This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/751861108E2B11F0BFDA106EC4F9AE02.roa
File:                     751861108E2B11F0BFDA106EC4F9AE02.roa (raw, json)
Hash identifier:          qwmBjBXdhINRMbu8C02+qQrB2XprMuxYRY2RAr648Jk=
Subject key identifier:   2C:64:67:92:DD:53:AF:76:8F:C5:5B:A4:88:0A:80:C1:CD:AF:C7:23
Certificate issuer:       /CN=A919C068/serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999
Certificate serial:       43
Authority key identifier: D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/751861108E2B11F0BFDA106EC4F9AE02.roa
Signing time:             Sat 03 Jan 2026 07:24:34 +0000
ROA not before:           Sat 03 Jan 2026 07:24:34 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     23865
IP address blocks:        45.135.49.0/24 maxlen: 24
                          45.135.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl
                          rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C068, serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999
        Validity
            Not Before: Jan  3 07:24:34 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6958c432-c128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6f:c0:03:d7:7e:06:b0:b8:20:5c:f1:8a:8d:
                    d2:8a:ab:3f:84:12:7d:f0:b8:62:fb:27:16:bd:53:
                    5d:3c:7b:44:cc:a4:43:b7:e3:6a:50:38:52:64:ed:
                    e1:ff:09:17:14:3f:34:ee:e0:f0:9f:c0:37:fe:68:
                    6f:a3:5d:a4:88:cc:8c:75:72:22:fc:4c:89:24:60:
                    90:86:97:37:04:3f:99:a4:8f:e2:c0:65:9c:2a:ba:
                    74:e7:be:2b:4b:98:b7:4f:20:56:7e:ba:69:03:08:
                    02:1e:ac:36:c7:a5:f0:9f:ce:ff:ff:07:87:4e:bf:
                    f6:a9:51:bc:50:16:99:ac:93:83:a3:35:03:32:4b:
                    70:9f:31:bf:43:15:6f:2d:97:fc:d0:88:4c:26:53:
                    e7:81:c1:5d:76:bf:df:91:d3:88:4a:22:f3:34:bb:
                    73:3b:24:26:23:fd:f2:30:b5:f4:a5:20:81:90:f8:
                    8f:c3:d1:63:68:3c:fb:db:2f:09:e4:fd:dc:85:72:
                    33:5b:5c:5f:47:8a:e0:ad:47:32:41:9b:e4:30:01:
                    a5:0b:57:dc:d1:c6:59:5e:5c:63:3d:60:05:4f:d5:
                    95:14:f1:4d:0a:8f:d7:4d:2f:d9:47:b2:1b:7f:af:
                    e8:b5:a8:e1:b3:46:a0:ac:8b:79:1d:e9:0f:a4:17:
                    c3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:64:67:92:DD:53:AF:76:8F:C5:5B:A4:88:0A:80:C1:CD:AF:C7:23
            X509v3 Authority Key Identifier:
                keyid:D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/751861108E2B11F0BFDA106EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.49.0-45.135.50.255

    Signature Algorithm: sha256WithRSAEncryption
         57:39:76:63:f1:1d:09:8e:e0:d3:8d:15:34:6c:c9:08:ff:73:
         69:ed:97:5f:f3:7d:82:b2:13:a6:05:d3:d0:3f:cc:76:dd:50:
         9c:34:ac:66:67:11:3a:51:9c:57:90:72:95:c4:dc:1f:c5:dd:
         4e:f4:63:b0:5c:b5:e7:b8:ca:a0:a3:25:29:1a:68:dc:97:4a:
         0c:bb:67:1d:0e:10:eb:5c:f0:72:9e:ea:f2:93:a4:fe:4b:d4:
         66:68:cb:74:63:c5:69:c7:62:8d:78:6b:3d:b0:df:fc:d9:ee:
         8c:07:2d:a8:6d:d3:78:b5:06:3f:d0:3d:8b:fa:46:c2:bc:7c:
         b1:2d:d8:55:26:19:ea:84:88:43:a4:a9:8d:20:04:38:05:c5:
         9c:3d:5b:36:71:dd:be:53:1a:cc:1a:60:b5:e9:86:05:ff:11:
         3f:12:cb:f8:79:7f:0a:57:16:11:1d:50:af:b1:7a:2a:d4:e1:
         3a:34:d9:8d:92:26:67:76:5b:cb:56:73:86:7f:79:c5:64:c2:
         2e:ba:67:a3:73:ee:bd:51:03:ac:9b:c0:95:0e:23:d6:73:81:
         8f:97:72:87:9e:4b:83:62:50:09:99:69:1f:77:97:fd:b7:63:
         a6:7a:6e:d0:74:4b:65:2a:a5:55:f1:ec:d0:ed:63:44:a1:cb:
         da:b5:26:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:59:21 2026 by rpki-client