This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/3B09C758F7A711F0A3A0479F556F56BC.roa
File:                     3B09C758F7A711F0A3A0479F556F56BC.roa (raw, json)
Hash identifier:          N8AFj1uLePJhdyFATB5QcAI5x0zly4OdJrXLB0l1VLY=
Subject key identifier:   41:34:33:BA:F8:E0:1D:28:DB:BF:82:07:E0:C4:AD:52:F6:47:9C:01
Certificate issuer:       /CN=A9197A55/serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
Certificate serial:       06
Authority key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/3B09C758F7A711F0A3A0479F556F56BC.roa
Signing time:             Thu 22 Jan 2026 15:34:44 +0000
ROA not before:           Thu 22 Jan 2026 15:34:44 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     142217
IP address blocks:        151.158.50.0/23 maxlen: 23
                          151.158.50.0/24 maxlen: 24
                          151.158.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl
                          rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
        Validity
            Not Before: Jan 22 15:34:44 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69724394-9482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:ee:b1:9e:11:d9:79:e6:2e:69:0d:99:5b:
                    fc:76:71:ed:7d:bf:f6:15:7b:dd:90:8f:33:a4:de:
                    9e:37:c6:89:c0:0d:9c:16:93:f1:40:d6:27:dc:01:
                    8e:83:ed:f2:ee:df:2e:e0:e9:dc:87:d9:6a:0b:6c:
                    4e:5b:1a:9c:38:bf:53:60:52:80:fe:cc:0e:ff:ba:
                    bd:15:d9:4b:78:1d:ee:73:62:ab:ba:8e:c8:64:f1:
                    ee:37:26:9a:27:ef:cd:d1:26:8f:d5:ac:84:13:14:
                    2a:9a:f0:a5:ed:a5:81:18:77:2b:95:d6:58:88:5c:
                    a1:2f:4e:3b:3c:e4:3f:87:2d:78:78:ad:aa:82:6d:
                    ac:15:84:4e:aa:86:28:d7:c7:cf:5c:42:9d:31:8e:
                    9d:e2:54:c3:0a:b9:6c:95:62:e0:af:9e:2f:aa:91:
                    cf:b2:32:27:d7:4b:84:23:ca:22:fe:b4:fd:07:d6:
                    47:32:6d:0d:59:73:cf:ab:15:a5:9c:80:cf:80:a1:
                    0a:73:87:69:8f:a0:c3:3f:46:75:a8:42:f5:88:b8:
                    be:7a:b7:82:dc:a1:11:70:8d:98:0a:82:2f:ad:9c:
                    f8:10:dd:4b:7f:2d:52:cf:05:74:2e:e6:23:8e:09:
                    5a:28:f5:e2:c4:d7:f3:e2:97:b3:6c:7d:a7:ff:52:
                    37:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:34:33:BA:F8:E0:1D:28:DB:BF:82:07:E0:C4:AD:52:F6:47:9C:01
            X509v3 Authority Key Identifier:
                keyid:C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/3B09C758F7A711F0A3A0479F556F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:81:e2:a2:45:55:a6:90:ae:f3:34:1e:b2:cc:46:a2:01:ab:
         26:09:cd:58:16:c4:09:5d:85:e4:a6:1e:8c:91:51:cd:7d:a7:
         6d:f2:b0:8a:78:f3:ee:d2:45:69:81:91:7d:50:9d:d1:91:8f:
         d6:b4:b6:fc:0c:43:29:8e:ea:77:b7:2a:81:fc:4c:0e:ac:2d:
         37:fe:bf:44:5c:5d:b8:67:9a:4f:cd:40:f0:29:50:a6:61:0a:
         a2:fc:e6:9c:07:06:21:51:bc:ce:3c:2f:30:a2:4d:0f:2d:be:
         55:38:fb:9b:d3:ea:fa:7f:d1:52:f4:ba:72:43:f8:2f:ab:c9:
         16:41:e1:f2:ca:ed:b5:30:b3:94:f4:a9:84:87:da:34:3c:50:
         95:4b:e0:cb:cb:16:2b:0a:e8:18:7e:80:1c:4c:41:b3:99:63:
         da:6c:f7:b4:b7:50:90:9c:e2:b2:64:71:7c:f3:47:41:a1:6e:
         c0:5d:7e:c9:3e:6b:99:4b:8a:d2:13:c0:db:8f:56:92:91:70:
         48:58:e7:04:4f:69:dd:93:17:6d:a4:17:a1:67:f6:99:3f:f7:
         88:a7:a4:d1:29:8e:8f:77:c6:5a:e2:8e:f8:df:8a:a6:9f:79:
         4c:19:5a:a5:e3:fd:05:78:94:68:fe:d8:4a:f7:5b:ed:4e:63:
         34:d3:0a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:42:50 2026 by rpki-client