This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/8A9A4734854211EB9DAFD045C4F9AE02.roa
File:                     8A9A4734854211EB9DAFD045C4F9AE02.roa (raw, json)
Hash identifier:          iLKVfXGDFddybQqtKul7ExYA8NJ547TorMyBal+qveI=
Subject key identifier:   03:1A:04:3B:31:52:59:B3:E0:19:87:36:01:8C:E2:BC:72:0D:66:85
Certificate issuer:       /CN=A9175AFD/serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983
Certificate serial:       06D4
Authority key identifier: C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/8A9A4734854211EB9DAFD045C4F9AE02.roa
Signing time:             Sat 10 Jan 2026 22:18:06 +0000
ROA not before:           Sat 10 Jan 2026 22:18:06 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     55861
IP address blocks:        49.143.224.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl
                          rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1748 (0x6d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175AFD, serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983
        Validity
            Not Before: Jan 10 22:18:06 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6962d01e-2ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:02:12:fb:27:8a:2e:b5:7e:eb:a0:f9:97:c5:
                    00:83:ea:89:01:28:ee:fe:30:b2:5d:24:17:d2:ed:
                    e3:8b:a2:54:42:e6:71:86:1a:f7:03:86:a0:79:df:
                    9a:2c:6c:cc:5d:0c:e3:13:69:3f:ef:b9:4f:65:53:
                    bc:03:60:e2:ac:26:58:49:81:2a:a6:0b:7c:4a:a5:
                    11:e5:02:c2:b0:09:6c:27:9d:18:7e:32:f9:70:eb:
                    5b:4b:57:61:5b:11:21:7f:ef:ea:52:c3:cf:16:ad:
                    9f:2d:f6:6e:fb:b2:e0:af:88:9a:4e:c4:7d:5f:95:
                    b4:64:98:e7:9a:c4:0d:35:0b:fa:42:9d:0e:04:8c:
                    cf:d5:73:3a:c2:d5:02:08:f9:8c:f2:ed:e8:cc:36:
                    00:1c:9b:67:35:39:ce:03:6b:4b:33:56:90:4b:8f:
                    eb:f3:36:ca:59:1b:b0:4f:63:c5:9a:4d:ad:29:79:
                    6c:4b:f7:7f:c0:3b:bf:0f:d7:40:72:29:4b:31:b0:
                    cf:a0:0d:6f:b1:01:cd:fa:5f:cd:ad:47:cc:b2:21:
                    10:b7:c3:d0:0e:5b:d8:a0:31:19:f8:28:10:1c:9b:
                    38:75:31:d0:2c:7e:84:43:ca:34:d7:a8:22:9f:42:
                    a5:7f:75:82:d6:6f:bb:01:d6:51:0e:be:e2:ef:86:
                    59:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1A:04:3B:31:52:59:B3:E0:19:87:36:01:8C:E2:BC:72:0D:66:85
            X509v3 Authority Key Identifier:
                keyid:C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/8A9A4734854211EB9DAFD045C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.143.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:d8:c5:7b:2c:0e:a8:dc:89:fa:e7:23:34:bc:53:a1:12:b3:
         bc:a8:17:98:cf:9e:52:44:0b:66:22:f3:6f:51:f2:c7:13:4b:
         d1:83:ba:2f:68:6d:7c:1a:17:ef:ac:35:6f:71:9c:10:9f:40:
         5e:15:6d:d2:ed:1a:1b:a7:5e:c1:35:1b:d8:3a:da:b4:e4:6c:
         91:6d:56:71:f9:9d:50:ab:b8:53:e7:64:35:d8:a4:35:9e:16:
         f3:cd:d9:2f:4b:57:67:4e:f4:2f:62:2e:96:64:8e:0e:47:41:
         f8:23:0c:78:0b:23:06:67:60:0f:f3:f8:72:f6:0b:ef:b8:b6:
         b4:c6:43:21:e2:b1:2a:83:45:61:16:03:c0:c0:47:58:fa:f6:
         fe:dc:0a:7f:50:64:79:b7:16:c3:b5:63:ca:19:89:8f:87:2b:
         c9:a9:8b:33:1a:77:14:83:f2:03:9e:c6:49:01:13:09:57:6c:
         de:f6:e3:f8:64:1d:1a:a1:1f:ca:48:39:ad:9e:94:61:2a:30:
         75:fc:a0:59:a4:1d:db:e3:fa:a7:21:1a:25:84:19:50:62:81:
         85:bb:53:98:6e:d2:6a:cf:ca:ce:f4:bc:34:5a:33:ae:f7:bc:
         91:6d:f2:f0:f7:8e:5c:89:24:1a:4c:52:e4:73:cc:d8:42:23:
         44:bb:6d:5a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NzVBRkQxMTAvBgNVBAUTKEMyQzlEQjRDRDZEMDlGOEE0MUE4RDI5MzFGMEIyQjY2
N0JBMUE5ODMwHhcNMjYwMTEwMjIxODA2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTYyZDAxZS0yZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0QIS+yeKLrV+66D5l8UAg+qJASju/jCyXSQX0u3ji6JUQuZxhhr3A4aged+a
LGzMXQzjE2k/77lPZVO8A2DirCZYSYEqpgt8SqUR5QLCsAlsJ50YfjL5cOtbS1dh
WxEhf+/qUsPPFq2fLfZu+7Lgr4iaTsR9X5W0ZJjnmsQNNQv6Qp0OBIzP1XM6wtUC
CPmM8u3ozDYAHJtnNTnOA2tLM1aQS4/r8zbKWRuwT2PFmk2tKXlsS/d/wDu/D9dA
cilLMbDPoA1vsQHN+l/NrUfMsiEQt8PQDlvYoDEZ+CgQHJs4dTHQLH6EQ8o016gi
n0Klf3WC1m+7AdZRDr7i74ZZAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAMaBDsx
Ulmz4BmHNgGM4rxyDWaFMB8GA1UdIwQYMBaAFMLJ20zW0J+KQajSkx8LK2Z7oamD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUFGRC8xMkFDRjA3Qzg1
MTYxMUVCQjZBRTczNERDNEY5QUUwMi93c25iVE5iUW40cEJxTktUSHdzclpudWhx
WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dzbmJUTmJRbjRwQnFOS1RId3NyWm51aHFZTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzVBRkQvMTJBQ0YwN0M4NTE2MTFFQkI2QUU3MzREQzRGOUFFMDIvOEE5QTQ3MzQ4
NTQyMTFFQjlEQUZEMDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAIxj+AwDQYJKoZIhvcNAQELBQADggEBALfYxXssDqjcifrn
IzS8U6ESs7yoF5jPnlJEC2Yi829R8scTS9GDui9obXwaF++sNW9xnBCfQF4VbdLt
GhunXsE1G9g62rTkbJFtVnH5nVCruFPnZDXYpDWeFvPN2S9LV2dO9C9iLpZkjg5H
QfgjDHgLIwZnYA/z+HL2C++4trTGQyHisSqDRWEWA8DAR1j69v7cCn9QZHm3FsO1
Y8oZiY+HK8mpizMadxSD8gOexkkBEwlXbN724/hkHRqhH8pIOa2elGEqMHX8oFmk
Hdvj+qchGiWEGVBigYW7U5hu0mrPys70vDRaM673vJFt8vD3jlyJJBpMUuRzzNhC
I0S7bVo=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:55:21 2026 by rpki-client