This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1DF3DE88ADDC11EC98011F56C4F9AE02.roa
File:                     1DF3DE88ADDC11EC98011F56C4F9AE02.roa (raw, json)
Hash identifier:          3SCD5/BBbOqT2HC9Gx9NKNTevOI4hBJ7qOy2sw9VY74=
Subject key identifier:   40:C9:8E:7D:B5:58:54:23:FE:99:F9:BA:3E:77:F6:09:D4:CA:DA:75
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2B08
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1DF3DE88ADDC11EC98011F56C4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:13:18 +0000
ROA not before:           Fri 02 Jan 2026 16:13:18 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     140706
IP address blocks:        110.49.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11016 (0x2b08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:18 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957ee9e-9fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:95:76:d5:f3:ad:40:ab:69:b6:89:61:c3:
                    b0:aa:b3:ed:8a:c5:12:1c:da:21:56:0a:f8:1d:81:
                    51:8f:ff:94:bf:6b:61:c0:6d:d3:bf:9f:6e:d4:a5:
                    2a:7d:0b:46:cf:55:b5:4a:a2:49:df:5b:16:28:7a:
                    9b:e3:c6:ba:27:8a:8e:7f:19:be:be:5f:e0:05:cc:
                    03:de:a8:80:a0:d6:75:86:38:61:33:65:7d:e3:15:
                    16:57:e8:ec:fb:79:ac:e4:c4:b4:99:cb:6f:e1:af:
                    47:73:ac:d4:1e:e4:70:a9:a1:ce:77:5c:31:6f:56:
                    28:70:5e:45:58:78:f7:30:6e:c3:46:f6:22:5b:3c:
                    9b:d6:68:d0:04:37:47:74:95:63:9f:86:51:ac:60:
                    98:1e:78:ad:b7:0b:34:af:75:ff:cb:f1:54:24:55:
                    b9:27:71:08:6d:a8:b6:39:53:91:29:8c:0d:b2:21:
                    0e:03:af:9c:dd:f6:2c:c1:e1:90:2b:6f:a2:a0:0e:
                    da:aa:f8:5a:de:ee:ea:8b:51:a9:6d:d4:14:6b:fe:
                    27:cb:f1:7a:a1:7e:0e:3d:ba:91:19:5c:85:9f:2c:
                    e8:aa:03:84:ba:d8:31:d0:84:dc:9b:03:3d:e1:85:
                    ba:6f:47:b8:c9:18:11:46:2e:ea:07:b6:dc:bc:32:
                    79:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C9:8E:7D:B5:58:54:23:FE:99:F9:BA:3E:77:F6:09:D4:CA:DA:75
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1DF3DE88ADDC11EC98011F56C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.49.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:8e:0c:74:03:8a:6f:c4:24:6b:53:ad:1c:7c:bd:2b:26:b8:
         f9:03:fc:4b:03:6a:96:de:57:9f:44:38:be:95:00:69:29:d4:
         67:29:7b:55:9c:5b:5e:79:ff:70:72:a4:80:37:4d:bc:b0:aa:
         1c:e3:57:b2:21:7b:fc:ab:3d:6b:44:f5:e7:f7:f3:33:54:cc:
         c8:07:f0:66:a0:02:c1:c2:7b:7e:48:37:4c:b8:65:a2:01:1d:
         a0:dd:dc:a4:5f:d0:f5:7b:f2:82:c9:95:18:c2:c3:4e:60:29:
         12:f3:bc:5c:cf:08:5d:45:e3:d6:b3:b3:d8:0b:de:ba:ba:84:
         88:78:17:ef:24:dc:e1:e0:54:c1:be:ff:f9:b2:37:f3:bb:b0:
         03:63:ef:f5:72:06:a0:21:93:4b:0a:3c:b8:a8:57:9d:8d:53:
         48:72:bd:e8:18:0c:4b:4b:a7:e6:a8:63:56:ed:fb:6a:5a:76:
         14:96:34:0a:c3:78:5d:aa:68:f7:58:93:f3:78:9e:91:4d:1a:
         61:5d:c6:3d:7d:78:61:86:1e:7c:62:af:ee:6f:1e:1d:9c:80:
         af:67:dc:86:fe:65:b9:7e:e9:94:34:22:1a:6c:30:0a:51:6e:
         8f:49:ad:75:16:77:88:05:0c:5e:f7:34:f1:b7:9f:e8:63:97:
         25:1f:81:5a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICKwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzE4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU3ZWU5ZS05ZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAooCVdtXzrUCrabaJYcOwqrPtisUSHNohVgr4HYFRj/+Uv2thwG3Tv59u1KUq
fQtGz1W1SqJJ31sWKHqb48a6J4qOfxm+vl/gBcwD3qiAoNZ1hjhhM2V94xUWV+js
+3ms5MS0mctv4a9Hc6zUHuRwqaHOd1wxb1YocF5FWHj3MG7DRvYiWzyb1mjQBDdH
dJVjn4ZRrGCYHnittws0r3X/y/FUJFW5J3EIbai2OVORKYwNsiEOA6+c3fYsweGQ
K2+ioA7aqvha3u7qi1GpbdQUa/4ny/F6oX4OPbqRGVyFnyzoqgOEutgx0ITcmwM9
4YW6b0e4yRgRRi7qB7bcvDJ5+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEDJjn21
WFQj/pn5uj539gnUytp1MB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvMURGM0RFODhB
RERDMTFFQzk4MDExRjU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABuMVcwDQYJKoZIhvcNAQELBQADggEBABeODHQDim/EJGtT
rRx8vSsmuPkD/EsDapbeV59EOL6VAGkp1Gcpe1WcW155/3BypIA3TbywqhzjV7Ih
e/yrPWtE9ef38zNUzMgH8GagAsHCe35IN0y4ZaIBHaDd3KRf0PV78oLJlRjCw05g
KRLzvFzPCF1F49azs9gL3rq6hIh4F+8k3OHgVMG+//myN/O7sANj7/VyBqAhk0sK
PLioV52NU0hyvegYDEtLp+aoY1bt+2padhSWNArDeF2qaPdYk/N4npFNGmFdxj19
eGGGHnxir+5vHh2cgK9n3Ib+Zbl+6ZQ0IhpsMApRbo9JrXUWd4gFDF73NPG3n+hj
lyUfgVo=
-----END CERTIFICATE-----
Generated at Wed Jan 21 02:52:39 2026 by rpki-client