This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/0C1F9D8CF13A11F08789470C566F56BC.roa
File:                     0C1F9D8CF13A11F08789470C566F56BC.roa (raw, json)
Hash identifier:          J2fCRULalKRbYKil4iTsnY5Key0JACfh7B4or/zK44Q=
Subject key identifier:   6A:F9:13:BC:8A:9D:26:89:A8:D5:DB:83:CD:D2:9B:1D:54:D3:48:70
Certificate issuer:       /CN=A91E4EEF/serialNumber=1CB95F3F7BDE6E199B740B9282AC722A4EDA999B
Certificate serial:       1D
Authority key identifier: 1C:B9:5F:3F:7B:DE:6E:19:9B:74:0B:92:82:AC:72:2A:4E:DA:99:9B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/0C1F9D8CF13A11F08789470C566F56BC.roa
Signing time:             Wed 14 Jan 2026 11:13:26 +0000
ROA not before:           Wed 14 Jan 2026 11:13:26 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154449
IP address blocks:        144.79.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.crl
                          rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 07:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4EEF, serialNumber=1CB95F3F7BDE6E199B740B9282AC722A4EDA999B
        Validity
            Not Before: Jan 14 11:13:26 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69677a56-2761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:1f:c6:dc:40:9f:3f:85:ae:86:ad:9e:78:
                    d3:7e:83:d3:d0:7f:ef:17:1a:33:c2:ce:c8:48:43:
                    7d:88:17:bd:bd:29:ba:7e:22:98:87:3b:66:9f:1d:
                    f7:e2:4d:18:4d:9c:eb:70:86:ed:83:db:43:fe:16:
                    81:68:f5:a0:7f:65:44:b5:e5:d7:54:aa:64:cc:15:
                    b0:8e:c2:22:2f:5d:3d:3d:2f:a3:7d:10:f2:22:37:
                    d2:c3:6a:8f:47:b0:4a:43:5b:44:48:f5:f6:6a:61:
                    8f:1c:dc:79:df:5b:f4:88:b3:25:52:14:56:0e:4d:
                    89:d5:35:75:ef:a7:e5:c2:ab:d7:ef:0c:da:b5:02:
                    49:c5:dd:4f:f5:a7:64:02:5e:7a:ea:65:71:97:b3:
                    ad:d5:0b:24:b7:7b:ce:75:55:fe:4e:da:d2:a0:32:
                    43:b2:5a:f5:e2:4c:fa:33:40:6b:aa:37:31:96:3e:
                    95:a4:e1:61:ab:52:a8:7b:7c:a9:3b:67:ed:08:57:
                    f1:7f:35:bb:cd:84:04:55:3e:9f:95:b9:90:ed:8c:
                    e0:89:d8:8a:6a:da:2f:63:97:69:fa:47:34:1f:de:
                    62:41:c0:09:39:26:0c:ad:9c:d0:5a:e4:5c:21:88:
                    cf:bd:96:cf:2c:67:94:49:84:74:40:dd:a2:34:55:
                    db:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F9:13:BC:8A:9D:26:89:A8:D5:DB:83:CD:D2:9B:1D:54:D3:48:70
            X509v3 Authority Key Identifier:
