This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/50A7914A5B9011EE82A2243AC4F9AE02.roa
File:                     50A7914A5B9011EE82A2243AC4F9AE02.roa (raw, json)
Hash identifier:          BvTYdQgytihNDhZkOmbkqugOTnkp3U/T+b4vjOkSQoo=
Subject key identifier:   63:CC:32:21:F6:60:E1:22:62:E7:20:FE:B8:83:DB:47:42:48:24:4B
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       25D6
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/50A7914A5B9011EE82A2243AC4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:14:03 +0000
ROA not before:           Fri 02 Jan 2026 16:14:03 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     151808
IP address blocks:        147.50.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 15:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9686 (0x25d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jan  2 16:14:03 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957eecb-4c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:d1:de:c7:5d:ba:3f:e1:bc:44:a9:84:60:
                    5f:e8:a7:aa:ad:90:8b:71:f3:af:1e:7e:d8:aa:e6:
                    be:db:71:bd:9a:07:a3:96:69:aa:f7:64:78:e1:08:
                    e4:9b:29:5a:ee:9a:29:17:e3:5c:0a:5e:a7:a5:f6:
                    ef:c2:7c:47:48:0d:e2:30:3f:72:dd:ed:b2:71:bd:
                    7f:2c:a6:af:46:4e:35:17:0b:3e:84:41:c4:3b:2f:
                    85:81:94:92:54:1a:ae:99:36:33:c1:5e:da:fc:4f:
                    03:a0:f3:a7:e4:59:70:87:a7:7f:37:c3:27:90:ee:
                    a1:88:2b:39:46:e1:e4:c9:c7:fb:c3:c8:f2:48:27:
                    8d:27:fd:a7:e9:e4:3f:52:b8:84:ad:ac:86:ff:48:
                    bb:e8:33:83:72:a4:c0:0a:ea:c3:b7:be:5a:6a:03:
                    cc:10:c6:d8:3e:1b:e9:14:9b:b7:08:5e:7a:9f:86:
                    c2:a0:ea:d3:23:22:ae:ee:d1:f3:e1:aa:44:bc:52:
                    1c:96:a1:0b:e3:7f:49:7b:ff:0e:02:73:07:30:e7:
                    a2:dc:29:4c:cf:e2:c9:3c:6b:f8:53:44:92:99:e4:
                    64:2a:36:51:5a:47:d4:ac:cc:c6:eb:6b:81:b9:7c:
                    7d:8c:e6:50:50:92:a7:fc:98:d6:43:37:e8:88:65:
                    00:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CC:32:21:F6:60:E1:22:62:E7:20:FE:B8:83:DB:47:42:48:24:4B
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/50A7914A5B9011EE82A2243AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:0a:81:d4:43:81:7d:ab:eb:93:14:df:d4:bc:26:d2:db:3e:
         19:08:ec:7e:11:18:38:63:d6:1a:ec:6a:21:0b:c4:ae:fe:6a:
         67:a2:34:f3:74:84:cb:ce:03:11:3a:e1:e0:b4:bc:8f:a9:0f:
         5e:16:f2:50:52:40:55:33:e8:64:0e:b3:00:ba:ac:6c:35:bc:
         3b:7a:6d:a1:0c:ca:c7:22:bf:53:a9:01:26:c1:b3:2e:ad:e0:
         a4:5b:42:7f:55:b2:80:1a:5b:82:4f:8b:02:ca:4a:62:11:19:
         4e:1f:9e:b8:9d:81:98:23:e8:08:fa:ff:f6:21:2a:df:f3:dd:
         5a:7c:dd:02:6e:1c:df:a8:67:aa:02:64:bc:3a:74:c1:76:a7:
         a8:b9:35:ac:f1:ce:66:9d:6c:1e:e6:3a:19:12:69:3d:93:22:
         cf:85:b2:52:99:fc:81:90:1b:91:fa:c5:06:f8:0e:3d:11:e3:
         19:70:33:89:df:bd:60:d3:b6:b1:36:c8:55:55:66:c3:61:e2:
         06:96:98:1d:20:e3:e5:81:7d:58:06:cb:88:00:0c:c4:c8:7e:
         e9:a2:80:61:be:4f:a6:e1:1e:23:17:15:4c:fb:1e:11:81:00:
         71:2c:1c:74:df:2c:95:4a:fa:cb:89:84:7f:61:d9:c5:f7:9d:
         fa:e5:d2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:47:38 2026 by rpki-client