This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/CE53574A54B411EBAC30E864C4F9AE02.roa
File:                     CE53574A54B411EBAC30E864C4F9AE02.roa (raw, json)
Hash identifier:          DTn7NazNEuh0qOBmPIrXAtialgq6zlAl0+VWiYJeVFI=
Subject key identifier:   7B:70:D4:AA:CE:D0:29:D8:5F:B0:99:D2:7D:34:9A:42:F3:DD:4D:BA
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2B09
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/CE53574A54B411EBAC30E864C4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:13:19 +0000
ROA not before:           Fri 02 Jan 2026 16:13:19 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141454
IP address blocks:        49.0.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11017 (0x2b09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:19 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957ee9f-c9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:00:be:3f:13:c0:7c:84:80:d1:60:d0:5e:
                    2b:fe:91:cb:1c:4b:fc:0c:51:ad:e1:8d:36:0e:50:
                    5d:50:45:8b:62:c2:ef:23:99:0b:bc:a3:58:9e:26:
                    da:48:08:de:e4:b9:dc:63:8d:fb:20:d4:a6:2b:00:
                    ab:7d:d7:0e:df:10:47:8f:38:41:5c:39:7e:d9:cf:
                    54:f1:63:8c:02:21:70:51:24:9c:f6:c8:ef:af:69:
                    e2:db:17:40:14:df:e6:7c:5b:13:b5:0b:9c:76:29:
                    a7:02:90:e0:36:38:b8:ed:72:9b:84:a8:a3:ae:0f:
                    12:49:83:bd:fc:fa:1d:f1:6e:f7:bc:f6:a2:5e:dd:
                    d9:42:53:82:5b:d2:3b:6a:80:e8:f1:c8:8b:a3:49:
                    8c:67:fb:e1:b1:8f:68:f9:04:57:37:9d:6f:e8:fc:
                    ae:75:e6:dc:bb:d7:74:55:76:57:83:99:65:91:71:
                    0e:99:0a:c4:ba:8f:01:3e:fa:1c:c7:5d:30:b4:ea:
                    05:aa:df:2b:60:d3:44:f2:91:36:98:3a:5a:6c:70:
                    2b:2d:51:9e:81:4f:05:e6:e8:c9:d6:b4:fb:58:1c:
                    35:bc:71:cb:4e:b6:d0:11:bd:1b:95:67:88:dc:51:
                    61:84:cb:fe:01:2a:b7:30:1b:ac:2d:df:76:93:33:
                    20:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:70:D4:AA:CE:D0:29:D8:5F:B0:99:D2:7D:34:9A:42:F3:DD:4D:BA
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/CE53574A54B411EBAC30E864C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.0.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:0d:83:d3:fd:da:1d:ef:9a:ae:d6:66:f2:08:45:b0:f6:df:
         c3:e7:4f:ba:bd:f7:9f:f4:ab:d5:8b:72:a9:e0:72:c5:bc:5e:
         3a:6d:8c:f1:81:c9:84:2c:f1:b5:d5:42:36:b4:7a:ad:1a:6b:
         cd:66:8f:83:3e:7b:4d:14:58:2f:54:8b:26:8b:ef:4b:d8:41:
         b6:98:13:f2:6a:3d:60:c6:dd:0b:6f:15:04:84:ec:a2:a5:67:
         93:66:fb:f1:52:b2:88:c9:ff:4f:8e:8c:a8:7d:d3:de:09:85:
         ec:61:c0:38:29:46:7f:6a:fb:3e:91:30:99:4e:6d:02:81:a9:
         f8:b1:8c:30:d1:f2:88:5b:21:01:0c:c2:32:f2:41:41:0c:f2:
         3a:da:6b:80:ef:dd:93:29:0c:12:a3:8d:ab:81:9b:13:8f:a7:
         3b:67:f5:ce:32:42:ab:63:5f:54:27:07:22:ea:bd:9f:38:ea:
         4f:3e:d0:1f:1f:24:27:f1:0c:64:d4:cc:d0:57:76:c0:5c:d2:
         64:57:8e:cd:5a:2a:8c:c2:ca:5d:f9:8f:5f:4f:63:6e:6b:ee:
         e6:56:a4:01:df:8c:ee:ca:bb:f0:5f:33:5c:59:48:94:f4:69:
         bc:b4:5c:a9:d5:cf:a3:7b:e0:13:ec:15:0d:f7:95:25:41:16:
         24:dc:af:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:18:30 2026 by rpki-client