This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6C286292CFEB11F085499838C4F9AE02.roa
File:                     6C286292CFEB11F085499838C4F9AE02.roa (raw, json)
Hash identifier:          1TpSJEmRROJSwqg68s2dOzJAgF0YckSOk526a0ffXdg=
Subject key identifier:   11:89:BB:C4:BF:B6:72:58:0C:C6:24:34:E7:AF:A5:5D:4F:9D:12:8A
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       1927
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6C286292CFEB11F085499838C4F9AE02.roa
Signing time:             Mon 02 Feb 2026 15:47:50 +0000
ROA not before:           Mon 02 Feb 2026 15:47:50 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     31898
IP address blocks:        101.0.64.0/18 maxlen: 24
                          116.90.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 02:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6439 (0x1927)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Feb  2 15:47:50 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6980c726-4acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f7:33:3a:d9:2a:9a:96:95:2a:2d:b6:d2:0b:
                    50:9c:96:3a:2a:83:5c:b3:3d:88:28:37:64:df:99:
                    d3:76:f1:fc:c0:a6:2e:4f:58:d7:0c:b7:60:c6:07:
                    1f:3c:00:1d:f2:02:6a:d3:45:b2:29:25:79:a9:20:
                    e9:58:67:37:1e:ca:5d:29:99:ad:64:e4:79:52:0f:
                    32:cd:1b:89:c7:29:d7:95:d1:0c:2a:9a:31:3e:da:
                    9b:91:c0:fe:71:1b:84:ae:43:54:83:aa:c0:89:55:
                    7b:5a:af:31:19:f7:09:f7:d1:b4:0f:15:cc:20:38:
                    13:95:31:5c:72:05:cc:54:0f:c0:bf:bf:28:dd:ad:
                    ee:8e:eb:35:93:51:c2:5a:e9:80:1b:81:a8:4e:14:
                    1f:e7:e7:cc:f2:b3:8d:3b:fe:db:e0:6e:fd:f3:6a:
                    ed:f6:2a:43:2c:29:8f:89:cf:1e:f7:4e:41:f3:b5:
                    29:7a:bc:aa:a7:a2:36:79:76:78:0b:eb:7f:f9:5c:
                    a3:49:a7:85:03:1c:8a:6b:20:49:82:db:2c:15:79:
                    1a:0a:b0:88:61:ac:ff:51:a6:2c:af:3e:1c:a6:6b:
                    48:61:fb:50:8f:60:dc:ab:09:69:c9:53:e3:ce:6d:
                    53:bd:c7:d7:40:9a:0c:fb:64:ba:cc:85:e7:67:53:
                    31:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:89:BB:C4:BF:B6:72:58:0C:C6:24:34:E7:AF:A5:5D:4F:9D:12:8A
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6C286292CFEB11F085499838C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.64.0/18
                  116.90.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6f:08:81:ab:ff:e2:bc:52:6b:a7:5f:f8:05:77:05:33:9d:58:
         5e:e9:d5:87:d7:2c:fa:18:9e:4e:57:2a:16:2e:11:42:ae:c8:
         19:97:53:cd:c1:b2:7a:a9:41:1f:25:ab:e1:1b:a0:56:d0:5a:
         d5:83:d1:69:e5:3a:63:4c:83:56:78:21:03:49:c5:6a:b7:b3:
         af:e1:f1:09:5d:5b:07:27:53:49:6c:06:cb:00:07:97:0e:4a:
         dd:87:3f:bf:a2:2d:d5:22:ed:9a:8c:06:c0:13:31:f9:74:8f:
         01:64:1c:4e:ef:64:2f:58:0a:84:2e:c5:57:d8:e5:ad:e5:12:
         61:28:53:a1:07:ee:0f:43:d8:0d:01:04:53:29:35:a8:5a:b5:
         fd:be:da:5f:47:76:70:90:17:b5:a7:ed:80:da:8c:f2:68:19:
         2d:70:a6:92:e9:95:ca:b9:2d:0e:9a:9a:8e:07:a6:9b:76:48:
         b2:72:40:1c:9d:7b:06:1b:e4:5f:b5:76:f9:f6:08:3a:9e:96:
         d1:36:45:08:bd:9d:c6:45:26:9b:89:4f:17:77:14:31:a9:ab:
         d9:09:b3:12:25:9b:15:81:20:d4:cd:ec:6d:88:63:26:a6:c2:
         82:3b:e2:e1:90:8e:f6:ef:2c:b7:89:a8:17:3b:da:54:dc:21:
         58:cd:48:49
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICGScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIzM0UxMTAvBgNVBAUTKEQwMDcyRURFQjY3RTE3NTJBQjc1MjI2M0E0RkQ5NDUw
REQzQTMzRUMwHhcNMjYwMjAyMTU0NzUwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgwYzcyNi00YWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvvczOtkqmpaVKi220gtQnJY6KoNcsz2IKDdk35nTdvH8wKYuT1jXDLdgxgcf
PAAd8gJq00WyKSV5qSDpWGc3HspdKZmtZOR5Ug8yzRuJxynXldEMKpoxPtqbkcD+
cRuErkNUg6rAiVV7Wq8xGfcJ99G0DxXMIDgTlTFccgXMVA/Av78o3a3ujus1k1HC
WumAG4GoThQf5+fM8rONO/7b4G7982rt9ipDLCmPic8e905B87Uperyqp6I2eXZ4
C+t/+VyjSaeFAxyKayBJgtssFXkaCrCIYaz/UaYsrz4cpmtIYftQj2DcqwlpyVPj
zm1TvcfXQJoM+2S6zIXnZ1MxvQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBGJu8S/
tnJYDMYkNOevpV1PnRKKMB8GA1UdIwQYMBaAFNAHLt62fhdSq3UiY6T9lFDdOjPs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMzRS8yRjY2QjU3QUI4
M0UxMUU3QTAxRDY2NTBDNEY5QUUwMi8wQWN1M3JaLUYxS3JkU0pqcFAyVVVOMDZN
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBBY3UzclotRjFLcmRTSmpwUDJVVU4wNk0tdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkIzM0UvMkY2NkI1N0FCODNFMTFFN0EwMUQ2NjUwQzRGOUFFMDIvNkMyODYyOTJD
RkVCMTFGMDg1NDk5ODM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAZlAEADBAZ0WgAwDQYJKoZIhvcNAQELBQADggEBAG8Igav/
4rxSa6df+AV3BTOdWF7p1YfXLPoYnk5XKhYuEUKuyBmXU83BsnqpQR8lq+EboFbQ
WtWD0WnlOmNMg1Z4IQNJxWq3s6/h8QldWwcnU0lsBssAB5cOSt2HP7+iLdUi7ZqM
BsATMfl0jwFkHE7vZC9YCoQuxVfY5a3lEmEoU6EH7g9D2A0BBFMpNahatf2+2l9H
dnCQF7Wn7YDajPJoGS1wppLplcq5LQ6amo4Hppt2SLJyQBydewYb5F+1dvn2CDqe
ltE2RQi9ncZFJpuJTxd3FDGpq9kJsxIlmxWBINTN7G2IYyamwoI74uGQjvbvLLeJ
qBc72lTcIVjNSEk=
-----END CERTIFICATE-----
Generated at Thu Feb 5 05:59:13 2026 by rpki-client