This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/E7A0471CF5FE11F091C416DF536F56BC.roa
File:                     E7A0471CF5FE11F091C416DF536F56BC.roa (raw, json)
Hash identifier:          VZSusW1SvePvDsCFgC57GSQjHr5EAW11L+shBHd32fA=
Subject key identifier:   52:8A:08:1E:1D:77:F2:B3:AF:F8:BE:00:21:76:D0:92:15:22:20:67
Certificate issuer:       /CN=A9154515/serialNumber=DE6D48F0783EC753A2A57A51982232D0B737BDC6
Certificate serial:       04
Authority key identifier: DE:6D:48:F0:78:3E:C7:53:A2:A5:7A:51:98:22:32:D0:B7:37:BD:C6
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/E7A0471CF5FE11F091C416DF536F56BC.roa
Signing time:             Tue 20 Jan 2026 12:53:16 +0000
ROA not before:           Tue 20 Jan 2026 12:53:16 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     142647
IP address blocks:        151.158.46.0/24 maxlen: 24
                          151.158.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl
                          rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 06:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154515, serialNumber=DE6D48F0783EC753A2A57A51982232D0B737BDC6
        Validity
            Not Before: Jan 20 12:53:16 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696f7abc-5473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:64:96:a1:6f:cf:e7:b4:68:98:f1:3c:69:
                    8e:52:3c:57:e1:5a:fc:5c:86:6e:81:03:e5:fd:a3:
                    51:9c:e5:31:e2:f9:bd:e5:55:a5:a5:83:be:b8:d6:
                    96:3c:b8:1b:42:a4:5f:ec:a0:1c:04:5a:76:4b:78:
                    f1:d2:88:c1:8f:93:1d:e4:5f:57:2d:4b:db:78:d6:
                    91:a5:1d:78:21:9b:61:da:fc:98:0b:b7:7c:b5:f6:
                    fa:fd:75:c3:db:af:9a:74:c4:35:90:34:a1:bc:7c:
                    88:2a:d3:93:bc:be:bd:1c:ae:51:8b:a3:5e:7d:91:
                    e3:c9:9a:3b:26:9f:0b:5f:d8:08:61:fa:4e:f5:49:
                    b0:28:75:80:f8:5a:32:61:fb:76:02:e1:7f:a5:e0:
                    e2:50:fd:c7:a5:68:ed:de:87:fd:e6:7e:04:75:1b:
                    d6:4c:54:6c:99:f1:f2:1c:80:cd:7a:51:a5:47:e1:
                    23:8a:4e:09:d8:5b:08:ba:c3:97:dc:0b:36:4b:49:
                    c5:51:b1:ec:2d:44:0b:de:3a:3e:93:eb:a0:49:46:
                    26:8b:03:9c:94:7d:ec:d7:d7:3b:85:5c:17:cb:9e:
                    5a:b1:0a:00:96:9f:d5:9c:1c:40:59:5b:a4:c7:a4:
                    de:f5:46:9d:74:72:cf:e6:b1:07:c0:e9:71:69:dc:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8A:08:1E:1D:77:F2:B3:AF:F8:BE:00:21:76:D0:92:15:22:20:67
            X509v3 Authority Key Identifier:
