This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/42D62828962711F0B74FEE0CC4F9AE02.roa
File:                     42D62828962711F0B74FEE0CC4F9AE02.roa (raw, json)
Hash identifier:          sOFNuw5sW5kqAzcrxtAYzYea6PRb3ZLUqxOeG9XFSaA=
Subject key identifier:   17:A9:93:75:9F:56:D4:89:27:39:48:C3:53:BD:2A:C9:28:37:5C:13
Certificate issuer:       /CN=A9199CFF/serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
Certificate serial:       BC
Authority key identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/42D62828962711F0B74FEE0CC4F9AE02.roa
Signing time:             Thu 15 Jan 2026 06:24:26 +0000
ROA not before:           Thu 15 Jan 2026 06:24:26 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     153523
IP address blocks:        2001:df4:e940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl
                          rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199CFF, serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
        Validity
            Not Before: Jan 15 06:24:26 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6968881a-e751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:74:16:6c:0f:00:31:b7:f9:ed:7c:66:c5:40:
                    86:81:e7:8e:45:ce:22:e4:bf:5b:65:0a:2f:1a:d9:
                    2a:de:53:bb:f4:60:63:52:4c:2e:d1:ac:0f:ce:ae:
                    3a:70:01:44:f5:4f:77:82:76:ee:90:9b:d5:af:43:
                    fa:e9:00:4c:50:6d:f4:0f:e6:47:5b:74:d4:e8:1d:
                    ce:c3:5e:29:be:7d:13:f8:5b:95:d3:79:55:b8:7b:
                    a8:b2:c5:ec:5f:e3:58:eb:41:1c:e2:72:52:e1:5c:
                    0c:df:d4:a2:73:7d:fc:ad:40:66:4e:87:01:2b:18:
                    28:a9:29:a9:26:1c:35:c2:a9:5b:aa:c9:06:a4:d6:
                    a5:7a:1f:30:39:55:8f:20:5f:3f:ea:10:6e:99:6f:
                    89:e2:0c:d8:6b:09:59:f0:03:c0:0e:3a:40:10:13:
                    ea:86:f3:b8:da:12:98:00:f0:93:cd:70:db:b3:ed:
                    41:9c:fc:ee:bc:aa:f7:3b:75:7b:aa:7a:dd:16:73:
                    d6:e3:df:3e:e3:af:14:43:a4:2d:ff:25:11:13:8c:
                    42:6a:27:54:65:1c:b9:5a:2d:49:03:08:16:88:41:
                    4b:49:af:87:fd:9c:b9:7e:e6:e4:c1:13:6b:0a:9f:
                    59:8d:c5:70:09:84:79:b1:0a:1f:9b:3c:cd:35:9f:
                    4a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A9:93:75:9F:56:D4:89:27:39:48:C3:53:BD:2A:C9:28:37:5C:13
            X509v3 Authority Key Identifier:
                keyid:50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/42D62828962711F0B74FEE0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:e940::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:08:de:49:c5:11:bf:a5:20:ef:82:af:1d:78:d6:26:be:2f:
         92:ac:67:d8:9d:cb:e3:05:b7:2c:ba:33:38:7c:a0:07:29:a0:
         16:88:27:6c:85:56:cc:e1:7d:64:93:2d:91:0a:73:f2:fe:22:
         2a:c0:9c:2b:53:42:8c:ef:37:f7:ac:b6:da:2c:2c:f2:75:5a:
         de:cc:42:b5:a4:25:f1:94:4b:4e:75:cb:4d:19:68:d4:83:9b:
         fb:9d:cf:67:8d:ba:93:d3:b9:4d:a1:74:0e:b6:ec:ce:de:f6:
         c2:52:78:29:86:cb:53:e3:cd:62:70:da:55:c5:8d:e8:c8:04:
         23:3d:a4:3e:28:2e:dd:f3:4f:d8:91:4b:3f:72:05:4e:f9:7d:
         a8:1e:7d:89:a7:7f:0c:11:6d:40:c7:f7:b7:b3:62:16:c6:5a:
         3f:77:b4:a9:68:d9:03:8b:a2:22:e0:24:15:92:69:f3:9f:80:
         92:41:1d:74:ff:75:17:78:49:00:de:10:b9:99:2c:6d:af:b9:
         36:95:40:21:6e:2d:d5:d0:06:38:84:df:7b:30:2c:96:ec:96:
         5b:40:6c:fc:aa:c1:38:15:6d:16:7b:bc:e3:16:63:cf:64:ae:
         f4:e7:52:b1:a8:40:15:55:76:82:84:40:67:83:36:59:ec:ff:
         8b:27:63:da
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OTlDRkYxMTAvBgNVBAUTKDUwQkE2M0I5M0Y4MjkxMjk1RUU0NzAzMUI5NkI0NUNE
QTVDMjRCMEQwHhcNMjYwMTE1MDYyNDI2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTY4ODgxYS1lNzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8HQWbA8AMbf57XxmxUCGgeeORc4i5L9bZQovGtkq3lO79GBjUkwu0awPzq46
cAFE9U93gnbukJvVr0P66QBMUG30D+ZHW3TU6B3Ow14pvn0T+FuV03lVuHuossXs
X+NY60Ec4nJS4VwM39Sic338rUBmTocBKxgoqSmpJhw1wqlbqskGpNaleh8wOVWP
IF8/6hBumW+J4gzYawlZ8APADjpAEBPqhvO42hKYAPCTzXDbs+1BnPzuvKr3O3V7
qnrdFnPW498+468UQ6Qt/yURE4xCaidUZRy5Wi1JAwgWiEFLSa+H/Zy5fubkwRNr
Cp9ZjcVwCYR5sQofmzzNNZ9KxwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFBepk3Wf
VtSJJzlIw1O9KskoN1wTMB8GA1UdIwQYMBaAFFC6Y7k/gpEpXuRwMblrRc2lwksN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNGRi8yQUUxNkE1OEQ3
RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9VTHBqdVQtQ2tTbGU1SEF4dVd0RnphWENT
dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VMcGp1VC1Da1NsZTVIQXh1V3RGemFYQ1N3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTlDRkYvMkFFMTZBNThEN0UwMTFFRjhCMTczRDJGQzRGOUFFMDIvNDJENjI4Mjg5
NjI3MTFGMEI3NEZFRTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ306UAwDQYJKoZIhvcNAQELBQADggEBAMYI3knFEb+l
IO+Crx141ia+L5KsZ9idy+MFtyy6Mzh8oAcpoBaIJ2yFVszhfWSTLZEKc/L+IirA
nCtTQozvN/esttosLPJ1Wt7MQrWkJfGUS051y00ZaNSDm/udz2eNupPTuU2hdA62
7M7e9sJSeCmGy1PjzWJw2lXFjejIBCM9pD4oLt3zT9iRSz9yBU75fagefYmnfwwR
bUDH97ezYhbGWj93tKlo2QOLoiLgJBWSafOfgJJBHXT/dRd4SQDeELmZLG2vuTaV
QCFuLdXQBjiE33swLJbslltAbPyqwTgVbRZ7vOMWY89krvTnUrGoQBVVdoKEQGeD
Nlns/4snY9o=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:34 2026 by rpki-client