This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/7BADD2664E9011EFA2296D3FC4F9AE02.roa
File:                     7BADD2664E9011EFA2296D3FC4F9AE02.roa (raw, json)
Hash identifier:          y09RM3keLUlpxu1P3XvC2IFrmLp3R3CJrP1a/pou3ac=
Subject key identifier:   90:4A:AC:B6:01:85:9A:13:30:77:99:27:4B:0B:37:82:24:62:55:4C
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2B12
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/7BADD2664E9011EFA2296D3FC4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:13:28 +0000
ROA not before:           Fri 02 Jan 2026 16:13:28 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152694
IP address blocks:        58.137.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 15:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11026 (0x2b12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:28 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957eea8-e520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f5:ab:17:cc:65:07:80:6a:c7:13:3d:83:04:
                    a8:8f:24:fd:b4:85:0a:05:16:b0:6c:d1:51:17:4d:
                    4a:09:fc:57:b8:a6:2b:99:f9:55:88:f6:26:7e:b2:
                    02:e1:92:84:63:1f:06:2d:0f:62:50:21:09:53:42:
                    4d:13:da:76:c2:c7:12:3c:04:09:bf:2b:6d:89:01:
                    18:77:af:a0:22:38:cb:fa:60:48:9f:ae:b2:21:c6:
                    62:9f:cf:3e:82:61:e1:66:d1:a5:21:40:e4:63:27:
                    c8:a2:c7:5c:66:2c:7a:4e:21:62:86:a8:4f:2b:36:
                    ad:7f:bf:83:8b:6b:dd:cc:f1:a2:8c:2f:a2:78:57:
                    4b:99:9f:79:d2:8f:75:46:f4:07:87:df:c2:d3:9e:
                    93:19:cf:3c:65:d7:d1:f4:0a:56:50:6d:c9:64:49:
                    13:02:10:c6:97:42:e4:cb:a6:d4:24:99:75:71:5f:
                    53:ed:f7:3d:5e:9f:c9:2f:de:43:25:30:c0:c6:1c:
                    79:50:65:68:3f:fb:93:c3:f4:70:23:d0:e1:11:ed:
                    dc:f0:24:d0:b3:cf:7c:32:b5:a3:08:ae:ff:1b:75:
                    a2:d6:08:67:55:24:17:e4:4b:d8:f7:02:8e:38:e7:
                    b1:9e:bf:24:87:c2:d1:5d:4f:2a:4b:9d:52:81:25:
                    49:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4A:AC:B6:01:85:9A:13:30:77:99:27:4B:0B:37:82:24:62:55:4C
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/7BADD2664E9011EFA2296D3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:5d:41:e1:c2:6b:ae:2a:15:32:af:96:6f:b9:c7:d9:dd:66:
         d6:03:7f:a8:55:85:49:c2:f4:7f:3e:88:1a:84:53:74:2d:23:
         c9:b1:02:3f:9d:47:cc:18:cc:f7:7e:5c:5b:d1:f4:3d:14:00:
         4b:05:5f:a2:b5:e8:6e:b5:43:46:75:b8:c1:5a:b1:c1:1b:42:
         8b:47:c9:c7:af:b8:ed:23:68:ea:f7:d5:fe:b6:ac:65:56:26:
         e7:8d:7c:8d:62:0e:51:2d:68:3a:27:de:4b:28:ac:03:04:2c:
         b6:05:20:58:ea:ab:7a:7a:60:08:9d:65:af:e7:bf:7b:69:73:
         f9:de:b4:a2:99:2b:b0:13:c8:93:f1:2d:5f:2b:15:11:3e:e7:
         b7:73:05:49:06:e1:ef:ce:6a:3b:a9:53:a4:2a:c4:2a:83:a1:
         ff:f2:52:b4:e2:88:40:cd:2a:2e:33:39:f1:27:75:0b:6d:64:
         79:88:f2:46:7f:ec:6e:3f:6b:88:fe:14:4a:37:52:2e:a0:c4:
         11:6a:a4:d0:a0:c9:58:0b:e2:60:de:36:3a:9a:95:7a:4c:54:
         43:85:01:d1:3c:33:20:f7:70:39:c2:2d:f2:ba:70:d6:d6:96:
         ff:d5:b6:7a:8e:91:7e:8a:59:88:35:86:0d:22:0d:00:62:6e:
         f6:e1:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:21:13 2026 by rpki-client