:1a:
         f6:b8:d2:e0:8b:a7:ea:87:34:0f:76:be:e4:fd:cf:ab:7d:2e:
         46:55:95:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:49:27 2026 by rpki-client