This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/694A4554ED2311F09CB4E0CD436F56BC.roa
File:                     694A4554ED2311F09CB4E0CD436F56BC.roa (raw, json)
Hash identifier:          NscRI7Tj7nB7aaEvUT/ZVUoTxSyW2OBR1girJmJqCVE=
Subject key identifier:   B1:8D:E4:F2:22:7E:EF:7E:A8:79:FC:D1:65:F6:79:BB:89:78:91:19
Certificate issuer:       /CN=A9178992/serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
Certificate serial:       04
Authority key identifier: D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/694A4554ED2311F09CB4E0CD436F56BC.roa
Signing time:             Sat 10 Jan 2026 03:50:43 +0000
ROA not before:           Sat 10 Jan 2026 03:50:43 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152685
IP address blocks:        192.232.58.0/23 maxlen: 23
                          192.232.58.0/24 maxlen: 24
                          192.232.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl
                          rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 07:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178992, serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
        Validity
            Not Before: Jan 10 03:50:43 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6961cc93-f3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1b:83:56:5f:15:3f:e7:f4:40:38:0f:60:01:
                    87:8c:ab:cd:b9:ae:cf:dc:bb:68:5f:91:60:0c:85:
                    0d:25:f1:af:36:77:7e:79:79:aa:c7:60:44:1f:9e:
                    29:8e:9d:7e:8d:01:a6:4c:35:44:d7:10:ef:38:58:
                    af:98:08:c5:ca:c6:6f:cb:09:e2:b3:b9:19:c1:6e:
                    18:c7:e5:3e:44:5a:77:23:2f:2a:a0:b3:ed:ff:c1:
                    e8:a2:ca:30:d8:a2:28:47:ff:f4:71:93:18:2c:a5:
                    04:0c:89:88:56:64:1f:26:a7:f7:1b:4a:7a:a5:8c:
                    84:5c:ba:9c:da:94:37:7b:4d:20:9d:79:a0:5a:5c:
                    b2:aa:f0:b9:de:f1:d8:9d:a1:69:04:bb:22:66:34:
                    e5:10:7b:78:11:61:fb:44:cd:41:94:6e:d3:d4:28:
                    35:38:e7:85:a1:96:2a:7d:5d:99:7a:0e:cf:5c:91:
                    24:bb:15:33:12:e3:8a:20:87:b0:23:9e:ad:3c:e2:
                    42:49:7f:80:d2:ef:6b:49:bb:4f:6e:49:b1:eb:7b:
                    41:75:fc:7c:49:a5:7d:cc:03:af:4a:f6:7a:10:3c:
                    8a:bc:87:eb:7f:fb:42:24:d8:a6:dc:a8:fb:b5:b4:
                    37:82:26:81:12:4e:5f:67:6e:f1:5c:bd:e1:11:c2:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8D:E4:F2:22:7E:EF:7E:A8:79:FC:D1:65:F6:79:BB:89:78:91:19
            X509v3 Authority Key Identifier:
                keyid:D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/694A4554ED2311F09CB4E0CD436F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.232.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:d4:bf:86:2c:e9:82:33:76:45:78:69:3a:f9:27:58:0e:b3:
         df:31:ae:2e:07:d5:9d:b4:8b:8d:a8:9b:f8:ed:9d:7a:d8:1e:
         cd:b4:de:78:f6:dc:b8:f0:b1:a8:95:6f:7b:d6:39:52:b7:de:
         52:29:48:ea:12:b0:97:e4:61:8e:d6:8a:d9:17:df:41:9a:e3:
         db:ba:bf:21:49:a7:b4:61:b6:a6:84:f0:4a:f3:ce:d4:c9:91:
         01:a6:4d:47:da:b6:bb:be:81:f3:bd:3e:3b:e8:98:c8:e3:61:
         58:d6:ef:02:42:5f:dc:3d:a6:b1:cf:32:14:9d:a8:6f:b0:90:
         6a:9b:da:18:85:b4:15:6d:7b:97:b2:17:c1:7a:53:2e:9a:97:
         f8:68:58:f5:f8:eb:1c:8e:f7:6c:06:20:93:80:60:4b:97:7d:
         ed:ce:31:9a:d4:17:79:82:c2:98:3e:c0:63:7f:66:b7:3e:00:
         a0:44:f6:a1:c7:1f:27:92:06:56:cc:27:5e:b3:c5:6e:58:c6:
         3f:0f:38:c6:0f:5e:e0:06:59:a8:8f:5f:95:3a:94:ba:d0:cc:
         ef:4c:41:ee:49:1f:15:4c:26:4c:08:75:bc:a0:7b:38:83:a4:
         64:fe:5b:d0:27:37:c2:4b:98:56:b3:d4:63:df:95:1c:5a:20:
         52:83:d1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:08:44 2026 by rpki-client