This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/79553296AEAE11F0ADA6ED46C4F9AE02.roa
File:                     79553296AEAE11F0ADA6ED46C4F9AE02.roa (raw, json)
Hash identifier:          VBCefNcBKUF39oXPn5eHCv7kvz+CrU3bK4rLPhu4Q/c=
Subject key identifier:   F5:FB:02:E0:8F:F7:3D:A7:D9:38:06:3A:B4:EE:7B:50:8A:3A:91:B5
Certificate issuer:       /CN=A916BF2B/serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
Certificate serial:       DC
Authority key identifier: FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/79553296AEAE11F0ADA6ED46C4F9AE02.roa
Signing time:             Sun 11 Jan 2026 05:24:17 +0000
ROA not before:           Sun 11 Jan 2026 05:24:17 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     140068
IP address blocks:        160.250.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl
                          rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BF2B, serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
        Validity
            Not Before: Jan 11 05:24:17 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69633401-d5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e2:da:7d:b5:47:de:53:25:07:87:63:23:a6:
                    fb:78:bf:11:63:63:3f:ac:33:2c:30:8a:ff:54:44:
                    f3:13:2b:6c:60:cf:e4:9a:b1:29:10:87:f3:ad:72:
                    c7:a1:5c:e6:c9:83:3e:42:56:a5:47:2c:ce:49:9b:
                    d3:5c:9e:4e:dc:0e:1d:a3:9e:43:98:8e:f7:93:01:
                    11:88:f3:a4:3e:29:28:a7:1b:f6:67:96:3f:66:1b:
                    91:de:89:90:91:da:c7:52:e0:e5:38:0c:8f:d7:df:
                    a4:7a:84:f8:2f:84:fa:a0:69:98:cb:5a:eb:a1:6d:
                    1c:37:64:c1:9a:90:61:73:51:45:1e:b8:30:a8:28:
                    0a:ea:7f:97:f9:2b:81:54:01:d4:46:da:8a:6b:60:
                    e2:01:09:94:2b:71:80:b3:f4:58:d5:0a:67:6e:80:
                    7f:52:f8:68:af:1c:e8:f3:7f:f6:a8:cd:c4:4d:97:
                    f0:bf:7f:1f:02:b7:63:85:95:e4:2e:64:93:05:0c:
                    88:f3:20:3f:d6:ab:21:c1:67:87:67:00:25:5a:fc:
                    7b:79:2f:14:f4:25:86:f3:4f:01:ae:3d:2f:0c:95:
                    3c:7c:86:a6:ad:92:83:92:f9:27:3f:ae:01:76:b1:
                    1a:55:32:1f:b9:31:cc:c9:76:0d:c4:30:a4:e7:f1:
                    44:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FB:02:E0:8F:F7:3D:A7:D9:38:06:3A:B4:EE:7B:50:8A:3A:91:B5
            X509v3 Authority Key Identifier:
                keyid:FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/79553296AEAE11F0ADA6ED46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:7b:1a:a8:10:30:f5:c6:cb:d4:d7:bb:ae:ff:ef:ea:c2:c2:
         19:90:ec:b8:c2:42:4e:1d:65:d8:df:1a:70:27:f6:3f:c3:1d:
         11:90:b9:30:35:48:82:53:37:b7:28:59:47:ef:9e:df:a6:25:
         87:5c:d1:48:e6:cf:c0:e4:02:b0:ee:88:fd:9f:eb:f2:27:60:
         07:f8:95:bf:0a:ed:f2:78:db:db:20:52:b8:fd:8a:09:17:c1:
         1b:11:05:8c:56:09:9d:9a:fc:e0:34:44:fa:ec:99:5e:b6:81:
         8b:70:72:7d:f3:c0:90:a3:bd:2a:53:04:ce:6c:69:a5:21:f3:
         fa:43:04:db:3e:2a:f7:c7:00:99:1f:9a:b8:c9:d6:ab:10:e7:
         a5:ef:b5:dd:26:a5:90:1c:d2:e9:11:5d:b8:c5:0a:33:eb:1f:
         60:cd:74:a1:32:6d:44:e7:2c:dd:c2:67:a7:dd:0b:82:0a:1b:
         45:81:7e:8b:40:19:b8:22:46:50:74:99:9a:d3:04:43:b3:7c:
         31:52:9f:3b:2c:36:5a:41:89:83:94:b0:ff:9a:f3:4c:97:b4:
         37:50:08:e1:f7:54:18:71:6c:e8:1b:98:45:dc:76:56:ab:a0:
         5a:93:37:85:25:9f:06:c0:ed:bf:2f:96:33:b5:da:6a:f6:e2:
         9c:47:01:e8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NkJGMkIxMTAvBgNVBAUTKEZDQzRBNjU3REQ1MzBEOTUzQTJENkYzRjE1OTMyRkZF
MDFGMjkxRDYwHhcNMjYwMTExMDUyNDE3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTYzMzQwMS1kNWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxuLafbVH3lMlB4djI6b7eL8RY2M/rDMsMIr/VETzEytsYM/kmrEpEIfzrXLH
oVzmyYM+QlalRyzOSZvTXJ5O3A4do55DmI73kwERiPOkPikopxv2Z5Y/ZhuR3omQ
kdrHUuDlOAyP19+keoT4L4T6oGmYy1rroW0cN2TBmpBhc1FFHrgwqCgK6n+X+SuB
VAHURtqKa2DiAQmUK3GAs/RY1QpnboB/Uvhorxzo83/2qM3ETZfwv38fArdjhZXk
LmSTBQyI8yA/1qshwWeHZwAlWvx7eS8U9CWG808Brj0vDJU8fIamrZKDkvknP64B
drEaVTIfuTHMyXYNxDCk5/FEoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPX7AuCP
9z2n2TgGOrTue1CKOpG1MB8GA1UdIwQYMBaAFPzEplfdUw2VOi1vPxWTL/4B8pHW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkYyQi80NTlFNjY2RUI3
OEExMUVGQjg3NDI3NkVDNEY5QUUwMi9fTVNtVjkxVERaVTZMVzhfRlpNdl9nSHlr
ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19NU21WOTFURFpVNkxXOF9GWk12X2dIeWtkWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkJGMkIvNDU5RTY2NkVCNzhBMTFFRkI4NzQyNzZFQzRGOUFFMDIvNzk1NTMyOTZB
RUFFMTFGMEFEQTZFRDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACg+sEwDQYJKoZIhvcNAQELBQADggEBAA17GqgQMPXGy9TX
u67/7+rCwhmQ7LjCQk4dZdjfGnAn9j/DHRGQuTA1SIJTN7coWUfvnt+mJYdc0Ujm
z8DkArDuiP2f6/InYAf4lb8K7fJ429sgUrj9igkXwRsRBYxWCZ2a/OA0RPrsmV62
gYtwcn3zwJCjvSpTBM5saaUh8/pDBNs+KvfHAJkfmrjJ1qsQ56Xvtd0mpZAc0ukR
XbjFCjPrH2DNdKEybUTnLN3CZ6fdC4IKG0WBfotAGbgiRlB0mZrTBEOzfDFSnzss
NlpBiYOUsP+a80yXtDdQCOH3VBhxbOgbmEXcdlaroFqTN4UlnwbA7b8vljO12mr2
4pxHAeg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:23:18 2026 by rpki-client