                keyid:1C:B9:5F:3F:7B:DE:6E:19:9B:74:0B:92:82:AC:72:2A:4E:DA:99:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/0C1F9D8CF13A11F08789470C566F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:d6:61:ea:02:26:1d:51:0d:e6:63:4e:11:cc:14:4b:ee:dd:
         48:17:14:e1:10:21:03:79:b4:30:22:3d:98:b3:6e:98:c9:11:
         95:f3:c1:38:0b:e8:e4:df:91:ce:a0:ee:42:c9:cf:b2:7e:03:
         7e:d8:ac:cd:de:a6:28:2c:58:21:5d:88:0f:60:b3:ba:b6:2b:
         ed:c4:63:05:0d:1c:80:7d:95:2d:12:71:b5:8b:7d:2c:1b:18:
         eb:58:48:0f:c2:fa:c0:d9:d3:9f:e5:31:56:3f:f3:e1:38:75:
         23:79:50:57:37:59:de:db:33:40:a6:c6:1b:c7:2d:b3:90:3f:
         aa:1d:ef:3b:88:54:0f:66:85:8b:6a:71:21:1b:08:4e:8d:18:
         e5:aa:05:bd:d2:4d:3d:b1:bf:10:bf:19:88:ff:a0:51:bc:61:
         7f:3a:9e:6a:a5:67:74:b0:68:bc:f6:13:42:09:3f:91:18:a1:
         5d:68:01:3a:44:09:13:9d:14:f6:6e:c0:3a:03:b5:fe:1b:95:
         ad:e4:14:54:fb:d9:7e:da:2e:4b:14:3d:47:ce:a8:46:87:55:
         09:2d:bd:7e:e6:37:34:d9:9f:3b:3f:12:7c:31:3c:6f:24:97:
         fd:ce:bc:6e:c0:bf:36:41:3c:61:f0:f3:4b:3c:c5:d5:de:bf:
         64:37:b7:30
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFF
NEVFRjExMC8GA1UEBRMoMUNCOTVGM0Y3QkRFNkUxOTlCNzQwQjkyODJBQzcyMkE0
RURBOTk5QjAeFw0yNjAxMTQxMTEzMjZaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5Njc3YTU2LTI3NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDB5B/G3ECfP4Wuhq2eeNN+g9PQf+8XGjPCzshIQ32IF729Kbp+IpiHO2afHffi
TRhNnOtwhu2D20P+FoFo9aB/ZUS15ddUqmTMFbCOwiIvXT09L6N9EPIiN9LDao9H
sEpDW0RI9fZqYY8c3HnfW/SIsyVSFFYOTYnVNXXvp+XCq9fvDNq1AknF3U/1p2QC
XnrqZXGXs63VCyS3e851Vf5O2tKgMkOyWvXiTPozQGuqNzGWPpWk4WGrUqh7fKk7
Z+0IV/F/NbvNhARVPp+VuZDtjOCJ2Ipq2i9jl2n6RzQf3mJBwAk5JgytnNBa5Fwh
iM+9ls8sZ5RJhHRA3aI0VdsTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUavkTvIqd
Jomo1duDzdKbHVTTSHAwHwYDVR0jBBgwFoAUHLlfP3vebhmbdAuSgqxyKk7amZsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0RUVGL0NFQTgzNkJBREVG
MzExRjA5RUQ0MTI5NjU3NkY1NkJDL0hMbGZQM3ZlYmhtYmRBdVNncXh5S2s3YW1a
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSExsZlAzdmViaG1iZEF1U2dxeHlLazdhbVpzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEVFRi9DRUE4MzZCQURFRjMxMUYwOUVENDEyOTY1NzZGNTZCQy8wQzFGOUQ4Q0Yx
M0ExMUYwODc4OTQ3MEM1NjZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAJBPuDANBgkqhkiG9w0BAQsFAAOCAQEAUdZh6gImHVEN5mNO
EcwUS+7dSBcU4RAhA3m0MCI9mLNumMkRlfPBOAvo5N+RzqDuQsnPsn4Dftiszd6m
KCxYIV2ID2CzurYr7cRjBQ0cgH2VLRJxtYt9LBsY61hID8L6wNnTn+UxVj/z4Th1
I3lQVzdZ3tszQKbGG8cts5A/qh3vO4hUD2aFi2pxIRsITo0Y5aoFvdJNPbG/EL8Z
iP+gUbxhfzqeaqVndLBovPYTQgk/kRihXWgBOkQJE50U9m7AOgO1/huVreQUVPvZ
ftouSxQ9R86oRodVCS29fuY3NNmfOz8SfDE8bySX/c68bsC/NkE8YfDzSzzF1d6/
ZDe3MA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:39:34 2026 by rpki-client