This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/50D3184C84A711EABF754420C4F9AE02.roa
File:                     50D3184C84A711EABF754420C4F9AE02.roa (raw, json)
Hash identifier:          CLq/TiFIwqV4t1p4QhBoMpf0MtAf2Xwqk3KuV3rYXm0=
Subject key identifier:   5D:3C:E9:E6:49:37:15:E2:80:2D:9A:1A:94:D9:AA:45:D6:E6:52:DE
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2B2B
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/50D3184C84A711EABF754420C4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:13:52 +0000
ROA not before:           Fri 02 Jan 2026 16:13:52 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     58930
IP address blocks:        58.64.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11051 (0x2b2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:52 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957eec0-3dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c0:e1:e8:b2:4b:53:fb:c7:f8:cf:aa:3c:11:
                    4c:26:14:11:11:7a:80:5d:25:4d:67:62:6b:1e:6a:
                    ec:c6:bb:91:b5:40:1e:6c:48:f3:c8:38:9a:b3:d8:
                    77:8b:2b:c5:65:2c:11:f7:08:53:41:96:12:d7:69:
                    d3:2d:73:98:4a:69:90:5e:e0:ec:2e:e2:ff:13:30:
                    b6:20:05:ad:f7:b5:26:88:d1:26:86:0a:b1:72:76:
                    c3:85:5f:59:c6:9e:16:ad:14:f3:f1:df:c0:f2:a4:
                    ed:19:d2:2f:d1:9d:60:7e:b2:b6:b3:fd:d7:ac:c5:
                    ad:1e:73:67:42:63:cb:50:c5:74:96:d0:69:fd:fa:
                    d8:d0:85:8a:ae:35:bc:73:ff:e2:13:03:9c:05:79:
                    30:3a:4c:a1:0b:91:8c:28:b7:10:ef:d9:b3:17:bd:
                    f8:73:b8:45:6d:5a:ac:35:ca:94:5e:75:67:12:1c:
                    f8:1e:10:fa:bd:53:c2:0b:06:99:24:07:14:d5:be:
                    99:d1:68:75:4a:b9:71:92:89:70:af:3c:36:56:6e:
                    31:e0:88:5a:c1:5a:d9:a4:34:36:e3:58:24:38:1d:
                    cc:41:47:bc:9e:cc:f6:2f:14:7f:ba:5f:23:57:70:
                    a5:55:33:a4:e9:3d:a1:e7:b8:8c:e8:27:a6:f4:55:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3C:E9:E6:49:37:15:E2:80:2D:9A:1A:94:D9:AA:45:D6:E6:52:DE
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/50D3184C84A711EABF754420C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.64.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:0f:88:d1:73:66:f5:78:9f:e0:19:f3:ef:b7:df:5e:2c:76:
         81:4a:26:f9:cd:ab:61:2f:4e:0f:97:70:5b:40:90:70:ab:13:
         2b:54:b1:13:1e:52:bc:9a:1b:c6:5e:fc:0f:65:d8:9d:89:cb:
         c9:31:61:c9:dd:36:b8:bb:88:99:9c:88:a5:83:78:47:b1:0f:
         f4:ec:32:76:e2:21:e3:62:94:f1:89:13:a4:6e:90:d9:6d:7f:
         41:27:a7:42:a0:f3:30:12:a9:bd:11:c6:5e:39:3b:57:c3:59:
         ca:c5:e8:0a:c9:94:dd:5c:e8:a3:1e:c9:37:f9:d3:73:4e:0f:
         56:62:8d:39:17:3b:9e:16:af:07:22:62:9d:23:69:bf:4e:8b:
         6a:d0:dc:ea:19:5b:b4:b9:bc:b8:e7:83:52:0b:eb:65:2a:a4:
         62:ec:42:28:9c:1f:9e:af:b0:92:97:9f:7b:49:c7:4a:b0:cc:
         5b:e8:7b:a2:e5:7e:83:88:cf:ad:30:ef:60:4f:7c:a7:47:63:
         e6:9f:11:e0:6e:81:d6:7b:df:32:48:b3:f2:3f:89:0f:e7:dd:
         16:36:46:81:06:45:ba:12:d1:5d:6b:24:97:0a:2a:f4:e9:a1:
         ba:09:9a:23:44:5d:4f:a3:59:ae:ad:a1:cf:3f:05:08:cc:54:
         16:35:c5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:17:59 2026 by rpki-client