This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4CE6CCDCEB8611F09362151A546F56BC.roa
File:                     4CE6CCDCEB8611F09362151A546F56BC.roa (raw, json)
Hash identifier:          Ll5AmPyn81KRkJmhk35Xt9Z7ZswC6EcUIH+EF3gy50Q=
Subject key identifier:   D5:CA:3E:86:5D:BC:59:A9:C4:0D:2F:FC:AD:F8:84:F5:4D:4D:DC:37
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       21AE
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4CE6CCDCEB8611F09362151A546F56BC.roa
Signing time:             Wed 07 Jan 2026 05:04:10 +0000
ROA not before:           Wed 07 Jan 2026 05:04:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142169
IP address blocks:        192.26.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 13:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8622 (0x21ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jan  7 05:04:10 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=695de949-e62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ee:82:75:33:bd:b4:05:4f:9e:e9:ba:5a:41:
                    fd:1c:74:48:39:7a:9e:7c:1a:c8:39:e1:83:e8:bc:
                    98:5c:35:bb:c2:24:99:ba:b3:f2:28:69:63:00:95:
                    aa:9b:39:47:2b:cd:8e:31:57:d5:61:e4:3d:ae:f4:
                    91:1c:77:a4:76:16:fc:af:1b:55:fa:b7:87:52:74:
                    01:39:2d:78:c0:9b:c7:16:a9:d6:61:9a:38:24:5e:
                    bb:3f:74:1b:6d:c5:b2:87:96:4d:85:f9:3b:df:9b:
                    9e:c0:73:bb:15:07:ef:71:c1:f6:1a:ab:45:c9:45:
                    3a:11:80:d3:79:ee:5c:d5:db:5c:57:48:8a:2b:36:
                    0d:f7:7d:b5:e2:9b:b5:f9:b3:aa:a2:40:84:14:8a:
                    b1:8f:82:47:43:81:ca:39:e8:1b:49:ba:ab:ed:d3:
                    2c:27:8c:a3:6c:8f:a1:5c:5b:d9:14:62:79:44:e6:
                    bb:2b:6f:e9:72:a8:7f:2b:68:51:af:e3:25:9a:8f:
                    71:24:a4:2a:bb:89:98:5f:e3:0b:27:5c:84:62:30:
                    b0:d0:f7:d3:f4:1e:a8:a0:7c:0c:5e:64:ae:48:93:
                    3d:fe:f5:eb:47:f5:aa:32:22:1c:5c:d5:91:c1:b9:
                    5d:6f:d4:ce:24:5b:d7:c3:45:d1:ec:20:0f:e1:88:
                    81:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CA:3E:86:5D:BC:59:A9:C4:0D:2F:FC:AD:F8:84:F5:4D:4D:DC:37
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4CE6CCDCEB8611F09362151A546F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:7d:5a:76:85:56:35:b0:30:1f:4c:92:0e:c4:90:f1:e8:a8:
         a1:0e:a3:7c:63:f6:04:fb:73:33:6a:29:c5:31:c1:b2:ca:fa:
         57:ed:ad:d8:2e:04:78:6e:ad:32:3f:93:63:5d:ba:8f:d0:4e:
         6b:38:03:66:a1:68:f2:8f:1e:98:5a:75:60:db:49:48:1a:e5:
         d3:93:18:3b:84:fb:65:ff:18:06:90:a2:c1:d4:07:31:47:8c:
         34:9e:37:ac:50:43:6f:0f:69:d6:af:cf:aa:73:ce:a1:7c:b0:
         25:1c:a3:55:c3:90:db:35:f6:5a:d3:82:05:92:27:82:26:9b:
         42:cc:4d:f0:f6:38:65:53:33:7e:72:9d:ff:e8:5a:76:a3:a2:
         6b:65:64:21:12:d7:f0:31:d3:bc:d7:8d:f5:75:53:40:94:52:
         5c:ad:0b:ca:24:d6:36:13:b9:04:e4:76:4e:67:ad:ea:2d:d2:
         a7:b9:e0:94:07:5c:f4:2c:89:ed:77:5f:90:6b:35:bf:a0:70:
         d0:1e:5b:0f:60:b8:32:0d:4d:25:6c:ed:af:57:76:f3:24:f6:
         84:53:8e:a0:2b:c6:b9:c8:4a:9f:ff:79:87:c7:f4:aa:19:d5:
         0b:1c:ae:fd:4a:75:47:1a:05:0f:96:c4:5d:d8:ad:85:7a:d6:
         82:7f:7f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:54:57 2026 by rpki-client