This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/14CB89DAF2C711F0A661CCA33A6F56BC.roa
File:                     14CB89DAF2C711F0A661CCA33A6F56BC.roa (raw, json)
Hash identifier:          MUTQ6NqGs/mfQzPvMT9Aenmlf5+BhjsbxteBHsVuZaA=
Subject key identifier:   85:39:38:AF:F5:D9:BC:D2:BD:CD:0B:FF:E1:2F:E3:CC:B8:F2:44:8A
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       21D7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/14CB89DAF2C711F0A661CCA33A6F56BC.roa
Signing time:             Fri 16 Jan 2026 10:35:31 +0000
ROA not before:           Fri 16 Jan 2026 10:35:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154468
IP address blocks:        144.79.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 13:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8663 (0x21d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jan 16 10:35:31 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=696a1473-99f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dd:e7:c4:82:7d:2e:ab:d3:64:80:cc:c4:86:
                    c8:ca:ad:d8:08:87:9e:a3:4a:13:1b:34:ca:c1:ae:
                    d1:76:df:fd:ba:e7:59:a2:1b:73:58:aa:1a:15:8d:
                    43:71:7e:a7:7b:d1:b5:41:e5:89:11:89:47:8d:5f:
                    b9:9f:e5:e2:2e:9c:c3:d9:81:2b:4d:f4:ac:d1:18:
                    a7:cf:97:38:e8:ee:06:a0:15:78:22:e9:fa:17:a5:
                    d4:e8:f0:57:b2:1a:6f:bd:d8:49:11:90:65:af:f3:
                    d4:0f:24:0e:29:44:6a:8f:3f:5c:56:9d:0c:dc:90:
                    d7:7e:e5:33:4b:83:a3:f7:61:01:f3:7a:16:28:09:
                    56:7b:64:88:29:f0:f4:f0:91:e2:1d:bf:f8:0e:85:
                    14:8a:74:b4:6c:13:6f:36:77:e8:06:05:a6:12:d4:
                    74:88:dd:e3:7a:ed:e3:58:0f:3d:a7:ff:b3:ed:e1:
                    5c:07:2f:de:08:fb:69:d7:42:91:24:56:c5:4e:6c:
                    9c:d3:99:05:a4:a9:25:85:7f:f7:fe:6a:ee:e7:fc:
                    a0:ea:fc:34:9e:4b:0c:e1:6c:a7:e0:7c:9a:e0:45:
                    8f:b9:f4:ed:62:3f:d8:9f:b9:36:37:97:72:10:7a:
                    a4:c2:5c:29:04:b5:7d:bb:99:2a:4c:e8:0e:d7:aa:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:39:38:AF:F5:D9:BC:D2:BD:CD:0B:FF:E1:2F:E3:CC:B8:F2:44:8A
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/14CB89DAF2C711F0A661CCA33A6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:d2:3f:fd:d6:38:5f:7c:ac:2c:7e:b6:50:bc:5c:ea:a2:ca:
         90:f4:71:a3:9c:19:35:d0:2b:fd:a6:07:82:3a:97:9c:4c:12:
         3f:94:85:af:c2:b2:fe:19:7d:8a:74:5a:8a:83:01:3f:cd:f2:
         91:c1:9c:b0:40:7c:4c:a2:0f:5e:c9:82:68:c4:db:0b:6e:02:
         64:08:08:b9:b1:0b:b1:f8:dd:33:f6:80:bf:69:f3:37:21:f4:
         54:2e:bc:d4:e0:e0:26:8b:4d:6d:5b:3e:54:f6:5a:46:ed:78:
         ce:69:48:ce:2c:d8:ee:83:36:4b:01:c4:5f:10:c7:6f:1d:4c:
         46:f1:3e:d0:ae:68:09:4e:ee:4c:a8:b8:ee:ee:65:b4:bf:b3:
         f6:a3:4e:82:5b:f8:59:0f:cc:6a:fd:a7:0d:53:53:72:56:31:
         44:13:c8:c6:5c:6a:8d:cd:66:13:a4:10:54:82:20:09:df:eb:
         83:cd:91:4e:4c:4f:02:79:26:74:ca:00:9b:be:35:38:60:9d:
         b5:30:3f:24:d6:96:2d:67:5d:90:19:a5:46:db:42:b8:c7:9a:
         be:3c:78:8a:1f:42:8c:56:d3:2a:29:ec:61:ff:d0:76:92:b4:
         35:7c:10:45:0f:a1:84:5f:d9:a8:54:b9:79:22:6c:a9:0e:3c:
         8a:fa:65:04
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICIdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwMTE2MTAzNTMxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTZhMTQ3My05OWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyd3nxIJ9LqvTZIDMxIbIyq3YCIeeo0oTGzTKwa7Rdt/9uudZohtzWKoaFY1D
cX6ne9G1QeWJEYlHjV+5n+XiLpzD2YErTfSs0Rinz5c46O4GoBV4Iun6F6XU6PBX
shpvvdhJEZBlr/PUDyQOKURqjz9cVp0M3JDXfuUzS4Oj92EB83oWKAlWe2SIKfD0
8JHiHb/4DoUUinS0bBNvNnfoBgWmEtR0iN3jeu3jWA89p/+z7eFcBy/eCPtp10KR
JFbFTmyc05kFpKklhX/3/mru5/yg6vw0nksM4Wyn4Hya4EWPufTtYj/Yn7k2N5dy
EHqkwlwpBLV9u5kqTOgO16qUMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIU5OK/1
2bzSvc0L/+Ev48y48kSKMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTRDQjg5REFG
MkM3MTFGMEE2NjFDQ0EzM0E2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGQT8wwDQYJKoZIhvcNAQELBQADggEBACDSP/3WOF98rCx+
tlC8XOqiypD0caOcGTXQK/2mB4I6l5xMEj+Uha/Csv4ZfYp0WoqDAT/N8pHBnLBA
fEyiD17JgmjE2wtuAmQICLmxC7H43TP2gL9p8zch9FQuvNTg4CaLTW1bPlT2Wkbt
eM5pSM4s2O6DNksBxF8Qx28dTEbxPtCuaAlO7kyouO7uZbS/s/ajToJb+FkPzGr9
pw1TU3JWMUQTyMZcao3NZhOkEFSCIAnf64PNkU5MTwJ5JnTKAJu+NThgnbUwPyTW
li1nXZAZpUbbQrjHmr48eIofQoxW0yop7GH/0HaStDV8EEUPoYRf2ahUuXkibKkO
PIr6ZQQ=
-----END CERTIFICATE-----
Generated at Wed Jan 21 15:54:58 2026 by rpki-client