This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/6F81A4F8E64811F09CAB54BE376F56BC.roa
File:                     6F81A4F8E64811F09CAB54BE376F56BC.roa (raw, json)
Hash identifier:          Iu+jMJSYCe8XXlTEkGVJAiiEoPkUb2VpGs090qWjkVc=
Subject key identifier:   41:71:82:87:2A:DF:D7:F8:FA:4D:EE:EF:4C:D4:81:7C:52:FF:81:95
Certificate issuer:       /CN=A914E4E2/serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174
Certificate serial:       0A
Authority key identifier: 81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/6F81A4F8E64811F09CAB54BE376F56BC.roa
Signing time:             Wed 31 Dec 2025 12:58:43 +0000
ROA not before:           Wed 31 Dec 2025 12:58:43 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154047
IP address blocks:        144.79.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4E2, serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174
        Validity
            Not Before: Dec 31 12:58:43 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69551e03-a8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e3:24:26:f2:11:f4:85:f3:89:d3:9c:85:cd:
                    8f:06:9d:29:08:33:e7:b4:ec:b9:0e:c4:59:7e:c4:
                    54:0a:03:69:b4:1b:68:ae:b4:c1:85:df:ef:bd:f4:
                    97:db:71:f5:bb:38:b4:19:47:be:c4:85:e2:46:92:
                    c8:3b:60:44:7e:12:10:96:e5:07:eb:33:f6:16:6a:
                    53:d6:c0:4c:5b:2f:5d:81:11:57:3c:a1:70:18:c5:
                    a6:86:5d:f6:27:e5:0c:11:a5:78:ff:d8:fe:b9:79:
                    28:43:24:92:a2:32:45:98:28:2b:28:fb:52:60:0f:
                    d6:65:ea:9b:60:36:19:93:49:7b:ae:21:14:be:74:
                    f4:bd:d7:4f:ac:b3:95:4d:8c:62:24:0f:35:0c:27:
                    5e:ea:71:8d:ea:bf:0e:2b:00:b1:8d:94:56:cf:92:
                    ce:55:3f:bf:ba:c7:d2:22:ec:3b:2d:00:1a:e3:30:
                    16:9e:a2:1c:e2:e1:7a:c4:d5:61:71:93:d5:23:67:
                    9b:69:98:96:71:a8:d9:a1:62:fa:62:ab:19:6b:ff:
                    68:d5:a5:88:f3:b1:75:b8:15:4e:b2:20:c9:e3:9a:
                    4f:02:b7:7b:d3:00:98:57:23:1e:85:3f:7e:28:ae:
                    a1:6c:d0:41:e4:36:6b:d0:3a:75:ac:6e:33:b9:5b:
                    4a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:71:82:87:2A:DF:D7:F8:FA:4D:EE:EF:4C:D4:81:7C:52:FF:81:95
            X509v3 Authority Key Identifier:
                keyid:81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/6F81A4F8E64811F09CAB54BE376F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:6c:5b:a6:0c:de:1c:19:0e:0a:20:e2:c8:eb:c0:fe:54:eb:
         26:db:bb:9b:ce:ab:ca:eb:83:07:c2:4d:9a:c3:c5:a4:a7:88:
         91:d7:fa:da:62:f8:46:0a:e9:62:91:7e:21:1f:32:7c:39:94:
         ce:8c:97:f0:b9:f3:55:0f:57:13:8e:c4:7a:b0:9a:b7:d0:7a:
         ae:53:20:03:e3:7e:a4:32:db:f7:69:c1:c8:c4:30:8b:d5:d9:
         f5:a2:f3:0c:92:ba:e4:e0:71:83:12:22:7e:b9:02:53:f7:11:
         d5:d0:46:6b:58:b9:1d:c1:be:82:1a:00:a7:42:aa:e7:9e:1d:
         04:b8:d1:54:76:ae:df:94:84:02:ff:ca:0c:81:2e:49:63:96:
         2c:5e:d5:29:93:15:60:14:fd:ec:00:94:e9:d0:d0:f7:5d:03:
         71:a1:28:2f:b5:1d:c6:64:ad:1b:f0:c4:a5:4d:19:43:47:09:
         7e:a4:ee:9c:1e:98:08:64:f0:d8:5e:62:0e:1b:55:5e:39:d9:
         66:1c:05:6a:30:92:a5:14:75:5d:b8:3b:37:fc:cb:5e:84:45:
         1c:c7:34:30:ee:8f:2a:c0:5c:3b:69:0a:34:7d:93:25:c3:e9:
         99:e9:00:c9:01:09:6c:c6:6d:7c:44:0f:b0:36:6b:bf:de:9b:
         d6:4d:6e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:08:44 2026 by rpki-client