This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/EC0E245CF74211EEA182A952C4F9AE02.roa
File:                     EC0E245CF74211EEA182A952C4F9AE02.roa (raw, json)
Hash identifier:          la7Z7gb79x/WPpDBpQlTfdraImLy824v/LxxnKpXS7o=
Subject key identifier:   B3:09:2E:A6:18:D1:8E:2E:F0:75:3C:E1:A2:02:34:81:21:D7:84:E2
Certificate issuer:       /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial:       1A30
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/EC0E245CF74211EEA182A952C4F9AE02.roa
Signing time:             Thu 08 Jan 2026 17:13:55 +0000
ROA not before:           Thu 08 Jan 2026 17:13:55 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     45758
IP address blocks:        118.214.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
                          rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 16:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6704 (0x1a30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
        Validity
            Not Before: Jan  8 17:13:55 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=695fe5d3-08fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:1d:8d:9a:7d:c6:06:fd:1b:40:b2:5a:f6:
                    5f:df:ee:39:d2:76:fc:2f:96:50:1b:ab:5b:cd:a7:
                    8b:37:93:87:eb:6e:f5:0c:21:d2:66:94:e9:36:d2:
                    d8:c7:fd:9a:01:24:d5:95:01:02:ae:b2:4c:74:0a:
                    a5:1b:14:7e:8a:0f:fd:fd:a2:c8:3d:94:93:7a:ab:
                    df:ef:58:df:9f:9e:a2:42:2f:2a:93:ba:80:e4:7a:
                    1a:fd:25:40:44:43:b0:03:eb:8e:44:af:5b:c1:9f:
                    c4:22:29:53:37:5e:6b:97:2a:e7:ac:5d:ba:2f:c8:
                    8a:a6:46:29:40:9f:ad:18:83:40:77:00:b0:9d:43:
                    f7:21:fa:f9:ae:d0:55:6e:dc:f9:32:3e:60:1f:65:
                    a4:3b:99:d7:99:a1:51:da:1f:8f:20:8f:d3:f4:e8:
                    87:8e:f7:56:3e:67:80:58:3f:5a:92:59:75:10:e2:
                    af:d8:6f:59:0a:ce:fd:72:31:a6:ac:02:3f:d0:71:
                    51:aa:ad:9c:8d:fc:32:8d:0a:5c:5a:4c:f2:d8:f6:
                    ee:96:79:74:7c:c6:03:71:02:ba:90:48:fd:e3:9a:
                    4e:35:8f:33:14:78:4f:a8:a8:75:8c:a8:4f:ec:7a:
                    1e:e0:52:48:39:a6:27:37:e5:95:3e:3a:7a:f2:c7:
                    f8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:09:2E:A6:18:D1:8E:2E:F0:75:3C:E1:A2:02:34:81:21:D7:84:E2
            X509v3 Authority Key Identifier:
                keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/EC0E245CF74211EEA182A952C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.214.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:5e:65:ef:26:5e:4c:4f:74:57:a6:ec:14:e2:90:bb:ce:3d:
         c7:dc:9e:49:f1:3f:58:61:ff:17:62:98:e5:54:02:ad:6e:e3:
         2f:ef:af:5e:61:bb:90:ab:4f:7d:89:12:71:a1:bb:01:f9:85:
         0d:6c:17:17:b2:c5:f5:0b:ac:f7:15:5b:d8:de:3f:15:99:00:
         88:6d:f6:82:08:b5:1e:68:98:40:a9:61:1f:c1:19:e9:4a:a6:
         39:eb:e5:44:b1:ae:74:b8:ed:b3:43:80:de:36:4d:68:ed:c5:
         fd:37:44:c8:0c:e3:5b:4e:bc:07:5d:ae:77:6f:84:5a:3b:9e:
         6a:02:f8:5b:8c:b7:15:0e:9f:ae:5b:a1:bc:eb:a9:68:3e:f0:
         69:72:ff:a6:45:c5:8e:d5:9e:b9:6d:5e:ef:8c:60:0e:a5:41:
         b8:ff:ca:ec:0a:40:39:94:69:a6:0f:03:5e:15:ac:3b:ab:fb:
         d4:24:82:4f:19:48:8d:b3:06:fc:97:f5:3b:55:4a:48:54:a9:
         bb:b5:e3:f9:db:a8:6a:fa:05:78:c4:a7:ca:29:27:d6:2b:af:
         2f:ae:e6:8d:ee:4a:71:f8:18:64:84:e8:af:b1:0a:1a:a4:fa:
         53:3f:eb:02:29:5d:a0:6c:cc:90:f9:05:11:40:72:d9:93:2d:
         2e:fa:be:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:09:28 2026 by rpki-client