This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/87421F34DA3E11F09B1225578ED3641D.roa
File:                     87421F34DA3E11F09B1225578ED3641D.roa (raw, json)
Hash identifier:          6goDK+P0KaXbt6UFhiW9XDMy5l0LP6LngYjRz0ry9+w=
Subject key identifier:   8A:3F:13:04:3E:DF:74:6A:9E:4D:3A:DB:2B:C9:BC:A7:66:CC:E2:D3
Certificate issuer:       /CN=A911CC61/serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D
Certificate serial:       20
Authority key identifier: 04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/87421F34DA3E11F09B1225578ED3641D.roa
Signing time:             Tue 03 Feb 2026 08:26:07 +0000
ROA not before:           Tue 03 Feb 2026 08:26:07 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     64050
IP address blocks:        43.226.17.0/24 maxlen: 24
                          43.226.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl
                          rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 07:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CC61, serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D
        Validity
            Not Before: Feb  3 08:26:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6981b11f-35af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2b:29:3e:88:74:31:c8:7e:c2:df:14:ae:4a:
                    84:77:85:ce:7c:50:d8:a1:2c:81:f6:d2:c4:db:a8:
                    bb:46:b8:fe:29:47:f2:a6:c8:37:0e:0a:1b:6f:4c:
                    bf:9a:fd:c3:1d:1a:5e:4c:86:b9:12:8e:e2:fb:14:
                    20:f7:37:63:e0:6a:e7:cf:57:99:ec:8e:fc:aa:58:
                    13:02:55:43:2a:cd:1f:7d:40:99:be:c2:12:0e:10:
                    65:1b:c2:92:33:9d:a2:aa:0d:1f:8d:e8:67:c2:6f:
                    8f:9f:41:2d:46:61:77:e1:5d:8c:0a:8a:b9:60:40:
                    fb:d6:19:38:7e:24:70:6e:6f:e8:66:b5:9c:df:38:
                    2b:ff:4b:af:fd:38:4a:2a:fa:44:fb:0a:00:94:6f:
                    57:09:48:b6:bb:02:15:89:85:66:f4:cd:6a:25:ed:
                    d8:b8:c1:2c:3b:14:21:b9:2f:a6:4a:63:46:40:48:
                    57:e4:54:06:c3:32:d0:5f:79:76:81:78:e6:71:92:
                    28:f0:f3:f0:66:9f:7c:05:18:cc:c1:6f:34:a7:8a:
                    9f:87:e4:6a:e8:d0:1e:86:28:d3:03:c8:f8:9e:63:
                    f3:03:c7:f6:7b:a8:28:2e:6b:19:6d:84:7f:2e:72:
                    2f:33:0b:7d:f4:ef:8c:e4:52:61:0f:f1:46:ff:36:
                    ec:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3F:13:04:3E:DF:74:6A:9E:4D:3A:DB:2B:C9:BC:A7:66:CC:E2:D3
            X509v3 Authority Key Identifier:
                keyid:04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/87421F34DA3E11F09B1225578ED3641D.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.17.0-43.226.18.255

    Signature Algorithm: sha256WithRSAEncryption
         2b:44:f8:b1:53:bc:34:ba:01:67:9d:3a:d2:cb:cf:6c:5e:8c:
         03:ca:98:ba:4b:d3:29:09:cd:16:c0:2f:ab:e6:c7:85:cf:7e:
         81:9d:d2:46:59:c8:57:22:d9:f8:1b:bf:bb:b2:cb:0f:f4:bb:
         f3:f8:94:cf:21:06:6c:65:13:1c:72:0a:2a:f7:61:69:6c:87:
         5d:f2:44:d9:c9:7a:20:84:e6:7f:12:a5:95:90:2d:bc:99:b7:
         52:9d:a4:81:f0:b8:16:74:85:35:c9:1b:c6:15:7d:55:78:06:
         53:d0:b5:94:fe:17:2c:0a:11:b4:7b:6e:b7:4d:a2:67:ad:0d:
         4d:87:1a:fd:55:86:e7:57:15:0b:41:10:5d:7c:7e:5c:0c:eb:
         0f:5f:88:51:2f:29:0f:d4:d9:d8:28:2e:34:3d:dc:86:51:d6:
         2a:e4:81:5b:c9:8c:8b:b0:bf:f3:41:f5:3d:ca:5c:25:33:94:
         20:81:0e:41:34:d6:82:e4:cd:f3:67:ab:68:96:fa:99:dc:91:
         a8:cd:06:07:c0:31:cd:be:53:a6:4b:80:48:6e:6e:6f:20:9c:
         fa:4b:56:ec:50:e9:05:80:e0:74:f7:22:e0:6d:0a:bc:5d:58:
         9e:c8:73:99:b8:93:90:bb:ff:31:89:40:d4:86:43:4a:35:19:
         ca:77:af:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 09:05:51 2026 by rpki-client