This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/41A28B42EBB111F0AF3889F3606F56BC.roa
File:                     41A28B42EBB111F0AF3889F3606F56BC.roa (raw, json)
Hash identifier:          SGvplmYlhwKhnPRvbdKHRZTiyIgv3THw8GgCiwtHfIA=
Subject key identifier:   60:BB:8D:1B:F6:D1:41:7E:42:F9:F7:FE:F9:7D:20:AC:10:8D:64:9F
Certificate issuer:       /CN=A9199606/serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
Certificate serial:       02
Authority key identifier: 32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/41A28B42EBB111F0AF3889F3606F56BC.roa
Signing time:             Wed 07 Jan 2026 10:11:39 +0000
ROA not before:           Wed 07 Jan 2026 10:11:39 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     134478
IP address blocks:        144.79.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl
                          rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 07:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199606, serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
        Validity
            Not Before: Jan  7 10:11:39 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=695e315b-1331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:64:3b:cf:eb:f9:2a:8b:77:e8:a6:8f:02:ad:
                    04:11:b5:25:e0:f3:99:70:8b:c9:ba:f2:a1:6e:7d:
                    5b:b1:58:72:67:a8:9e:16:e5:dd:8f:ba:6e:79:f6:
                    0b:1c:71:82:e1:3d:56:91:c1:fe:0c:77:b0:cb:08:
                    4b:16:24:33:c6:fc:29:84:65:44:de:42:6e:c3:b9:
                    b8:5e:93:68:06:db:16:6c:4e:4b:22:31:f4:99:21:
                    9b:27:19:da:6b:8d:65:74:9e:20:19:f6:8d:94:3a:
                    2e:4e:9c:f9:96:7b:f6:26:90:71:84:73:ef:56:b6:
                    0c:c4:b2:24:e5:a0:a3:6e:28:ce:ef:af:6f:a4:49:
                    db:8f:76:5c:a6:70:3e:01:e3:3f:cb:12:ac:2d:f1:
                    bb:32:d4:4a:b6:34:93:32:7d:13:b4:77:19:d4:8f:
                    2e:ed:b8:4d:21:06:2c:64:e3:23:fb:6f:37:cd:1a:
                    9d:a9:22:5c:55:ed:4d:e3:ce:e1:50:44:a2:6b:95:
                    e7:05:17:54:b4:f8:f7:88:f0:6b:d4:2b:e1:7c:6a:
                    31:02:90:ff:b0:b6:ab:14:3c:68:93:b1:bd:79:ee:
                    99:1b:42:9b:e6:1b:15:74:9e:b2:10:ba:8b:73:c2:
                    ef:22:17:94:8b:4f:b0:41:4f:f3:88:a5:f4:9c:06:
                    52:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BB:8D:1B:F6:D1:41:7E:42:F9:F7:FE:F9:7D:20:AC:10:8D:64:9F
            X509v3 Authority Key Identifier:
                keyid:32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/41A28B42EBB111F0AF3889F3606F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:a5:7c:78:52:f8:c0:53:89:ab:ce:8c:c5:0f:7e:1d:1f:13:
         77:ee:5f:1f:2b:e3:08:a7:38:b7:a0:52:82:7f:6b:a8:9a:9b:
         e4:1a:33:94:82:b4:da:e8:e9:ba:68:8e:ec:c9:5a:9e:d5:28:
         4a:8e:09:d1:e2:47:db:ad:df:5d:df:20:7e:72:4f:05:3a:a0:
         00:29:7e:33:48:3d:75:2b:e4:5f:b5:78:6c:9e:28:8b:88:f3:
         9c:21:0b:86:ad:1b:70:99:87:a7:ab:33:8c:eb:a3:91:fc:dc:
         fe:41:74:e5:1d:ea:8a:5a:d8:19:fd:20:1f:90:48:d4:b3:aa:
         5f:3f:21:0e:e3:1a:ae:d1:db:41:02:3a:d1:13:90:6c:d4:93:
         06:0d:d4:53:c1:81:d5:ae:fb:58:7b:ba:9f:91:5e:b5:b5:70:
         83:e8:0f:cb:a0:9b:0e:a1:15:45:b7:6f:67:e8:33:f8:d8:3e:
         cc:95:ba:42:aa:2c:b6:9e:e8:c9:be:f8:24:8c:e9:3f:b2:21:
         ba:a0:89:c3:35:02:01:76:61:f8:a8:72:ae:44:df:b2:9d:01:
         de:de:f7:20:aa:ac:8c:17:d0:71:18:9b:3a:5e:f7:3b:cd:18:
         b8:91:f0:4d:ec:67:c7:50:9d:66:42:4a:96:94:24:fd:d8:43:
         d3:37:8e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:30:34 2026 by rpki-client