This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1CED22CCEEC611F0B6553517716F56BC.roa
File:                     1CED22CCEEC611F0B6553517716F56BC.roa (raw, json)
Hash identifier:          UnTioPkbCdnaHVXem2L8C99cFYpykfmfVRNN6wCbfGE=
Subject key identifier:   D4:BC:36:99:7C:DE:B4:E7:81:07:4D:91:97:AC:01:68:50:55:4D:64
Certificate issuer:       /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial:       1B
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1CED22CCEEC611F0B6553517716F56BC.roa
Signing time:             Sun 11 Jan 2026 08:18:30 +0000
ROA not before:           Sun 11 Jan 2026 08:18:30 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147176
IP address blocks:        138.252.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
        Validity
            Not Before: Jan 11 08:18:30 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69635cd6-3b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:5f:f0:b4:d1:84:f9:3d:37:9e:99:f2:25:
                    7f:83:eb:d4:33:bc:c7:06:7f:4d:f5:90:cb:d4:4f:
                    1d:ac:e1:bd:05:6e:6c:1e:37:a0:df:a8:dd:e2:f1:
                    6e:0e:f7:1a:62:d3:22:71:71:01:1f:09:e9:2c:0f:
                    b6:3a:69:15:08:57:c6:17:67:09:18:45:f4:af:89:
                    be:a1:26:cf:1f:c1:dc:38:13:8e:30:c8:3c:d9:c9:
                    72:97:f4:18:d1:3d:c9:22:28:82:23:8c:b7:7b:e8:
                    8e:b3:40:7a:25:c1:f0:9b:7a:ec:45:da:ee:0d:0a:
                    18:b4:55:72:fd:91:42:37:97:37:bb:b3:cd:c9:a5:
                    33:12:c8:56:bc:b1:41:86:c3:51:8c:87:8d:52:c0:
                    7f:28:b1:04:4c:be:f9:36:68:d1:be:39:a1:9c:00:
                    c1:bd:e8:8f:e8:57:29:9e:97:b0:e9:9d:f4:17:9e:
                    41:8d:4a:21:74:af:37:97:2d:ab:09:f5:81:81:28:
                    45:dd:8f:2e:22:76:21:92:ac:24:54:34:bf:20:ce:
                    57:bb:99:0e:90:a6:3b:21:05:9f:3c:ec:73:5d:36:
                    79:d8:bd:06:42:b5:64:da:4f:f3:4f:4e:67:b2:78:
                    5b:26:13:1d:13:74:ae:03:06:82:20:eb:45:5a:42:
                    23:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BC:36:99:7C:DE:B4:E7:81:07:4D:91:97:AC:01:68:50:55:4D:64
            X509v3 Authority Key Identifier:
                keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1CED22CCEEC611F0B6553517716F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:03:6a:4b:eb:0c:ab:af:59:36:11:7c:75:80:0b:d9:e3:10:
         db:fd:c2:70:74:64:bb:bf:6a:16:23:a4:6c:a7:8f:c5:75:0d:
         a1:51:f7:24:de:c6:d1:77:3b:de:50:a9:dc:56:0f:a3:4e:dd:
         73:a4:77:e8:3c:d5:0e:2b:d3:6c:7c:a8:c8:26:da:41:5b:37:
         d2:3b:37:61:35:f5:72:c9:d8:dd:5d:82:91:37:3e:95:b9:6a:
         c9:a8:f1:be:97:c0:4a:71:fa:60:bb:84:4c:40:f1:34:05:e2:
         32:28:fb:eb:8f:0e:ac:d2:67:81:9c:3c:cb:a1:e3:ca:30:68:
         1f:e5:88:66:4a:03:14:7c:98:68:7f:1f:0c:5c:67:b6:2e:1c:
         47:6a:6d:df:ad:61:10:b6:bf:ba:00:49:6e:f7:ca:a4:a7:a9:
         64:95:d6:ca:4b:18:dd:bc:2e:ed:0a:f9:9d:5a:e1:2e:f2:b3:
         74:25:9a:c6:88:ea:96:68:dc:95:82:a3:0a:54:41:9c:62:f4:
         fe:d7:ea:19:c5:c5:0a:dd:d1:99:ca:21:d9:91:2b:7f:4e:e8:
         d5:b8:7e:40:82:05:ba:dd:6c:74:2e:fc:e8:cd:a4:a2:a7:48:
         ef:15:6b:db:18:63:31:02:4e:46:63:33:69:aa:ba:be:be:5c:
         86:47:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:42:51 2026 by rpki-client