This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B77A93FE852411EFA67F8144C4F9AE02.roa
File:                     B77A93FE852411EFA67F8144C4F9AE02.roa (raw, json)
Hash identifier:          PWkDZi06ADjI6yjBBU4aYQrWTgNSnaqa8au2v37zNL0=
Subject key identifier:   FE:22:DF:26:45:5C:9F:90:8E:CC:5F:4A:27:50:3E:9E:F2:D2:52:82
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       25D9
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B77A93FE852411EFA67F8144C4F9AE02.roa
Signing time:             Fri 02 Jan 2026 16:14:06 +0000
ROA not before:           Fri 02 Jan 2026 16:14:06 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     45458
IP address blocks:        147.50.32.0/24 maxlen: 24
                          147.50.33.0/24 maxlen: 24
                          147.50.63.0/24 maxlen: 24
                          147.50.79.0/24 maxlen: 24
                          147.50.80.0/20 maxlen: 24
                          147.50.96.0/20 maxlen: 24
                          147.50.112.0/21 maxlen: 21
                          147.50.117.0/24 maxlen: 24
                          147.50.119.0/24 maxlen: 24
                          147.50.120.0/22 maxlen: 24
                          147.50.125.0/24 maxlen: 24
                          147.50.126.0/23 maxlen: 24
                          147.50.192.0/19 maxlen: 19
                          147.50.192.0/24 maxlen: 24
                          147.50.193.0/24 maxlen: 24
                          147.50.195.0/24 maxlen: 24
                          147.50.201.0/24 maxlen: 24
                          147.50.202.0/24 maxlen: 24
                          147.50.203.0/24 maxlen: 24
                          147.50.208.0/20 maxlen: 24
                          184.82.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 15:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9689 (0x25d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jan  2 16:14:06 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6957eece-7d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:21:e7:2b:82:c0:d1:8f:e5:cf:e5:ca:0e:50:
                    60:83:65:da:96:f2:c1:44:08:0b:db:5e:2e:3e:b0:
                    ca:82:99:48:bb:3d:12:9d:e4:57:89:61:82:19:24:
                    69:4b:24:9b:b2:05:bb:a0:11:b4:cd:13:c2:11:37:
                    c4:47:d5:5e:d9:84:42:79:1d:90:7c:62:84:a6:c2:
                    f4:c8:2f:13:cd:3b:e6:6b:97:69:f6:84:20:cf:43:
                    9a:9f:80:5a:4e:9b:83:3f:e1:51:32:98:1e:8c:fe:
                    97:ba:1d:0c:3a:77:5f:c7:b1:cf:61:84:b1:93:3c:
                    4a:2c:60:8e:68:e2:fb:6a:69:2e:cf:41:27:75:46:
                    25:1e:4b:a6:66:79:92:7b:c6:2a:37:d7:91:e7:8c:
                    ae:48:7c:ea:73:8f:67:6b:3d:93:9d:16:90:c1:95:
                    d7:ff:e4:3e:0f:e8:19:02:1d:87:6e:02:23:36:3f:
                    a4:90:3c:62:74:fc:a1:c5:75:e6:ed:e8:4c:26:cd:
                    64:4b:0e:e7:ac:f4:dd:35:83:57:ac:17:80:b3:c2:
                    09:16:6b:20:5c:45:1a:c9:70:62:1f:19:4f:4f:fa:
                    5d:38:c1:ce:44:e0:f2:ca:5f:56:48:e0:a3:ea:87:
                    8d:80:06:92:2b:b5:31:65:21:29:3a:2e:85:d5:9b:
                    43:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:22:DF:26:45:5C:9F:90:8E:CC:5F:4A:27:50:3E:9E:F2:D2:52:82
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B77A93FE852411EFA67F8144C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.32.0/23
                  147.50.63.0/24
                  147.50.79.0-147.50.123.255
                  147.50.125.0-147.50.127.255
                  147.50.192.0/19
                  184.82.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:bd:97:14:21:0d:82:a6:ba:03:ba:9f:f8:58:54:78:77:4e:
         18:27:b1:9f:2a:71:ff:e0:ac:d1:76:96:13:bb:24:54:80:50:
         cb:ac:98:4b:15:32:d4:e7:4a:5a:7b:46:3f:ea:0a:54:58:7b:
         5f:2d:68:e6:5f:a1:41:b5:09:dd:ee:04:61:0a:1e:c7:14:94:
         f4:5f:ba:a4:86:26:8a:88:99:a5:a5:a5:1d:81:53:51:da:3c:
         00:15:94:ac:44:ab:12:f6:82:76:61:67:b2:76:77:8e:c8:fd:
         72:ae:0f:25:ed:54:fd:74:aa:f0:57:b5:22:70:63:e0:76:cc:
         e9:e9:e0:c0:a3:b9:e4:24:6f:28:3e:68:3a:b6:d2:97:2a:8b:
         63:af:ad:df:a0:99:f6:2a:1c:26:74:1e:c1:d3:c9:50:b9:4b:
         e7:42:7a:2e:0f:07:fd:5f:3b:ce:1f:12:58:5a:f7:0d:d0:0e:
         1b:38:ab:66:7a:6b:83:3d:c1:86:8e:b9:2e:b6:e2:6b:5e:e6:
         e4:03:c2:8c:5a:4d:7c:e0:03:1e:a9:d6:06:7d:f5:32:fe:1f:
         be:c9:c6:3e:62:c9:94:c7:77:4b:ee:72:26:70:4c:09:c2:0f:
         9d:10:f4:af:52:3e:e5:fc:17:9c:1d:05:6d:8e:3d:50:5c:7e:
         ae:f6:54:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 05:56:58 2026 by rpki-client