This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/2B4804B845B211EF9B812019C4F9AE02.roa
File:                     2B4804B845B211EF9B812019C4F9AE02.roa (raw, json)
Hash identifier:          7myJHOx21EmrbSehPh7RkCKkLis7+2FSJ6PQP14ocMM=
Subject key identifier:   2C:A4:75:00:7D:65:CA:66:CB:48:91:85:CD:88:65:28:57:A9:25:60
Certificate issuer:       /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
Certificate serial:       011A
Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/2B4804B845B211EF9B812019C4F9AE02.roa
Signing time:             Tue 13 Jan 2026 04:23:29 +0000
ROA not before:           Tue 13 Jan 2026 04:23:29 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152317
IP address blocks:        157.10.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl
                          rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED2B, serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
        Validity
            Not Before: Jan 13 04:23:29 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6965c8c1-f9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:4b:ed:ad:18:06:9c:c1:88:ba:cd:a6:34:
                    80:4b:2a:da:98:4f:a7:7f:13:fd:46:e8:93:53:c9:
                    b5:ec:c3:1f:88:80:42:2b:a6:1e:cb:4a:c1:a3:60:
                    12:fe:e1:f4:18:ec:46:a2:20:04:bf:6a:04:1f:74:
                    67:1a:a2:37:ec:3c:73:1c:bc:6f:d4:5f:13:fc:2e:
                    68:3d:09:1e:91:4b:2b:9e:c9:f4:60:3b:d1:12:c8:
                    47:7f:95:55:fa:ae:b1:54:c7:89:e4:e9:e7:37:ed:
                    40:ee:55:23:1c:a1:9c:ab:b4:02:a8:ab:b5:33:3c:
                    f3:21:d9:39:13:32:76:e9:ae:26:e6:7d:b9:f2:07:
                    61:cb:49:d7:79:01:e4:b5:e2:c0:66:9a:1e:cc:21:
                    d2:74:24:f8:3b:a8:5c:f4:04:a6:b6:40:3c:e1:0b:
                    6b:13:b4:71:fa:9b:93:f0:fb:c9:78:37:a7:1f:83:
                    5a:a0:4e:94:d2:61:9e:db:64:be:0a:9f:b6:c1:57:
                    ab:23:02:ea:2c:b7:bd:1d:0b:5f:60:26:e5:0a:ad:
                    d2:4c:0a:19:bd:bc:7e:64:41:6f:0b:8d:70:3c:65:
                    ba:fd:26:3a:fb:7b:b7:18:11:cc:45:23:dd:e3:d8:
                    c6:36:f3:16:17:67:55:80:7f:34:2f:c9:1c:0c:9f:
                    e8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A4:75:00:7D:65:CA:66:CB:48:91:85:CD:88:65:28:57:A9:25:60
            X509v3 Authority Key Identifier:
                keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/2B4804B845B211EF9B812019C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:22:54:9d:f1:05:93:94:8a:5a:26:99:6d:08:aa:85:c1:eb:
         6a:46:41:a6:aa:29:34:f4:da:ae:cc:d2:cb:db:04:85:ec:14:
         a5:b9:3e:39:9e:0d:cd:15:2c:d9:2d:7a:7c:42:37:88:e6:02:
         1d:6d:f4:39:54:dc:2d:e5:0b:56:87:03:fb:9c:86:8b:a3:ba:
         bb:66:55:9a:24:f1:9b:d2:9d:9c:0e:0d:b5:bf:fc:94:7d:a9:
         f6:64:3d:5d:d7:23:e5:69:49:b8:e9:5a:20:16:b3:02:64:32:
         c2:2b:79:4b:01:a3:10:7c:05:c4:ed:63:23:61:06:08:6a:6f:
         5e:78:f6:51:98:d2:73:f7:35:ef:76:8a:cf:aa:5e:d2:16:34:
         82:10:83:66:88:c7:6d:c8:c1:65:8c:7d:3a:f5:61:09:b5:af:
         d4:5c:18:81:db:14:1f:ab:00:86:3b:34:e8:fb:69:b4:0f:2e:
         b8:70:cf:13:f8:2a:18:ad:67:1f:a1:b6:a9:d5:13:6d:87:3c:
         8f:fb:7b:ad:c4:b0:8b:99:8c:71:12:f9:5d:ce:73:5e:71:4e:
         dd:0a:3f:b8:7b:5e:2c:4d:f9:72:06:99:3e:b5:a0:4e:bc:25:
         a1:8b:90:01:b9:94:09:87:e0:5e:70:cc:a0:62:ab:c0:0c:25:
         7e:01:9f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:35 2026 by rpki-client