This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/BC8ECC20F38811EF8AB19939C4F9AE02.roa
File:                     BC8ECC20F38811EF8AB19939C4F9AE02.roa (raw, json)
Hash identifier:          ve/Xv/I68Bh+JVv759tAbAd6czekfW9VpyiKOtrg9cc=
Subject key identifier:   87:80:9C:16:CD:E3:EF:3E:87:1E:41:B5:AC:30:26:B4:D6:08:9B:8C
Certificate issuer:       /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Certificate serial:       0103
Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/BC8ECC20F38811EF8AB19939C4F9AE02.roa
Signing time:             Thu 01 Jan 2026 05:23:59 +0000
ROA not before:           Thu 01 Jan 2026 05:23:59 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     152176
IP address blocks:        160.187.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
                          rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 05:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
        Validity
            Not Before: Jan  1 05:23:59 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=695604ef-d8a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:22:9d:1b:ea:65:ab:7f:2e:1a:22:87:52:
                    df:46:68:00:8b:cf:f3:01:0b:00:53:e9:9d:ea:cb:
                    28:33:0c:96:ae:f3:82:4d:ec:ce:17:63:53:09:ab:
                    ba:22:af:c3:33:71:12:fb:5b:9b:f5:a5:af:7b:4d:
                    97:26:ac:97:0f:80:e9:44:7b:51:60:87:19:0d:6d:
                    ae:3b:58:5c:71:d3:2a:39:7a:8b:7e:c6:6e:7b:89:
                    94:c7:b4:09:ee:51:da:81:9c:6b:94:01:2d:63:90:
                    e6:44:43:4f:4f:ce:ec:14:1a:30:c9:b7:be:be:8e:
                    ba:f2:8f:37:9e:f3:e7:67:1f:16:1a:f7:9a:40:42:
                    f6:09:19:ab:ef:d9:bf:b6:0b:c3:8b:cc:bb:7d:8d:
                    7a:25:3d:a7:46:44:de:bd:88:17:b4:72:e6:95:38:
                    1d:9e:de:b4:21:4d:0d:3d:81:cf:26:da:a3:99:4e:
                    de:6d:97:c7:b4:6c:2b:6f:ed:e5:c1:a6:d7:2b:02:
                    4d:92:11:ed:0e:2f:49:29:40:7e:33:57:72:f2:dc:
                    b0:d4:98:10:59:e2:bd:68:03:75:e1:1e:fc:fd:31:
                    e1:8a:a0:ca:7a:36:1e:5d:55:c0:8b:3d:9b:63:80:
                    c0:8b:e6:43:30:b0:a3:a1:2f:5b:46:ac:38:63:68:
                    ee:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:80:9C:16:CD:E3:EF:3E:87:1E:41:B5:AC:30:26:B4:D6:08:9B:8C
            X509v3 Authority Key Identifier:
                keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/BC8ECC20F38811EF8AB19939C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:3c:17:91:cd:0a:f5:01:d3:db:e5:05:00:8a:54:8d:76:f8:
         7a:0b:a2:e0:47:c5:9d:52:4f:96:36:26:e4:73:56:af:0b:22:
         89:0b:4e:ad:d9:25:b5:05:76:d4:e7:e3:74:a3:b5:71:ed:c8:
         15:00:da:b1:4c:3f:dc:03:af:a1:9d:1b:15:20:78:79:dc:c7:
         06:bd:1c:74:5f:4d:83:e3:a5:78:94:33:3f:ff:58:fa:d7:0a:
         9d:ae:d2:32:0b:7c:dc:80:b9:23:4e:47:d4:70:76:73:fa:59:
         8d:5a:28:4e:aa:fa:4e:b0:36:06:f5:7f:af:95:2c:11:7b:85:
         d1:66:b3:14:ec:ca:03:f0:50:5f:21:ce:02:1d:95:d0:79:8a:
         13:e3:e7:2c:80:83:a0:c2:8e:8a:fe:e7:6d:76:c3:e6:d6:41:
         6f:a8:b3:d0:89:df:1b:a9:ae:20:0f:ce:8d:36:42:ea:d6:46:
         2d:78:b8:ac:d7:48:06:0c:f4:81:f9:7a:05:c2:a4:cf:37:5c:
         76:20:36:93:6b:d5:41:76:49:e6:18:46:0e:f0:75:31:2b:9e:
         7e:7d:57:ab:6f:79:cc:cc:07:dd:87:bf:e5:e8:ba:af:26:f6:
         bf:bf:a6:7c:95:a2:af:d3:df:b7:25:d8:64:59:03:2d:74:61:
         81:2e:ae:3c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MzEyMEExMTAvBgNVBAUTKDZDMkM3QzE0Mjg5RTZCQjVCNzI3NUIxQUE2QkZERkEw
MjI3QjkwODYwHhcNMjYwMTAxMDUyMzU5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU2MDRlZi1kOGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw5kinRvqZat/Lhoih1LfRmgAi8/zAQsAU+md6ssoMwyWrvOCTezOF2NTCau6
Iq/DM3ES+1ub9aWve02XJqyXD4DpRHtRYIcZDW2uO1hccdMqOXqLfsZue4mUx7QJ
7lHagZxrlAEtY5DmRENPT87sFBowybe+vo668o83nvPnZx8WGveaQEL2CRmr79m/
tgvDi8y7fY16JT2nRkTevYgXtHLmlTgdnt60IU0NPYHPJtqjmU7ebZfHtGwrb+3l
wabXKwJNkhHtDi9JKUB+M1dy8tyw1JgQWeK9aAN14R78/THhiqDKejYeXVXAiz2b
Y4DAi+ZDMLCjoS9bRqw4Y2jueQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIeAnBbN
4+8+hx5BtawwJrTWCJuMMB8GA1UdIwQYMBaAFGwsfBQonmu1tydbGqa/36Aie5CG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS9EQUY4MUM0NDg2
RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3VzNKMXNhcHJfZm9DSjdr
SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzEyMEEvREFGODFDNDQ4NkY5MTFFRkIwOTY1MTBDQzRGOUFFMDIvQkM4RUNDMjBG
Mzg4MTFFRjhBQjE5OTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACgu+4wDQYJKoZIhvcNAQELBQADggEBAHI8F5HNCvUB09vl
BQCKVI12+HoLouBHxZ1ST5Y2JuRzVq8LIokLTq3ZJbUFdtTn43SjtXHtyBUA2rFM
P9wDr6GdGxUgeHncxwa9HHRfTYPjpXiUMz//WPrXCp2u0jILfNyAuSNOR9RwdnP6
WY1aKE6q+k6wNgb1f6+VLBF7hdFmsxTsygPwUF8hzgIdldB5ihPj5yyAg6DCjor+
5212w+bWQW+os9CJ3xupriAPzo02QurWRi14uKzXSAYM9IH5egXCpM83XHYgNpNr
1UF2SeYYRg7wdTErnn59V6tveczMB92Hv+Xouq8m9r+/pnyVoq/T37cl2GRZAy10
YYEurjw=
-----END CERTIFICATE-----
Generated at Thu Jan 1 14:25:15 2026 by rpki-client