This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/01238706C86211EFBDCCC22AC4F9AE02.roa
File:                     01238706C86211EFBDCCC22AC4F9AE02.roa (raw, json)
Hash identifier:          BU/k3CkSOStn2wvMOAuwWxlTBhg/Ir2QU63RTAPCDug=
Subject key identifier:   AA:3E:DD:45:7F:07:05:F0:10:AE:5E:08:77:CE:46:32:5F:78:1B:74
Certificate issuer:       /CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
Certificate serial:       C2
Authority key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/01238706C86211EFBDCCC22AC4F9AE02.roa
Signing time:             Wed 07 Jan 2026 05:24:11 +0000
ROA not before:           Wed 07 Jan 2026 05:24:11 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138151
IP address blocks:        161.248.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl
                          rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Jan 2026 05:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113B62, serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
        Validity
            Not Before: Jan  7 05:24:11 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=695dedfa-86c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:f9:1c:b4:ad:7a:3f:d4:14:45:41:de:0c:
                    ee:9b:c4:91:53:fd:dd:a3:f6:80:2a:33:6d:dc:b7:
                    10:a8:c5:e1:b4:2a:9e:01:4f:8b:e4:81:96:83:55:
                    28:46:53:eb:f5:88:73:0d:48:13:1b:b6:49:fb:66:
                    a1:b0:60:25:61:c7:75:ce:0e:21:b9:fc:92:5a:29:
                    60:ca:ca:69:31:10:fe:13:b4:c7:18:c2:e9:54:1e:
                    ec:ef:3d:bf:a4:ba:81:3d:62:50:d3:78:12:99:9a:
                    55:6d:27:ce:32:ce:94:f8:fe:4f:18:4a:ce:0a:a3:
                    5c:28:57:58:36:26:cc:74:f6:22:67:7d:79:3e:e4:
                    9f:9a:52:ae:c1:10:7c:6e:d8:2b:e4:6c:09:f3:76:
                    c1:ac:f5:4a:cf:2b:29:e3:94:ee:1e:ca:ea:73:2e:
                    a9:fe:bb:27:b0:63:73:bd:73:d0:91:de:18:d7:4f:
                    bf:c9:9e:57:51:9e:ad:1f:5f:27:f7:71:7c:bf:cd:
                    75:4b:17:12:9f:4a:3c:46:14:ca:cb:4d:46:a9:12:
                    52:bc:36:57:25:32:bd:12:a4:cb:33:77:a8:7c:0e:
                    5e:f2:18:bb:3a:00:63:df:5d:db:b0:36:fb:f0:c8:
                    9d:65:a7:38:ce:63:e3:71:88:c0:fd:b7:2c:3a:f0:
                    a5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3E:DD:45:7F:07:05:F0:10:AE:5E:08:77:CE:46:32:5F:78:1B:74
            X509v3 Authority Key Identifier:
                keyid:42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/01238706C86211EFBDCCC22AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:ad:5d:4d:97:85:79:d3:bb:9c:e3:92:7c:28:2d:14:a7:b9:
         5c:ce:dc:f6:dc:ea:9c:29:b8:0c:12:49:fd:85:15:dd:d3:60:
         a1:9d:12:f1:af:8e:bc:0d:07:2e:32:1b:49:79:52:12:77:d8:
         71:bd:a6:1f:5a:43:aa:66:01:84:ad:e0:c8:51:1f:4a:b3:75:
         92:32:b3:d5:62:17:52:61:0d:13:43:04:c2:83:40:0c:60:b0:
         a4:1b:17:d5:9c:bb:59:73:e4:40:25:4b:c3:d5:7f:e6:8c:0f:
         67:0d:7e:16:74:49:d6:bb:e6:ae:14:1c:fa:84:3e:c7:2a:e2:
         c7:be:af:3b:0d:14:a8:69:4a:f1:cb:75:fa:b6:eb:65:49:11:
         42:ce:70:34:da:aa:9e:47:3d:4f:63:3a:41:bc:3e:b8:9b:02:
         a5:41:d9:18:54:0a:e2:c0:e1:05:2d:9c:84:d2:73:3a:db:68:
         41:16:d4:52:0e:db:9b:13:e4:58:00:92:06:50:e6:e9:61:01:
         2e:f3:b6:71:ae:1f:b5:1d:0d:68:19:4e:92:08:72:6e:5e:80:
         eb:f0:95:1f:8c:c0:77:90:dc:b7:87:4d:a6:9d:44:51:20:e9:
         c0:30:75:6e:33:34:f1:db:39:92:ef:1f:91:71:e7:c0:b1:da:
         b8:be:46:86
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MTNCNjIxMTAvBgNVBAUTKDQyRkVGMzMxNzQxQTU0RDVBMEFFNzU1MzEwOEQ0RDJE
MzJCMDU3QjAwHhcNMjYwMTA3MDUyNDExWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTVkZWRmYS04NmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuR/5HLStej/UFEVB3gzum8SRU/3do/aAKjNt3LcQqMXhtCqeAU+L5IGWg1Uo
RlPr9YhzDUgTG7ZJ+2ahsGAlYcd1zg4hufySWilgysppMRD+E7THGMLpVB7s7z2/
pLqBPWJQ03gSmZpVbSfOMs6U+P5PGErOCqNcKFdYNibMdPYiZ315PuSfmlKuwRB8
btgr5GwJ83bBrPVKzysp45TuHsrqcy6p/rsnsGNzvXPQkd4Y10+/yZ5XUZ6tH18n
93F8v811SxcSn0o8RhTKy01GqRJSvDZXJTK9EqTLM3eofA5e8hi7OgBj313bsDb7
8MidZac4zmPjcYjA/bcsOvClWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKo+3UV/
BwXwEK5eCHfORjJfeBt0MB8GA1UdIwQYMBaAFEL+8zF0GlTVoK51UxCNTS0ysFew
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I2Mi8yNjYxOUQ0NEM2
RTgxMUVGQkI1MjBCMERDNEY5QUUwMi9Rdjd6TVhRYVZOV2dyblZURUkxTkxUS3dW
N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1F2N3pNWFFhVk5XZ3JuVlRFSTFOTFRLd1Y3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTNCNjIvMjY2MTlENDRDNkU4MTFFRkJCNTIwQjBEQzRGOUFFMDIvMDEyMzg3MDZD
ODYyMTFFRkJEQ0NDMjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACh+DQwDQYJKoZIhvcNAQELBQADggEBALKtXU2XhXnTu5zj
knwoLRSnuVzO3Pbc6pwpuAwSSf2FFd3TYKGdEvGvjrwNBy4yG0l5UhJ32HG9ph9a
Q6pmAYSt4MhRH0qzdZIys9ViF1JhDRNDBMKDQAxgsKQbF9Wcu1lz5EAlS8PVf+aM
D2cNfhZ0Sda75q4UHPqEPscq4se+rzsNFKhpSvHLdfq262VJEULOcDTaqp5HPU9j
OkG8PribAqVB2RhUCuLA4QUtnITSczrbaEEW1FIO25sT5FgAkgZQ5ulhAS7ztnGu
H7UdDWgZTpIIcm5egOvwlR+MwHeQ3LeHTaadRFEg6cAwdW4zNPHbOZLvH5Fx58Cx
2ri+RoY=
-----END CERTIFICATE-----
Generated at Thu Jan 8 23:30:34 2026 by rpki-client