This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/4A5A1A32001211F1BC55B3C9406F56BC.roa
File:                     4A5A1A32001211F1BC55B3C9406F56BC.roa (raw, json)
Hash identifier:          c3V4d1AFObIqMsdVFrFDXoSnLgViV5fxMQTh3NziXWE=
Subject key identifier:   99:E1:FA:C8:0C:FD:CF:B3:F2:DF:80:06:FA:60:40:56:04:C2:14:DA
Certificate issuer:       /CN=A914D648/serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
Certificate serial:       02
Authority key identifier: 89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/4A5A1A32001211F1BC55B3C9406F56BC.roa
Signing time:             Mon 02 Feb 2026 08:36:38 +0000
ROA not before:           Mon 02 Feb 2026 08:36:38 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     4686
IP address blocks:        45.124.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl
                          rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 08:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D648, serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
        Validity
            Not Before: Feb  2 08:36:38 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69806216-d41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:b2:c3:75:8c:9b:94:06:f2:33:d8:02:cc:
                    17:7d:25:65:d7:ff:fb:72:b8:a6:8b:23:f6:1c:24:
                    98:5f:24:d8:44:9a:6d:d1:c7:96:ef:d4:45:86:49:
                    f9:ea:56:31:64:44:4d:14:0a:5b:8b:31:6a:9a:1c:
                    ff:37:cd:92:f8:89:17:6a:3a:14:20:52:ec:67:42:
                    b4:9b:45:aa:7f:8b:60:c1:7f:4d:14:db:2b:5d:35:
                    db:29:b5:aa:0d:fe:4e:1f:8f:7d:99:0b:ef:a5:13:
                    56:85:df:4e:b3:55:ba:c6:ce:7b:e0:c0:15:a5:97:
                    c9:a0:ab:af:06:17:cb:e9:95:e7:ed:e5:75:90:72:
                    de:83:a4:87:86:51:62:9e:22:b0:70:59:15:40:5b:
                    33:cb:23:8d:4f:26:a3:07:b4:05:db:ac:64:e7:c3:
                    f6:6d:a9:7b:e8:3d:0f:2e:67:55:3c:0f:14:80:2b:
                    f2:68:de:4c:84:e9:4f:58:7b:0a:13:ff:f9:23:89:
                    37:32:c7:17:02:3c:10:db:5f:59:6d:b8:ab:c2:c5:
                    19:e4:83:7f:d2:5c:12:bd:ac:d8:3e:54:32:55:c8:
                    bb:e5:92:aa:84:42:8d:53:ec:f5:15:6f:a7:59:df:
                    9d:b7:f0:14:3f:87:62:68:b3:d9:80:2f:2c:2d:da:
                    c7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E1:FA:C8:0C:FD:CF:B3:F2:DF:80:06:FA:60:40:56:04:C2:14:DA
            X509v3 Authority Key Identifier:
                keyid:89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/4A5A1A32001211F1BC55B3C9406F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:59:0c:34:a4:88:d1:80:47:bf:64:25:91:ab:9c:f9:9e:61:
         ce:3d:5d:6a:36:f9:70:6c:b1:37:54:4f:eb:23:16:4d:0a:ca:
         10:f4:85:76:62:7b:4d:0f:ca:d5:16:8a:15:41:c5:17:be:6e:
         d7:bb:dc:2d:0b:e9:b2:42:de:11:ff:44:80:f6:2b:35:d3:c9:
         fa:e4:f7:ea:45:6b:b9:78:05:7d:c9:63:ab:ef:6f:33:c8:e6:
         3b:ca:11:f1:ac:54:5e:2c:c7:02:d3:22:21:0e:46:70:af:f2:
         bc:2a:f2:db:3f:4b:2a:c1:1b:d0:f4:dd:5d:c2:ec:ec:4e:97:
         2b:4b:57:88:d1:8a:11:9b:5c:aa:44:55:27:ba:b6:17:f6:33:
         9c:1c:5d:03:48:5f:5f:b5:c1:06:00:89:dc:ae:fd:99:a0:f0:
         e4:2d:fa:16:6a:2a:cb:fc:96:e5:1c:31:0f:68:04:10:86:32:
         4c:4d:84:92:52:b0:53:a2:67:27:4c:80:04:55:d9:d3:01:4d:
         05:b4:f3:47:0a:dc:36:87:2b:84:50:7d:72:6e:aa:b7:cb:32:
         b5:fd:a2:28:85:97:d1:71:d1:ef:e6:6a:58:97:fb:03:b7:26:
         77:80:b3:db:ba:0c:14:32:d3:4b:70:6b:64:3b:a8:64:e8:48:
         95:94:d2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 21:17:48 2026 by rpki-client