This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/7D2D672CDED711F0AB94945E506F56BC.roa
File:                     7D2D672CDED711F0AB94945E506F56BC.roa (raw, json)
Hash identifier:          u2zduMkx4xhg9DLF082d9hmsAswVdTWy9LumUJPHJOI=
Subject key identifier:   5E:76:DF:D0:26:E0:C8:49:C2:8A:9E:B6:20:95:FD:A8:C7:57:64:10
Certificate issuer:       /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
Certificate serial:       07
Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/7D2D672CDED711F0AB94945E506F56BC.roa
Signing time:             Fri 26 Dec 2025 03:11:19 +0000
ROA not before:           Fri 26 Dec 2025 03:11:19 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     149014
IP address blocks:        45.146.112.0/22 maxlen: 22
                          45.146.112.0/24 maxlen: 24
                          45.146.113.0/24 maxlen: 24
                          45.146.114.0/24 maxlen: 24
                          45.146.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 05:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
        Validity
            Not Before: Dec 26 03:11:19 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=694dfcd7-8c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:24:eb:85:6a:a2:ee:f0:77:12:b3:99:b2:
                    7a:56:b4:f9:a7:4a:28:29:3e:91:07:ed:b4:17:47:
                    b3:5a:c6:64:25:52:fb:53:a1:79:80:b5:0e:4e:5c:
                    91:9f:1a:17:12:61:79:e9:e2:65:42:2b:28:b0:42:
                    3b:09:3a:5c:51:08:38:1d:5c:34:e4:a1:4b:3e:ca:
                    4f:19:60:5f:38:9c:81:b9:b9:7a:13:b0:62:01:13:
                    19:16:63:7d:9c:6e:9f:d6:31:1a:0b:30:c3:a6:a6:
                    a5:4a:f0:90:96:c5:8c:d3:ae:dc:b0:9d:39:84:6c:
                    8b:01:ca:44:fe:82:9b:77:a2:53:04:48:4c:15:35:
                    33:fe:ac:71:1d:61:4e:ba:93:e3:c9:6d:f2:d2:06:
                    80:93:2e:51:ef:26:f0:88:b9:68:b7:27:a7:1c:e8:
                    bb:37:a8:63:27:a6:37:8f:e0:77:3f:6f:49:65:61:
                    c7:e8:f6:70:8b:15:7c:22:13:ef:be:54:c9:83:25:
                    9d:a1:d8:64:e6:03:b5:55:65:89:6b:a4:17:e4:34:
                    06:16:f0:90:74:d1:9b:ca:3d:f0:15:24:b6:1c:d6:
                    ae:d6:df:be:20:12:9d:7e:f8:96:b8:8a:58:51:ee:
                    a8:75:6d:97:60:6f:53:5f:b1:6c:b5:67:5c:76:86:
                    08:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:76:DF:D0:26:E0:C8:49:C2:8A:9E:B6:20:95:FD:A8:C7:57:64:10
            X509v3 Authority Key Identifier:
                keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/7D2D672CDED711F0AB94945E506F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:af:ff:02:74:4f:93:3d:53:ca:ad:e6:11:8d:87:22:a9:85:
         43:7e:ba:71:3e:3c:b6:8c:8a:d8:0c:45:69:36:a4:92:53:01:
         d0:a2:39:bc:0a:c3:c7:8e:87:7c:2f:48:1f:33:8b:dd:fe:aa:
         d6:a8:d4:c4:2a:ce:f6:d7:e4:7e:47:10:61:2f:43:97:61:7d:
         7a:cf:3a:45:60:55:a0:a6:1f:9f:36:83:1e:be:8c:68:49:cb:
         32:35:e3:a7:96:ac:6d:af:1f:3f:0a:e0:fd:67:25:68:76:bc:
         b5:5b:71:82:5f:72:21:b8:96:81:02:92:18:cf:64:98:96:13:
         c4:f0:ee:17:69:bd:a0:e5:44:c6:0c:18:a8:33:4e:87:5b:75:
         ae:dc:ed:89:35:bb:39:47:b5:9e:c8:2e:63:05:bd:9d:d9:1a:
         3f:ac:ad:af:33:bd:0e:8a:02:05:75:27:bb:6e:c8:47:84:14:
         59:5d:c4:93:ae:e0:e8:b7:3d:4f:15:c9:88:70:cc:67:ec:b7:
         42:47:a2:ba:58:99:cd:32:97:f0:a3:5f:7b:a0:a3:23:f9:c5:
         2a:ec:9e:04:2f:da:1a:35:93:1b:c6:f6:ce:d1:6a:85:2a:fb:
         fe:5f:fd:4a:4c:64:67:aa:d0:4e:72:51:4e:64:8a:7d:84:6a:
         77:b6:c3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:30:31 2026 by rpki-client