This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/0211478AB48E11EF81F55F3CC4F9AE02.roa
File:                     0211478AB48E11EF81F55F3CC4F9AE02.roa (raw, json)
Hash identifier:          5rKPRaTWrnFQ6DzM9Fe/ggDqdlKGGTo8Wqp+m38OIU8=
Subject key identifier:   02:40:33:81:9A:5D:F1:30:F0:12:4A:A0:9A:1B:22:01:B5:11:92:7E
Certificate issuer:       /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E
Certificate serial:       213C
Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/0211478AB48E11EF81F55F3CC4F9AE02.roa
Signing time:             Fri 06 Feb 2026 15:10:58 +0000
ROA not before:           Fri 06 Feb 2026 15:10:58 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        203.34.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl
                          rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Feb 2026 14:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8508 (0x213c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199885, serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E
        Validity
            Not Before: Feb  6 15:10:58 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69860482-711b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6c:24:97:6b:3d:3c:e5:29:21:7e:eb:13:2c:
                    6c:88:2f:85:1c:16:d0:44:25:4a:62:81:74:f6:39:
                    66:2a:92:80:50:0f:10:40:cd:ff:8d:b1:a9:30:d9:
                    6b:0a:e0:11:96:c3:89:2a:7a:08:d1:63:0d:58:96:
                    a2:c7:36:93:8f:29:b9:4d:f4:bd:c8:02:0b:2a:29:
                    7b:61:7d:eb:b6:58:2a:a2:b5:25:28:95:92:c9:fd:
                    2d:4b:6e:c9:47:b6:68:3a:0c:1e:57:87:9e:3c:cb:
                    ea:15:42:e2:ee:c1:f7:19:91:82:61:fa:37:7c:4c:
                    f0:f3:dd:46:25:83:42:7b:dd:70:44:da:37:6d:9c:
                    45:1e:1b:1f:75:c5:f8:f6:9b:3b:bd:1b:1f:07:7a:
                    7f:c7:66:67:24:5e:73:e4:30:d3:3f:52:63:87:c9:
                    ce:ea:15:48:30:db:aa:c1:dd:64:5f:85:2b:4c:11:
                    c1:9e:bd:88:44:44:cc:53:82:85:85:27:32:73:8e:
                    65:22:ab:21:95:64:4c:af:90:04:a9:e8:63:25:b1:
                    64:c2:ab:8f:07:f8:15:23:86:8a:f4:ec:ca:ed:e3:
                    97:dd:c4:54:94:a3:eb:ba:c2:84:bb:54:25:98:b9:
                    6a:0f:cf:c8:72:18:1a:b6:f7:f2:f3:bd:db:84:84:
                    a6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:40:33:81:9A:5D:F1:30:F0:12:4A:A0:9A:1B:22:01:B5:11:92:7E
            X509v3 Authority Key Identifier:
                keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/0211478AB48E11EF81F55F3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.34.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:1c:3d:7e:cc:76:06:12:50:e6:e1:bc:dc:43:3a:10:d1:16:
         80:5d:c4:bf:43:fb:b2:62:e5:e1:c1:6a:2a:25:ab:3f:f1:23:
         18:04:ee:42:0c:3a:e8:af:90:c0:4d:be:56:16:83:b4:10:bc:
         45:8b:9a:cd:7e:6f:14:9e:2d:42:57:16:cf:48:ef:ea:fa:90:
         31:c1:c4:94:36:48:cb:0b:50:2a:68:53:d1:6f:b3:d8:b7:b8:
         c6:76:a9:6a:75:e4:e7:35:11:6a:b2:0d:97:2b:6f:20:74:de:
         ef:bd:cb:92:26:54:fd:52:46:b2:d4:44:3c:fc:f6:53:0c:1b:
         ed:6f:58:30:44:7a:a0:6a:4d:76:60:a9:8a:7d:dd:c9:80:ba:
         17:24:c1:36:9c:3d:8c:8a:a7:ed:05:83:dc:9c:50:63:42:af:
         ac:f0:c4:51:a2:5c:ee:b5:0e:16:df:96:34:d5:08:dd:fe:cc:
         02:e1:75:21:a9:e5:b3:4f:75:67:eb:7b:79:80:a2:82:31:19:
         20:ae:06:2a:71:71:3e:7f:47:c1:83:ac:72:b6:61:d9:d4:dd:
         d1:0f:04:71:78:ad:d8:fd:ff:48:15:6d:47:dc:c2:6b:5a:77:
         22:79:f9:bf:c8:81:b3:43:ad:42:7c:15:6b:e8:fd:2c:5e:22:
         30:b2:e1:92
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICITwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OTk4ODUxMTAvBgNVBAUTKDQzOEQ4MjNFQzMzNDRCNEJGMUM5OUUxMURFMEY1NkY4
NDJFRkQ5OEUwHhcNMjYwMjA2MTUxMDU4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTg2MDQ4Mi03MTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk2wkl2s9POUpIX7rEyxsiC+FHBbQRCVKYoF09jlmKpKAUA8QQM3/jbGpMNlr
CuARlsOJKnoI0WMNWJaixzaTjym5TfS9yAILKil7YX3rtlgqorUlKJWSyf0tS27J
R7ZoOgweV4eePMvqFULi7sH3GZGCYfo3fEzw891GJYNCe91wRNo3bZxFHhsfdcX4
9ps7vRsfB3p/x2ZnJF5z5DDTP1Jjh8nO6hVIMNuqwd1kX4UrTBHBnr2IRETMU4KF
hScyc45lIqshlWRMr5AEqehjJbFkwquPB/gVI4aK9OzK7eOX3cRUlKPrusKEu1Ql
mLlqD8/Ichgatvfy873bhISmlQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAJAM4Ga
XfEw8BJKoJobIgG1EZJ+MB8GA1UdIwQYMBaAFEONgj7DNEtL8cmeEd4PVvhC79mO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE
OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMwdnh5WjRSM2c5Vy1FTHYy
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1E0MkNQc00wUzB2eHlaNFIzZzlXLUVMdjJZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTk4ODUvRDA1MDY4NUExRDk4MTFFMkFFNkIxRjgzMDhCMDJDRDIvMDIxMTQ3OEFC
NDhFMTFFRjgxRjU1RjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLImQwDQYJKoZIhvcNAQELBQADggEBAH0cPX7MdgYSUObh
vNxDOhDRFoBdxL9D+7Ji5eHBaiolqz/xIxgE7kIMOuivkMBNvlYWg7QQvEWLms1+
bxSeLUJXFs9I7+r6kDHBxJQ2SMsLUCpoU9Fvs9i3uMZ2qWp15Oc1EWqyDZcrbyB0
3u+9y5ImVP1SRrLURDz89lMMG+1vWDBEeqBqTXZgqYp93cmAuhckwTacPYyKp+0F
g9ycUGNCr6zwxFGiXO61DhbfljTVCN3+zALhdSGp5bNPdWfre3mAooIxGSCuBipx
cT5/R8GDrHK2YdnU3dEPBHF4rdj9/0gVbUfcwmtadyJ5+b/IgbNDrUJ8FWvo/Sxe
IjCy4ZI=
-----END CERTIFICATE-----
Generated at Mon Feb 16 06:41:02 2026 by rpki-client