This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/7A3EF584AEAE11F0ADA6ED46C4F9AE02.roa
File:                     7A3EF584AEAE11F0ADA6ED46C4F9AE02.roa (raw, json)
Hash identifier:          nrC//1SC2CUB7PaXGvEH1xifzROZPf1pNQzojBdEYXw=
Subject key identifier:   8B:B4:AC:A0:90:B1:2B:2B:0B:05:50:C9:A4:F9:9D:87:2B:FF:A5:69
Certificate issuer:       /CN=A916BF2B/serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
Certificate serial:       DB
Authority key identifier: FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/7A3EF584AEAE11F0ADA6ED46C4F9AE02.roa
Signing time:             Sun 11 Jan 2026 05:24:15 +0000
ROA not before:           Sun 11 Jan 2026 05:24:15 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137410
IP address blocks:        160.250.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl
                          rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BF2B, serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
        Validity
            Not Before: Jan 11 05:24:15 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696333ff-c8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:60:92:68:21:13:ea:7e:ff:0b:04:1d:d0:
                    56:f5:7a:61:8a:cb:48:bb:77:10:df:89:61:f2:b3:
                    92:37:4c:f3:31:77:b0:79:fa:4a:48:54:ee:08:d3:
                    df:76:2d:69:36:55:e6:80:f5:45:a9:05:f7:77:fa:
                    c6:e1:39:ec:81:f5:e0:28:ef:65:08:88:4b:51:09:
                    a1:0b:af:d3:b0:62:a9:33:e5:50:de:53:57:eb:12:
                    27:ed:3c:a3:da:88:78:d0:2c:8e:7c:90:7c:34:c0:
                    7f:a5:7f:30:ed:73:6b:88:0b:80:54:04:79:78:ae:
                    dd:2b:a7:3b:22:07:f4:a9:81:0e:27:6f:75:ce:9f:
                    ea:be:a5:5d:64:04:5e:84:86:3d:30:2b:93:20:20:
                    27:92:ea:a1:8e:ff:85:dc:74:ee:2d:73:90:23:b9:
                    cb:d6:7d:24:6b:e4:cd:b0:c5:c2:ec:ff:b9:0a:70:
                    a0:a0:9e:d3:7a:b1:5a:fc:24:f6:88:36:b2:0a:7a:
                    b4:55:e2:9c:07:5a:06:b7:69:6a:e5:41:00:c9:02:
                    24:87:6f:33:57:7b:76:f4:e1:15:cf:51:30:64:88:
                    22:d7:0e:15:00:ed:07:03:6a:92:c0:c0:5d:f8:b7:
                    e6:d0:a6:9b:3e:ef:b4:ef:dc:45:2d:9d:97:59:20:
                    4a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B4:AC:A0:90:B1:2B:2B:0B:05:50:C9:A4:F9:9D:87:2B:FF:A5:69
            X509v3 Authority Key Identifier:
                keyid:FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/7A3EF584AEAE11F0ADA6ED46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:21:a0:b2:29:b9:e2:b6:ba:29:e7:a4:f4:aa:31:09:08:39:
         d8:6c:1e:93:ee:ad:12:79:94:6a:fd:00:cf:d3:80:6e:14:77:
         3d:cd:3e:d5:cd:52:80:52:aa:ce:8b:49:aa:50:05:25:db:33:
         a1:46:d1:e1:13:0e:07:8e:df:98:44:57:89:0b:ae:45:56:29:
         c2:af:8a:c9:78:84:37:0f:f1:da:ac:1b:da:b5:c1:e2:3e:03:
         10:c4:1d:04:8c:de:2e:d3:f8:17:4b:cc:5f:67:01:88:54:e5:
         a2:7a:2e:03:97:61:bc:7f:7a:8f:e0:f0:49:bf:0a:b9:a8:fe:
         a4:7a:69:e5:28:d3:f8:83:15:c3:84:f8:42:d5:ab:dd:83:c9:
         8a:bf:96:36:1a:77:42:9b:88:f2:70:84:20:11:59:8c:37:de:
         d2:f1:de:ce:ba:ad:06:3c:d7:9d:f1:01:ee:b7:77:10:49:fd:
         9d:95:f5:9a:32:3d:36:57:d8:12:92:d2:cc:de:ac:03:48:12:
         ed:5d:45:30:d8:91:00:e9:da:d5:90:54:f3:6d:0d:8e:d6:a5:
         2a:0f:ee:9a:67:b7:0d:e8:e9:2d:64:73:76:29:75:9c:d8:63:
         5b:20:37:72:49:06:28:4d:34:7d:5d:05:1d:95:0e:f4:1e:1d:
         fe:25:3e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:23:45 2026 by rpki-client