This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/37DF315640B111F0B139F22BC4F9AE02.roa
File:                     37DF315640B111F0B139F22BC4F9AE02.roa (raw, json)
Hash identifier:          uvXRDLwc1JaYzg5MqW6mAM2HTAORWpCBvskirYBb8Ws=
Subject key identifier:   A3:69:1C:75:3A:EA:AA:35:D5:E0:1B:11:99:A5:DA:46:8E:FB:E2:17
Certificate issuer:       /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial:       06AD
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/37DF315640B111F0B139F22BC4F9AE02.roa
Signing time:             Tue 30 Dec 2025 22:18:42 +0000
ROA not before:           Tue 30 Dec 2025 22:18:42 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9387
IP address blocks:        122.50.0.0/24 maxlen: 24
                          122.50.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
                          rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1709 (0x6ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
        Validity
            Not Before: Dec 30 22:18:42 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69544fc2-c771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:fa:97:e1:75:32:97:04:dc:c5:e3:67:f1:
                    51:46:06:84:91:16:3d:e0:0f:5d:96:7d:30:f8:a6:
                    81:48:95:9f:e0:56:f5:cf:31:a1:59:13:a6:16:40:
                    ca:41:40:94:ac:6e:07:22:70:23:b6:79:0d:be:c8:
                    08:08:f6:e3:1c:7c:5e:8d:79:a2:eb:ec:25:47:02:
                    d6:4e:73:4d:f7:de:ff:3e:4c:f2:44:32:35:aa:96:
                    75:89:59:5e:28:2f:6d:49:65:c1:b1:93:c0:fb:4c:
                    02:c6:5c:a9:99:82:b2:52:7c:e4:80:9a:91:ec:f5:
                    fa:d3:ee:a7:c7:01:9b:ed:02:bf:67:34:d3:73:f9:
                    03:73:f3:7f:46:87:5e:b2:8a:41:d6:78:05:e5:59:
                    c6:2b:34:85:b8:47:74:4a:92:f3:c4:46:99:6c:1e:
                    1d:0f:e1:e8:8a:23:ad:fe:bc:b9:28:8f:92:fe:6b:
                    f8:c5:ee:c5:22:7b:a3:23:d5:db:45:39:4e:7e:19:
                    ff:e1:d5:ce:92:9a:15:e1:f1:63:db:bd:d2:e6:4b:
                    dd:fb:9b:0c:50:91:79:fd:52:6a:18:9b:8b:3a:1d:
                    18:50:9f:0f:70:18:1a:27:86:b8:0f:8f:8d:36:a9:
                    57:1d:61:7d:77:12:7b:24:1d:03:d2:89:b2:9f:ad:
                    17:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:69:1C:75:3A:EA:AA:35:D5:E0:1B:11:99:A5:DA:46:8E:FB:E2:17
            X509v3 Authority Key Identifier:
                keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/37DF315640B111F0B139F22BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.50.0.0/24
                  122.50.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:5b:8d:8f:e1:f2:2f:9a:b8:19:ec:fd:e1:f6:fc:6c:03:ad:
         bc:ba:62:5a:2d:66:b1:a7:be:a4:22:77:38:0b:9a:6c:f4:49:
         94:d5:9e:54:0c:cd:36:2f:3e:21:ec:74:44:7c:8d:88:33:4c:
         7d:af:97:c2:6c:69:1b:77:58:7a:ea:b6:01:2c:1d:87:c2:19:
         72:ef:75:04:a8:d0:84:7c:56:15:2f:2b:1d:ef:9f:96:52:d8:
         77:f0:1a:86:a1:97:95:c3:63:78:e0:7b:9a:49:88:0c:8f:34:
         4f:31:97:da:b3:7e:51:63:45:32:ec:9e:2a:d7:92:be:eb:d7:
         cf:00:ac:74:cb:88:2b:82:da:1d:f1:51:2e:89:e1:04:08:f2:
         ea:ef:26:c5:b9:73:96:86:f7:91:55:5a:f6:33:7c:12:f9:57:
         48:dc:bd:a3:c4:14:4c:3d:6a:9a:95:7f:8c:75:27:8e:5e:7e:
         8e:67:98:8f:d7:db:d0:fb:d0:31:43:52:74:f4:9e:f8:10:40:
         73:8e:29:46:71:12:cf:8e:2a:28:b9:70:d5:6d:48:6b:f8:4e:
         5e:cb:54:b4:82:6b:de:05:10:01:0c:69:d9:9b:83:ec:9c:e6:
         48:f5:6c:66:99:11:cc:7e:a5:e3:c9:16:54:ad:68:c0:70:0b:
         c9:2e:bc:be
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC
NTc3MzQ1NkIwHhcNMjUxMjMwMjIxODQyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU0NGZjMi1jNzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnfv6l+F1MpcE3MXjZ/FRRgaEkRY94A9dln0w+KaBSJWf4Fb1zzGhWROmFkDK
QUCUrG4HInAjtnkNvsgICPbjHHxejXmi6+wlRwLWTnNN997/PkzyRDI1qpZ1iVle
KC9tSWXBsZPA+0wCxlypmYKyUnzkgJqR7PX60+6nxwGb7QK/ZzTTc/kDc/N/Rode
sopB1ngF5VnGKzSFuEd0SpLzxEaZbB4dD+HoiiOt/ry5KI+S/mv4xe7FInujI9Xb
RTlOfhn/4dXOkpoV4fFj273S5kvd+5sMUJF5/VJqGJuLOh0YUJ8PcBgaJ4a4D4+N
NqlXHWF9dxJ7JB0D0omyn60XiwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKNpHHU6
6qo11eAbEZml2kaO++IXMB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4
RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQ4RDkvNTQ4M0JGQjZDOEZCMTFFQkJBNUJBRTUxQzRGOUFFMDIvMzdERjMxNTY0
MEIxMTFGMEIxMzlGMjJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAB6MgADBAB6MgIwDQYJKoZIhvcNAQELBQADggEBAH5bjY/h
8i+auBns/eH2/GwDrby6YlotZrGnvqQidzgLmmz0SZTVnlQMzTYvPiHsdER8jYgz
TH2vl8JsaRt3WHrqtgEsHYfCGXLvdQSo0IR8VhUvKx3vn5ZS2HfwGoahl5XDY3jg
e5pJiAyPNE8xl9qzflFjRTLsnirXkr7r188ArHTLiCuC2h3xUS6J4QQI8urvJsW5
c5aG95FVWvYzfBL5V0jcvaPEFEw9apqVf4x1J45efo5nmI/X29D70DFDUnT0nvgQ
QHOOKUZxEs+OKii5cNVtSGv4Tl7LVLSCa94FEAEMadmbg+yc5kj1bGaZEcx+pePJ
FlStaMBwC8kuvL4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:32:56 2026 by rpki-client