This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/2EA48F06569A11F0A878F309C4F9AE02.roa
File:                     2EA48F06569A11F0A878F309C4F9AE02.roa (raw, json)
Hash identifier:          atF4y4x6fjph0z8TaA7xsjpynHgMOjdasxeIyPYHeK8=
Subject key identifier:   D9:E1:29:3B:0F:3F:D3:4E:D1:D1:B4:77:78:5C:7D:61:5B:F4:AE:B4
Certificate issuer:       /CN=A9184684/serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
Certificate serial:       7E
Authority key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/2EA48F06569A11F0A878F309C4F9AE02.roa
Signing time:             Thu 15 Jan 2026 07:24:33 +0000
ROA not before:           Thu 15 Jan 2026 07:24:33 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149485
IP address blocks:        160.250.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
        Validity
            Not Before: Jan 15 07:24:33 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69689631-9b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8b:6e:a9:49:7c:8c:ae:4f:c7:80:9c:bd:39:
                    ca:cc:f6:0c:e5:56:fc:c7:46:18:ae:4b:dc:05:c1:
                    fa:1b:ab:21:8b:a4:09:6a:b5:11:4b:16:fc:7c:df:
                    06:d9:b1:69:e1:27:89:52:85:8f:4b:91:dc:cb:e4:
                    fe:03:0c:e5:a6:5d:40:2b:74:bf:00:42:39:f7:0a:
                    5b:b6:d6:d1:42:a3:b1:33:5c:fa:df:d9:c2:6e:38:
                    b0:39:83:7c:8b:60:46:a7:d3:7c:6c:00:d6:8f:ac:
                    e0:f0:39:fd:a9:3e:c6:ce:03:09:72:82:45:dc:b4:
                    f4:21:b3:05:ea:20:39:31:b6:da:a6:a2:8a:20:08:
                    85:6c:68:7b:c1:a8:48:c2:4c:7f:e3:f4:84:7b:81:
                    76:d2:1c:ed:e9:0d:35:53:87:83:b6:ed:57:c7:06:
                    22:c5:7b:df:ed:85:19:2a:72:f8:4c:0b:2f:5f:a4:
                    83:26:3a:a9:45:b4:13:47:50:da:a6:90:cc:39:3d:
                    5b:4d:bf:52:e8:52:a9:c2:11:85:3e:7e:ad:87:aa:
                    47:14:2a:7a:33:5c:62:ad:94:00:81:d8:4f:52:f2:
                    11:89:72:19:1b:f5:bd:b6:44:be:99:0f:f0:f9:5e:
                    07:61:44:57:ef:e7:d6:5c:8a:97:b9:04:9e:ab:4f:
                    d2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E1:29:3B:0F:3F:D3:4E:D1:D1:B4:77:78:5C:7D:61:5B:F4:AE:B4
            X509v3 Authority Key Identifier:
                keyid:F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/2EA48F06569A11F0A878F309C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:cb:e8:be:f6:0a:bf:df:a2:f2:38:d3:36:2d:cb:e3:a4:8d:
         91:0d:53:97:d2:7f:da:16:67:4b:46:7e:17:28:b4:f3:e0:ba:
         8c:7a:18:ec:42:c5:8f:28:90:73:63:25:a6:f4:9b:5a:2c:ac:
         6a:58:f2:ea:3f:2e:c4:3d:c6:b2:d8:ca:eb:19:a4:b3:07:f0:
         8f:e0:0f:7a:ba:db:18:1e:89:4d:2b:3b:08:67:e6:12:80:58:
         12:27:8c:e1:d8:e0:70:a3:82:ce:fc:6f:b7:bb:5a:39:f0:f7:
         da:24:82:e2:c5:df:3a:76:79:e7:e0:05:28:a2:a1:7d:51:fd:
         6c:73:d0:93:dc:0a:62:fa:9d:09:a8:e4:9f:3f:e5:b0:0f:0c:
         27:e6:5d:01:c3:15:af:3f:c7:a7:88:b8:4d:bf:bd:95:2e:c1:
         36:07:17:5a:d1:29:a2:03:a5:b3:52:b0:9c:30:a4:25:ee:d9:
         78:88:6c:24:34:ab:61:f8:49:0b:b8:3c:87:9c:a9:5c:2c:b5:
         0a:71:51:dd:f2:c0:40:07:b8:d3:a9:cd:83:c1:03:c2:a4:5e:
         2d:c5:fb:1d:1e:88:1c:b5:b9:0a:b4:70:d3:64:ed:dc:77:b3:
         42:0f:0e:67:1d:8b:26:61:13:94:8b:16:f7:92:63:10:da:55:
         14:bb:67:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:01:56 2026 by rpki-client