                keyid:DE:6D:48:F0:78:3E:C7:53:A2:A5:7A:51:98:22:32:D0:B7:37:BD:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/E7A0471CF5FE11F091C416DF536F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:96:c2:c1:d2:4c:f7:77:27:5a:a9:d1:de:c9:66:4b:e8:61:
         92:eb:42:fb:69:94:af:30:d4:1c:0d:75:a0:93:cc:61:e8:b1:
         a1:3a:08:3c:50:88:20:f4:cb:87:e9:d3:90:6e:4e:bf:c6:81:
         4b:e9:ed:1a:23:ba:5a:d4:17:b9:19:bb:6c:fb:c9:b6:fa:a6:
         ed:64:c6:0b:8d:3b:ed:bc:32:06:b3:40:f2:ed:74:dd:f6:94:
         f1:0e:3d:33:c6:d4:dd:16:ab:f1:d1:7b:5f:16:29:59:31:3e:
         05:8f:2b:c1:66:7d:75:64:a0:79:90:d1:2a:d4:ba:38:ba:22:
         25:b2:86:72:c8:c7:a9:52:a7:34:d6:4b:84:03:33:9a:87:6e:
         94:1b:d6:d0:22:43:fb:1a:6e:dc:73:3e:e7:15:dc:37:95:76:
         6b:33:11:1b:25:cb:94:fa:ef:a1:ae:92:aa:28:a7:4d:3f:44:
         8d:8e:96:21:33:d8:a0:f6:09:97:fc:0c:e3:9a:1c:e8:54:65:
         fb:da:a0:9f:52:4a:ab:65:17:15:de:96:c6:ed:eb:a8:ff:85:
         9b:b1:d6:7e:1b:27:22:02:ff:34:77:d1:ef:a3:8f:b8:7d:19:
         9d:9e:c1:65:b9:b5:9d:cc:5f:52:8a:2c:6c:e5:1e:e8:4a:50:
         c1:d1:19:7a
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE1
NDUxNTExMC8GA1UEBRMoREU2RDQ4RjA3ODNFQzc1M0EyQTU3QTUxOTgyMjMyRDBC
NzM3QkRDNjAeFw0yNjAxMjAxMjUzMTZaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NmY3YWJjLTU0NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDF0mSWoW/P57RomPE8aY5SPFfhWvxchm6BA+X9o1Gc5THi+b3lVaWlg7641pY8
uBtCpF/soBwEWnZLePHSiMGPkx3kX1ctS9t41pGlHXghm2Ha/JgLt3y19vr9dcPb
r5p0xDWQNKG8fIgq05O8vr0crlGLo159kePJmjsmnwtf2Ahh+k71SbAodYD4WjJh
+3YC4X+l4OJQ/celaO3eh/3mfgR1G9ZMVGyZ8fIcgM16UaVH4SOKTgnYWwi6w5fc
CzZLScVRsewtRAveOj6T66BJRiaLA5yUfezX1zuFXBfLnlqxCgCWn9WcHEBZW6TH
pN71Rp10cs/msQfA6XFp3JwNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUUooIHh13
8rOv+L4AIXbQkhUiIGcwHwYDVR0jBBgwFoAU3m1I8Hg+x1OipXpRmCIy0Lc3vcYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0NTE1LzkyREEwODEyRjVG
RTExRjA5MURCMENERTUzNkY1NkJDLzNtMUk4SGcteDFPaXBYcFJtQ0l5MExjM3Zj
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvM20xSThIZy14MU9pcFhwUm1DSXkwTGMzdmNZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDUxNS85MkRBMDgxMkY1RkUxMUYwOTFEQjBDREU1MzZGNTZCQy9FN0EwNDcxQ0Y1
RkUxMUYwOTFDNDE2REY1MzZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAZeeLjANBgkqhkiG9w0BAQsFAAOCAQEAcZbCwdJM93cnWqnR
3slmS+hhkutC+2mUrzDUHA11oJPMYeixoToIPFCIIPTLh+nTkG5Ov8aBS+ntGiO6
WtQXuRm7bPvJtvqm7WTGC4077bwyBrNA8u103faU8Q49M8bU3Rar8dF7XxYpWTE+
BY8rwWZ9dWSgeZDRKtS6OLoiJbKGcsjHqVKnNNZLhAMzmodulBvW0CJD+xpu3HM+
5xXcN5V2azMRGyXLlPrvoa6SqiinTT9EjY6WITPYoPYJl/wM45oc6FRl+9qgn1JK
q2UXFd6Wxu3rqP+Fm7HWfhsnIgL/NHfR76OPuH0ZnZ7BZbm1ncxfUoosbOUe6EpQ
wdEZeg==
-----END CERTIFICATE-----
Generated at Wed Jan 21 09:21:33 2026 by rpki-client