This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/816F50BE738E11E8AFDACE54C4F9AE02.roa
File:                     816F50BE738E11E8AFDACE54C4F9AE02.roa (raw, json)
Hash identifier:          LOOHGmtGAhVoNJX1//UaHaEHkFwwOXfVjO7DMnYYFYQ=
Subject key identifier:   51:D7:78:04:39:85:AD:C2:85:49:EA:88:C2:B9:FF:DD:9D:56:57:C2
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2B24
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/816F50BE738E11E8AFDACE54C4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:13:46 +0000
ROA not before:           Fri 02 Jan 2026 16:13:46 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     45781
IP address blocks:        110.49.201.0/24 maxlen: 24
                          119.31.104.0/24 maxlen: 24
                          119.31.105.0/24 maxlen: 24
                          119.31.106.0/24 maxlen: 24
                          119.31.107.0/24 maxlen: 24
                          119.31.119.0/24 maxlen: 24
                          2001:44c8:2000::/36 maxlen: 48
                          2001:44c8:3000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11044 (0x2b24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:46 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957eeba-ab4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:3e:8d:6d:09:34:ef:8d:37:eb:52:08:39:
                    a2:8a:53:fc:b1:e2:69:c6:f0:18:0e:bd:48:99:cc:
                    4b:b4:85:63:7c:f8:8d:08:f7:92:24:08:d3:2f:5c:
                    c2:8a:11:17:ce:c8:a4:98:1c:9d:dd:6d:7f:43:b6:
                    9a:ea:61:fb:0e:f0:99:d8:61:2e:c4:f1:7f:50:12:
                    5b:89:80:26:b8:5b:c0:f0:2f:e1:8e:f1:aa:3e:c6:
                    58:6b:60:27:34:07:7c:4a:2d:c7:cd:87:69:ec:a6:
                    95:d9:c6:75:51:5c:32:48:dc:15:d1:3e:27:19:f2:
                    30:6f:23:58:aa:4c:ab:48:06:51:c9:8c:b1:ea:1b:
                    eb:ac:f7:87:96:b6:ff:03:ac:79:6c:fa:77:cf:2a:
                    fa:b2:05:96:69:d9:c8:0d:00:98:83:6c:7d:39:be:
                    93:38:d1:86:23:c8:33:fb:c0:8d:eb:44:0f:9e:90:
                    ab:89:2e:40:e0:2c:bf:5b:e1:36:1a:a3:e9:81:cb:
                    e4:ac:3e:1e:92:4f:9a:ec:fa:95:47:96:f4:af:35:
                    13:48:23:aa:52:44:e2:6d:17:03:81:c1:37:c2:21:
                    fc:c6:59:6e:c3:8b:4d:43:6b:60:a4:f7:b8:e9:f9:
                    a6:91:b9:5c:22:66:b2:78:3f:71:6b:09:6d:2a:f0:
                    5d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D7:78:04:39:85:AD:C2:85:49:EA:88:C2:B9:FF:DD:9D:56:57:C2
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/816F50BE738E11E8AFDACE54C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.49.201.0/24
                  119.31.104.0/22
                  119.31.119.0/24
                IPv6:
                  2001:44c8:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         95:64:52:aa:88:c1:d6:a4:29:13:af:d2:84:c2:da:bc:24:e3:
         a2:fa:01:f0:9d:d8:92:ad:67:b8:3f:09:c9:52:8f:06:4d:f2:
         46:ac:f4:3b:32:8b:15:5f:dc:bb:c2:bf:7a:da:b4:be:a6:f9:
         35:28:19:3e:50:cd:15:8e:12:c5:5b:f6:53:4c:a1:ba:70:1e:
         87:ca:7c:54:78:c3:71:20:28:f8:9a:1c:da:66:d3:74:a7:19:
         76:8e:b4:a7:c4:6e:74:53:b7:a1:bd:48:48:f3:d7:f2:cf:5b:
         e6:15:92:2a:3f:92:aa:db:e5:6f:30:f8:30:60:85:78:75:e8:
         96:e0:76:4d:68:e5:7b:ea:c3:33:11:5f:18:89:db:ed:6b:61:
         0b:fd:f7:06:bc:5d:ce:44:d7:09:aa:75:6a:8b:c1:53:2d:51:
         9f:c7:2d:c5:25:a6:73:73:c5:47:f4:fd:5e:b1:7d:6c:73:0c:
         5b:2d:43:20:02:69:96:90:d7:44:d7:44:98:81:44:a9:b6:81:
         81:e5:68:d9:9c:69:b2:34:2f:44:2d:c0:34:93:b0:16:2a:8f:
         d4:5d:20:18:1d:7c:0d:49:6b:66:7b:74:ba:29:a1:7e:72:95:
         f5:4e:8e:b8:06:10:26:6d:ab:d0:8d:63:a9:6c:37:c7:93:3f:
         21:0b:3d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:17:06 2026 by rpki-client