This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DFB2D738F37C11F0BD8551326C6F56BC.roa
File:                     DFB2D738F37C11F0BD8551326C6F56BC.roa (raw, json)
Hash identifier:          YdhdnEaFXj0IxWntoVoxCLL+uiaVAoiy9Nk+G1NqORs=
Subject key identifier:   0D:0B:DD:F7:AD:BF:F4:8D:BB:82:BC:3B:A5:7C:53:D4:33:0F:3A:BD
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       21DA
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DFB2D738F37C11F0BD8551326C6F56BC.roa
Signing time:             Sat 17 Jan 2026 08:16:50 +0000
ROA not before:           Sat 17 Jan 2026 08:16:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141169
IP address blocks:        144.79.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 13:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8666 (0x21da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jan 17 08:16:50 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=696b4572-853e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:a1:b9:98:18:db:b6:0c:56:79:1b:70:17:
                    ad:af:4e:ff:39:36:09:77:ef:95:cf:8c:27:1c:ba:
                    84:7b:8f:00:5b:0c:d6:14:60:14:90:68:aa:ed:7a:
                    26:ad:55:4a:ad:92:ed:d5:d1:b7:63:93:96:fa:c6:
                    49:65:84:de:7f:e6:b4:fa:62:d5:e1:e8:ac:ea:56:
                    a1:07:eb:9d:f6:51:ce:fb:58:af:a0:09:2c:ff:7b:
                    a5:92:5c:8b:e6:06:60:7f:2c:ed:d2:4a:23:06:27:
                    45:8b:ca:55:bd:dc:47:88:60:d4:99:99:5c:06:c6:
                    76:36:5c:91:d6:4f:19:17:c6:10:64:b8:01:c9:94:
                    11:0a:75:cf:cb:f6:ed:ca:97:aa:6c:3a:d3:8c:41:
                    95:dc:df:40:31:94:66:07:ca:64:40:09:b4:fb:f3:
                    51:d6:6b:1a:fb:65:3d:9a:e8:dd:ac:22:ad:fc:66:
                    3f:00:9e:b5:bc:e6:72:6b:04:13:b5:c2:ef:53:c5:
                    85:f5:25:64:f0:ee:f7:b8:56:6a:df:bd:09:4a:91:
                    2d:c0:a6:6b:32:09:3f:5f:bf:56:b4:3b:5a:ec:09:
                    91:c6:5d:37:c6:f2:50:a7:eb:5c:ea:8b:4d:f6:f3:
                    e8:ed:e4:1f:99:5b:0f:bc:c2:af:1b:35:ee:33:bb:
                    18:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0B:DD:F7:AD:BF:F4:8D:BB:82:BC:3B:A5:7C:53:D4:33:0F:3A:BD
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DFB2D738F37C11F0BD8551326C6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:29:70:9e:e3:08:e1:f6:0c:a9:e9:25:f6:bc:06:a9:68:12:
         17:0c:b5:e5:1e:fa:1f:87:1f:9d:39:f4:6a:b2:fd:1f:3c:90:
         c9:2e:9e:3d:6e:ca:00:1b:fc:19:83:1d:17:7d:94:b2:4b:38:
         44:b4:51:c6:b0:02:a9:57:b9:a7:90:64:05:d0:16:8f:7c:41:
         87:5d:fd:05:59:a8:05:28:fc:3a:d7:d4:a8:e4:ce:4f:95:94:
         ea:4b:8a:a1:18:d0:38:16:ac:3a:c9:b0:f2:95:1b:0c:96:6b:
         81:8d:e0:b4:26:8d:e7:04:4e:39:06:e4:db:0e:36:9f:75:2c:
         da:5b:80:8c:cb:06:8d:13:67:c2:7e:76:0d:c3:2d:5d:64:43:
         db:cd:c7:27:cd:65:3f:6f:db:82:a9:8a:2f:f5:49:10:a7:5a:
         c9:7e:ac:f7:df:94:a4:83:c3:8f:cd:48:70:f0:42:28:9c:58:
         6d:c0:9a:ea:90:28:eb:ca:90:3c:e1:60:4d:49:d9:69:e4:a6:
         ad:d0:1f:76:d5:21:a8:5a:e2:c0:72:25:f2:0d:48:b2:f7:fa:
         dd:54:2c:a9:cb:2f:03:e8:0a:ee:42:69:7e:d2:61:7f:8a:fb:
         bc:92:cc:6b:88:cc:69:8b:9c:8c:9c:bf:cf:7b:29:00:d3:cd:
         92:2f:7d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:54:59 2026 by rpki-client