This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/D84149CCEBAB11F090F576B05F6F56BC.roa
File:                     D84149CCEBAB11F090F576B05F6F56BC.roa (raw, json)
Hash identifier:          h2VRAobnA0mg8UYqDlWy8Y+TSm17jE0upU+uVL6pvtg=
Subject key identifier:   D1:D9:93:55:34:F6:15:A2:9C:D6:3D:A7:AC:87:B3:68:09:33:61:51
Certificate issuer:       /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Certificate serial:       0352
Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/D84149CCEBAB11F090F576B05F6F56BC.roa
Signing time:             Wed 07 Jan 2026 09:32:55 +0000
ROA not before:           Wed 07 Jan 2026 09:32:55 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     202736
IP address blocks:        163.53.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
                          rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 00:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850 (0x352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
        Validity
            Not Before: Jan  7 09:32:55 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=695e2847-6536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f1:5e:50:f5:42:4f:7a:37:cf:67:af:b9:f7:
                    37:00:fa:f9:74:f4:ec:00:95:0b:0b:57:76:ed:5f:
                    7e:9a:84:73:9e:11:3e:b8:9c:27:66:e0:b7:61:ce:
                    32:55:f2:6f:ab:07:2c:34:bd:fe:1d:68:12:2d:4c:
                    f1:9c:cd:db:74:13:71:6a:1b:ce:c1:a9:4b:ca:21:
                    31:d3:0f:f4:74:bb:ac:4d:51:59:c1:0a:f1:b1:7b:
                    0b:47:5d:3b:bc:01:15:48:05:ef:89:fd:5a:5c:51:
                    2d:cf:bd:6a:0e:0b:f5:50:20:50:cd:06:07:41:92:
                    a5:bb:6d:f5:9b:33:c5:67:9d:22:e1:c2:e8:1b:90:
                    ad:6c:0f:da:aa:55:87:eb:5b:23:a8:0b:b3:de:b8:
                    23:ed:fe:37:d9:a3:81:11:20:75:9b:41:5b:9e:31:
                    0f:01:e1:be:79:07:b3:04:8a:ab:b8:6e:2d:3f:d1:
                    4a:26:01:7f:c8:70:25:89:0d:89:e3:c7:a1:c7:c4:
                    9a:52:6e:50:d2:47:cc:e5:9f:93:c5:2e:2f:58:a6:
                    8c:9e:5a:d9:f0:b7:f9:2a:6f:3f:72:29:4f:bf:44:
                    0f:80:e7:17:56:1b:02:db:05:ea:04:14:0f:1c:58:
                    32:12:25:87:69:0a:ee:5a:41:e9:68:46:35:bb:88:
                    31:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D9:93:55:34:F6:15:A2:9C:D6:3D:A7:AC:87:B3:68:09:33:61:51
            X509v3 Authority Key Identifier:
                keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/D84149CCEBAB11F090F576B05F6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:03:b3:13:ef:2a:44:67:0e:5c:e0:3f:4b:3d:7a:06:25:4f:
         4b:1b:63:26:5a:f5:27:81:c9:49:50:f2:68:7f:bc:c9:80:d4:
         11:fe:53:5d:f3:67:45:1a:b9:bc:ed:09:da:a3:28:ec:96:84:
         a1:45:77:59:e6:03:40:63:28:67:67:59:fd:59:ff:9d:2c:44:
         14:13:c0:79:17:e7:50:6d:ec:6b:2b:6d:36:3e:fe:99:88:60:
         ab:ef:18:22:34:3e:6d:5f:80:78:7d:ba:21:8b:00:f4:65:63:
         22:c2:72:14:22:50:7a:2c:15:07:5e:64:f6:e0:79:c9:3b:fd:
         26:4c:c4:f2:fa:19:97:58:6c:3d:3b:73:c2:58:ee:e3:4a:68:
         0e:0f:dd:28:a7:dc:69:65:08:13:0a:f6:5f:93:b2:a9:f8:d2:
         a2:45:6c:1b:9b:be:fc:04:81:20:72:0c:2b:11:d8:a6:62:44:
         c8:b2:dc:ab:ad:88:db:ff:a3:86:42:d0:76:c0:0a:7c:95:14:
         6a:44:b4:08:f7:0b:97:d0:a1:04:a5:7d:0c:20:4f:ca:25:54:
         31:ae:07:8b:66:83:b6:ca:35:79:e5:95:26:3c:29:44:76:53:
         10:e2:8d:ae:fe:74:54:e6:d0:b5:24:f7:84:7e:fb:9b:89:49:
         39:e3:7c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 07:31:25 2026 by rpki-client