This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/3DB4E04ED0E411EB9695B157C4F9AE02.roa
File:                     3DB4E04ED0E411EB9695B157C4F9AE02.roa (raw, json)
Hash identifier:          YZoDP7uFEWqnfWm1TYIvs+eX9VTAE2B/+B+GLXbeKaE=
Subject key identifier:   37:35:3A:68:D6:91:C8:D2:AC:22:31:0C:44:55:11:30:E5:CA:47:10
Certificate issuer:       /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5
Certificate serial:       060F
Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/3DB4E04ED0E411EB9695B157C4F9AE02.roa
Signing time:             Fri 02 Jan 2026 22:18:39 +0000
ROA not before:           Fri 02 Jan 2026 22:18:39 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     8283
IP address blocks:        203.56.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl
                          rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 22:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551 (0x60f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FD85, serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5
        Validity
            Not Before: Jan  2 22:18:39 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6958443f-8ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:92:e7:0d:bb:72:db:a1:49:ad:12:61:3d:84:
                    9a:e8:d2:4d:e2:63:f4:2a:46:b2:df:47:a8:a3:53:
                    c5:b5:13:42:26:55:ca:a7:4c:2c:a0:cb:cf:32:05:
                    b3:17:e4:8b:21:4c:59:a1:0a:45:25:94:4e:86:f2:
                    7b:bb:dd:bb:0f:6c:c9:1c:4a:31:a0:45:5c:67:2b:
                    d8:98:ec:b0:68:91:f9:45:c5:18:73:73:48:08:08:
                    ea:79:48:b0:b2:f0:5e:6c:54:0e:1f:c0:13:2b:20:
                    87:2f:08:b6:e3:5e:18:2b:8f:0f:6b:37:8f:13:41:
                    25:00:b2:4d:8e:05:a0:81:55:fc:35:3b:05:b0:09:
                    f6:f6:ba:f0:d7:01:f5:45:24:11:fa:35:90:60:ce:
                    ab:62:dd:42:8b:00:3d:1d:0d:e3:f4:fd:36:34:e0:
                    13:ad:cf:26:8d:37:6d:55:9f:4a:41:63:cf:1a:8a:
                    01:0b:b3:55:7f:68:2c:81:44:1c:22:80:ee:c0:fa:
                    a5:9e:03:dd:22:1f:43:ac:24:b9:c5:9e:49:13:35:
                    63:37:c3:12:8b:50:db:49:69:67:0e:ec:2c:b1:56:
                    82:0a:fa:e0:65:f6:35:2c:dc:5d:41:d5:1d:9a:27:
                    a9:3b:37:e2:89:79:a2:f7:65:b8:31:b1:8d:bf:56:
                    c0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:35:3A:68:D6:91:C8:D2:AC:22:31:0C:44:55:11:30:E5:CA:47:10
            X509v3 Authority Key Identifier:
                keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/3DB4E04ED0E411EB9695B157C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.56.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:1b:8a:07:79:d9:db:58:33:97:25:6f:44:df:84:27:05:07:
         40:b5:af:c9:0f:25:cc:85:0d:95:94:fc:fc:a9:19:7b:62:fa:
         8d:fa:20:f8:6f:13:d2:42:97:84:96:1d:de:4e:66:84:59:74:
         8c:ce:20:04:ed:9b:b9:08:79:5d:84:7d:4a:f5:56:32:34:38:
         79:97:9f:c4:45:5d:39:1a:84:af:2c:d8:1b:2f:93:81:e8:c7:
         f3:77:12:fc:1e:5a:9b:51:7a:d0:b8:f3:84:1a:20:69:c7:69:
         42:0e:ea:de:ec:63:6d:63:c2:3f:af:e8:4d:44:0b:21:d6:a6:
         f3:6c:d9:aa:c2:a7:67:fd:9f:e5:47:ab:f9:f6:ce:1d:c4:74:
         90:25:19:cd:98:01:3d:47:7a:29:1f:05:a8:86:08:6a:de:58:
         64:16:85:07:32:e8:ee:09:0c:b9:74:0d:58:8b:4c:1c:5b:2b:
         3b:7e:8c:a0:df:13:d2:03:06:2f:99:b4:a9:7d:24:49:81:b0:
         4b:eb:5d:4e:a1:48:34:c4:03:da:6c:cc:26:fa:3a:27:70:9f:
         51:b8:d4:b4:fd:24:04:da:67:ae:67:1e:58:2f:75:ad:fe:7c:
         3a:87:4c:60:b3:17:be:e3:26:d7:a2:31:fc:d3:20:6f:d2:f8:
         4d:44:15:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 08:24:40 2026 by rpki-client