This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F47DECF0EE1011F08D41E772426F56BC.roa
File:                     F47DECF0EE1011F08D41E772426F56BC.roa (raw, json)
Hash identifier:          d9nAdYbhz0eDi5dW5AENQP5OsmgpfuoBFIZOl9o7ewo=
Subject key identifier:   FF:A7:5D:A9:35:55:0F:7C:1F:18:C3:10:9A:47:A9:7E:38:B7:0B:A5
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       21C4
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F47DECF0EE1011F08D41E772426F56BC.roa
Signing time:             Sat 10 Jan 2026 10:41:44 +0000
ROA not before:           Sat 10 Jan 2026 10:41:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141170
IP address blocks:        144.79.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8644 (0x21c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jan 10 10:41:44 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69622ce8-095e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:92:a0:c1:68:d8:f7:78:11:be:1b:99:6b:12:
                    ac:8e:17:21:35:78:ee:95:47:a1:fa:0f:19:f8:75:
                    20:e5:f8:5a:c0:2e:b6:d0:7f:f8:ae:18:58:93:0d:
                    7c:84:56:55:c2:3e:c4:d2:b6:4b:50:5c:0a:c7:72:
                    b3:09:0e:1b:d0:89:4f:59:84:c8:3f:e9:d6:73:6a:
                    12:eb:62:c5:b6:10:b1:be:11:f3:df:84:8c:f1:10:
                    b3:21:46:3a:a2:5e:44:da:f9:89:4c:d2:4b:40:68:
                    b8:2b:b7:a1:ad:be:97:f3:90:56:ed:9b:9b:a5:6b:
                    7d:28:b5:bb:2a:46:fe:c1:ca:bc:d8:c4:71:6a:2d:
                    47:b2:d3:36:78:c6:bd:36:65:99:82:80:48:82:4b:
                    cf:f9:2b:48:db:92:c1:cf:ac:11:a2:ba:30:0b:6c:
                    2c:9f:45:8b:4d:2b:ca:23:8e:cd:fd:dd:94:35:06:
                    87:da:46:5b:52:3a:bd:0a:87:f7:6a:db:4b:62:19:
                    35:3f:99:27:1f:8e:53:94:95:52:c3:e5:42:91:99:
                    06:63:71:c5:00:23:68:ad:f0:3c:30:5e:70:5d:70:
                    14:f3:7c:0d:b6:12:65:ca:23:df:64:b5:20:e3:16:
                    35:9f:f9:c0:7a:6f:f6:77:61:84:2a:5b:78:7e:f2:
                    36:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A7:5D:A9:35:55:0F:7C:1F:18:C3:10:9A:47:A9:7E:38:B7:0B:A5
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F47DECF0EE1011F08D41E772426F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:b5:38:c4:54:94:a9:f1:0f:f3:33:d7:34:3d:be:7b:f3:e7:
         fe:05:c6:fe:5d:15:20:fb:d9:28:21:e3:46:4d:20:c5:29:ff:
         09:bc:cd:73:70:f3:cd:27:ec:ab:99:f7:e8:3f:fe:ee:1a:e4:
         a0:d3:f6:0d:33:17:e7:9c:fe:0d:0b:d9:a1:54:e1:4e:f6:81:
         92:34:25:d9:15:0b:bf:42:4d:50:28:d4:fa:80:97:51:a9:0f:
         c9:a2:bd:4e:96:16:54:b2:e6:e3:55:88:eb:42:fc:72:b6:aa:
         36:a5:32:95:dd:5c:a3:0e:8f:5c:a1:53:36:97:02:e1:71:4c:
         f5:0d:42:12:24:b8:71:3c:b4:7f:bf:5d:a1:6d:51:2e:90:c4:
         3e:68:23:e8:4a:85:4b:41:df:4d:d3:88:a4:d6:5d:04:78:6b:
         e9:fa:a1:f8:27:a0:e6:e3:bb:c0:8b:3a:b2:1b:95:dd:97:f8:
         09:82:a8:35:d9:9d:1a:f5:9b:c6:04:f0:82:a6:a3:a0:30:a8:
         99:53:18:b3:8a:71:68:65:ee:d0:42:fc:e0:3d:2a:fa:65:9a:
         0d:bd:e7:d6:20:32:00:68:b5:6e:83:d9:c0:88:a3:ff:c5:8f:
         0e:cb:21:da:1e:00:a0:c0:7b:c4:9e:b2:1a:c6:db:29:dd:f6:
         7c:2a:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 00:54:52 2026 by rpki-client