This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/E8573BE8F1C111F098487417396F56BC.roa
File:                     E8573BE8F1C111F098487417396F56BC.roa (raw, json)
Hash identifier:          qGeh6QL0o4WvOG3fg/wBG8/tXnaeNS7d3iyz0QkEV4E=
Subject key identifier:   B4:0B:44:01:55:CE:D3:68:B9:98:EF:F9:D6:7A:B2:DF:0B:49:1E:59
Certificate issuer:       /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial:       2B8A
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/E8573BE8F1C111F098487417396F56BC.roa
Signing time:             Fri 16 Jan 2026 16:12:53 +0000
ROA not before:           Fri 16 Jan 2026 16:12:53 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     154413
IP address blocks:        144.79.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11146 (0x2b8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
        Validity
            Not Before: Jan 16 16:12:53 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=696a6385-dcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7e:c3:73:bf:61:0d:ce:bb:64:25:af:c6:a3:
                    36:b7:e2:88:bd:74:dc:a2:ba:16:54:b6:4e:cd:83:
                    8e:40:4d:7c:59:29:dd:a4:9f:72:d2:45:94:3d:4e:
                    4d:7d:4b:52:cb:17:91:24:74:b3:ca:92:1c:a3:06:
                    94:de:80:f5:17:d9:de:94:1b:bc:5b:37:d2:40:eb:
                    f3:3b:1c:4d:82:64:fa:f4:53:7b:ec:03:05:2a:3d:
                    23:3f:70:dd:9c:f8:0d:08:d9:96:0b:15:16:87:a4:
                    1c:22:4e:e8:74:a9:d7:33:7e:08:81:be:40:ba:54:
                    24:2c:03:b8:e3:e2:36:bd:0b:a0:5d:53:3b:98:0e:
                    92:23:8f:a3:c5:bc:84:73:8c:18:ec:84:7e:61:14:
                    6e:0a:eb:d3:0e:68:86:b5:0f:9b:5f:0d:d6:b2:9a:
                    69:6f:84:04:63:40:f5:36:95:44:c1:bf:04:c5:5a:
                    40:24:9e:c9:83:cc:da:80:d4:6a:00:13:3c:c0:ef:
                    6d:8a:c4:2d:0f:19:8c:16:4e:be:a7:9a:69:6b:1a:
                    f5:98:48:7d:d3:9f:09:e5:59:74:91:54:b5:f7:d4:
                    03:e8:53:88:e2:d4:10:54:e8:d0:f2:94:a4:67:83:
                    e8:03:13:ee:4b:d8:c1:1f:d7:e4:74:c0:c4:88:3a:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0B:44:01:55:CE:D3:68:B9:98:EF:F9:D6:7A:B2:DF:0B:49:1E:59
            X509v3 Authority Key Identifier:
                keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/E8573BE8F1C111F098487417396F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:7f:f5:cb:cd:0c:65:23:79:ea:a9:5f:54:f7:e0:61:4c:ba:
         e8:9e:93:64:d3:79:b7:13:e1:96:53:17:64:a1:2d:46:4f:b2:
         43:8e:db:d5:b4:88:60:6b:66:15:27:08:8f:5c:6f:4d:d0:9d:
         7d:5f:65:8c:99:8e:92:12:4f:0c:61:4f:7f:b9:6b:ce:99:41:
         fa:17:6d:2c:23:c4:02:95:92:77:00:2a:6d:0c:6a:0c:10:55:
         8d:44:3b:5e:11:b1:9f:e1:d3:f7:0b:5d:6a:1e:65:9b:02:54:
         62:ff:47:b1:62:08:0c:17:ba:a6:bd:b1:b9:8c:1b:1f:35:de:
         0d:34:c0:f8:c2:90:c1:a4:0a:01:b3:7e:34:ab:ae:1a:7b:02:
         c6:3b:0f:a0:3c:43:52:ae:7c:c3:b0:87:16:5c:c3:67:6c:bb:
         62:71:3f:16:d8:ea:ec:4f:e9:55:7e:19:72:4f:a2:7a:8b:8e:
         2d:bd:a9:9c:82:0a:af:b4:f0:28:5f:c9:8f:91:14:b2:b8:4c:
         ff:48:7a:b0:5f:20:94:13:c3:6a:e7:95:25:12:15:84:e7:93:
         a8:63:77:5c:05:bb:fc:2d:3e:9d:8f:e6:2e:7e:5b:ac:39:30:
         58:8b:e9:6e:79:48:48:9c:b1:5b:2d:bf:ee:22:a5:da:f5:f4:
         6c:1b:fc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:30:37 2026 by rpki-client