This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/0899C9B6F1C211F092655620396F56BC.roa
File:                     0899C9B6F1C211F092655620396F56BC.roa (raw, json)
Hash identifier:          1ez1DY2SqoMXkpMqnzpIS8sf0omRVf5rVrCWSkIqsWU=
Subject key identifier:   20:71:C5:96:23:B2:E9:B5:D2:39:29:9E:E9:C8:EC:52:41:ED:CF:CB
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       04AD
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/0899C9B6F1C211F092655620396F56BC.roa
Signing time:             Thu 15 Jan 2026 03:26:52 +0000
ROA not before:           Thu 15 Jan 2026 03:26:52 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     215023
IP address blocks:        202.155.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 00:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197 (0x4ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Jan 15 03:26:52 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69685e7c-3ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:7d:a7:d5:e6:10:24:6a:11:35:14:ad:29:
                    bc:8b:a0:02:f2:44:6e:68:40:c6:ae:0f:cc:b7:cd:
                    a4:f9:e2:95:40:d2:8c:a3:bd:fd:26:cc:4c:30:f0:
                    04:dc:e1:a0:6e:05:09:2c:18:29:68:f7:de:16:4f:
                    f1:39:57:a9:e0:ca:7e:70:83:09:e0:d1:1b:ec:9a:
                    96:46:a4:af:08:a0:b6:52:7f:68:ea:af:80:2a:c5:
                    0a:a1:f7:1b:6a:ce:d6:f1:d9:2b:1a:18:f1:00:77:
                    bb:9a:00:6e:49:f5:ce:a3:ae:27:01:4e:0f:4a:c8:
                    b7:4e:3c:6c:a6:b3:49:25:2f:c2:81:a2:76:42:d8:
                    26:ce:71:48:10:c3:0f:d3:40:91:01:a1:a1:c4:be:
                    b7:67:94:52:c3:7a:c9:22:87:e5:ba:df:b0:82:8e:
                    e4:24:2b:3f:5d:1c:3f:d4:31:70:35:f2:cd:5a:5d:
                    ef:98:ad:03:8f:ad:4f:99:a3:96:45:f8:c9:2a:2e:
                    94:26:eb:a3:77:ab:dd:e3:c1:36:a4:b5:5b:f5:c6:
                    f0:df:eb:81:52:02:59:2d:27:a1:b9:5f:f2:b8:40:
                    fe:0d:ad:5e:40:44:bd:25:fb:e6:86:ad:bb:4d:63:
                    b1:bc:a4:d1:9e:93:94:38:15:8c:c8:d1:20:65:c3:
                    42:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:71:C5:96:23:B2:E9:B5:D2:39:29:9E:E9:C8:EC:52:41:ED:CF:CB
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/0899C9B6F1C211F092655620396F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:e0:02:75:25:c3:d7:fe:fe:7e:50:dc:5b:94:d9:36:18:64:
         f0:e7:64:31:5f:23:0a:b1:19:c5:0b:00:7a:db:2c:5e:e9:52:
         61:51:8e:ac:24:67:61:1a:45:7b:38:1f:0a:7c:23:ea:5f:f1:
         9c:38:2e:7d:ef:ec:fa:d2:9b:2a:56:0b:26:08:6c:29:b1:74:
         36:26:7b:14:c9:8c:d1:75:31:0c:c2:82:70:51:e2:54:d9:8d:
         b1:f6:bf:78:2b:c3:13:28:06:1c:ef:35:61:bb:7c:0a:4c:23:
         31:4e:08:d9:1f:9d:1c:e0:55:87:10:4b:8d:de:80:0a:07:e1:
         59:64:5c:35:5e:1a:ee:ba:d9:69:e7:61:4a:cd:89:3e:ce:ef:
         04:a8:69:6a:e8:5c:ce:4e:64:9d:3c:2d:0d:76:72:b9:c3:4f:
         94:59:95:a7:02:b0:cd:46:24:dd:a7:29:2d:d0:b0:f0:61:72:
         52:8b:37:47:05:45:00:f4:68:ad:d1:7b:55:e4:dd:47:fb:38:
         32:47:42:b1:e0:17:0a:28:cf:80:68:20:4d:f8:97:b9:56:1e:
         4a:47:e6:02:89:b1:65:71:c3:7e:56:0d:52:e0:14:fc:c0:50:
         bc:3c:19:ee:da:82:07:8b:25:67:72:b8:d4:19:f6:71:6d:9e:
         46:a7:0e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:33 2026 by rpki-client