This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/6EA43FD8F1C311F0B949DD23396F56BC.roa
File:                     6EA43FD8F1C311F0B949DD23396F56BC.roa (raw, json)
Hash identifier:          Hhg96H8lwd/nsrjCeQVuf9WiqtT9z843PE3CA+YlQQQ=
Subject key identifier:   5B:A5:AB:BD:69:71:56:5A:AE:59:61:06:55:E1:E6:E2:54:68:79:54
Certificate issuer:       /CN=A915B358/serialNumber=80C82B9D42661798D1A2E00BCEAB06F3E4E1A35E
Certificate serial:       03
Authority key identifier: 80:C8:2B:9D:42:66:17:98:D1:A2:E0:0B:CE:AB:06:F3:E4:E1:A3:5E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/6EA43FD8F1C311F0B949DD23396F56BC.roa
Signing time:             Thu 15 Jan 2026 03:36:53 +0000
ROA not before:           Thu 15 Jan 2026 03:36:52 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     142200
IP address blocks:        151.158.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.crl
                          rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 06:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B358, serialNumber=80C82B9D42661798D1A2E00BCEAB06F3E4E1A35E
        Validity
            Not Before: Jan 15 03:36:52 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=696860d4-6089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b6:56:4e:5e:d7:91:67:e0:b6:80:ba:3b:51:
                    3e:ef:76:89:3a:91:19:d7:ec:3e:d9:de:a2:32:fc:
                    5a:51:cf:e1:25:c8:a0:b7:27:c1:da:f0:47:18:cd:
                    b7:ad:07:4b:fc:33:25:a0:06:aa:e7:09:a4:5d:a6:
                    65:55:6a:9b:bf:5d:7a:87:75:77:bf:58:e8:18:5c:
                    ab:7b:27:a8:2c:f8:51:8d:c3:e5:df:3f:c7:93:da:
                    eb:42:a5:2d:eb:58:73:e6:6a:0e:bf:ea:11:03:f3:
                    7b:8a:aa:ba:bd:95:20:2c:53:77:8d:7f:29:71:7e:
                    49:e3:d9:ab:28:1f:9d:ef:48:bc:12:f4:a9:38:f1:
                    e0:13:60:4e:a1:ea:a4:0a:05:b0:b6:88:35:1a:44:
                    bf:34:ba:bc:b9:a5:06:92:f6:5e:48:eb:14:70:ce:
                    5a:f5:ca:13:af:74:7e:62:f6:ee:79:a4:38:86:80:
                    43:ff:b2:81:d4:8f:e7:ad:92:21:cb:d4:a8:ca:e9:
                    3f:01:c2:ff:52:d0:3f:24:59:2f:04:61:4c:9b:f8:
                    2a:96:0f:4e:30:9d:bd:8d:c4:4a:07:a7:24:5d:e4:
                    01:94:18:63:5c:a3:e2:d5:fe:85:17:84:1c:10:79:
                    63:21:3e:76:2c:a8:e5:29:0f:92:e7:fd:5a:06:64:
                    9c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A5:AB:BD:69:71:56:5A:AE:59:61:06:55:E1:E6:E2:54:68:79:54
            X509v3 Authority Key Identifier:
                keyid:80:C8:2B:9D:42:66:17:98:D1:A2:E0:0B:CE:AB:06:F3:E4:E1:A3:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/6EA43FD8F1C311F0B949DD23396F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:3b:73:04:84:17:a6:39:bc:94:70:5d:ba:70:08:2b:56:2b:
         72:45:b0:60:30:8e:4e:d9:92:41:65:43:90:aa:77:e8:86:4b:
         bd:9e:6d:00:48:c3:84:18:be:4d:2a:aa:78:f4:87:76:5b:ee:
         f2:6c:23:dc:78:9d:70:61:32:f3:db:9c:19:e8:f2:5c:5e:62:
         03:4a:02:c2:24:66:a0:6c:f0:b0:25:1e:69:91:32:f9:79:85:
         93:bd:0d:10:82:4d:62:95:ab:e8:3d:31:84:60:f4:90:96:51:
         d1:be:1d:da:39:a6:5d:1a:a5:d0:78:b3:3a:43:0a:4b:f2:10:
         02:3f:dc:d4:f3:3e:c6:ed:3c:8e:65:ee:3f:35:45:a8:06:2d:
         56:27:f5:01:2f:2d:c8:b7:b1:7c:63:64:b1:ce:bf:7f:fa:26:
         37:d2:10:cb:95:df:4a:5e:d9:b6:39:a1:be:d4:ef:1f:ed:b9:
         53:f7:30:6d:cb:16:cb:2e:9a:25:43:9c:0d:c3:76:cb:84:7b:
         aa:16:ca:c0:21:4d:2b:af:57:95:2c:e8:49:1d:45:b7:52:0b:
         08:57:a3:72:3b:70:74:2a:51:e7:67:45:1c:ac:be:a7:97:3d:
         d5:9c:bb:b1:3e:04:ab:be:89:35:8d:0a:09:7f:79:c6:46:e7:
         90:67:26:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 09:23:04 2026 by rpki-client