This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/5A44099895C111EE951C9E4CC4F9AE02.roa
File:                     5A44099895C111EE951C9E4CC4F9AE02.roa (raw, json)
Hash identifier:          tYqoSMRO2FbmTyJPaTn7rKwwsKt8LyDB3rT6mhobJ3U=
Subject key identifier:   71:9D:28:EB:24:41:AB:DF:39:57:E1:0F:7F:FB:60:6B:8F:56:64:72
Certificate issuer:       /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Certificate serial:       019F
Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/5A44099895C111EE951C9E4CC4F9AE02.roa
Signing time:             Sat 03 Jan 2026 03:25:21 +0000
ROA not before:           Sat 03 Jan 2026 03:25:21 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141026
IP address blocks:        180.94.28.0/23 maxlen: 23
                          180.94.28.0/24 maxlen: 24
                          180.94.29.0/24 maxlen: 24
                          2001:df3:2ec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
                          rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 02:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
        Validity
            Not Before: Jan  3 03:25:21 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69588c21-e3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7f:4f:d1:20:2e:65:ed:2c:a6:58:a3:05:f4:
                    7f:28:d5:ed:79:f6:28:15:ab:2b:b6:b1:5c:e1:78:
                    9f:fe:5a:71:da:b9:c8:4c:df:12:f4:56:2c:53:ca:
                    69:02:e9:c4:84:92:04:64:e2:82:f0:bd:a2:c0:c7:
                    33:80:80:27:89:42:76:50:17:9f:f6:5e:4b:44:05:
                    23:9f:b5:e4:0c:af:18:e5:9a:8d:a5:dd:15:8a:ea:
                    52:0e:41:fd:ba:13:8a:f1:aa:15:f3:ec:24:87:aa:
                    74:92:ff:24:d9:78:44:2f:57:96:1d:29:93:5e:b9:
                    de:82:eb:76:bf:5f:de:a3:57:20:cd:2d:11:f2:29:
                    2e:55:73:98:dc:37:ee:75:0d:5e:02:cf:70:ae:34:
                    05:89:ab:ec:99:9b:2e:f4:fe:28:63:51:04:b6:72:
                    a5:6c:77:82:5a:43:6e:bb:16:63:a7:59:d0:23:4c:
                    05:a2:7b:80:50:a3:02:09:39:38:92:a2:6b:62:e9:
                    85:74:64:15:e1:4f:60:9f:a2:cd:5e:8f:f7:40:d0:
                    9d:cc:07:51:b9:63:a4:9b:f8:15:c4:a3:7c:a9:3d:
                    d4:c1:78:58:9e:be:68:47:09:d1:76:35:83:0f:b4:
                    dc:b6:ef:c0:d1:55:18:81:9b:1f:62:e3:f7:d7:3d:
                    6e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9D:28:EB:24:41:AB:DF:39:57:E1:0F:7F:FB:60:6B:8F:56:64:72
            X509v3 Authority Key Identifier:
                keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/5A44099895C111EE951C9E4CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.28.0/23
                IPv6:
                  2001:df3:2ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:6b:01:4d:e4:e1:09:79:4f:9c:59:15:6a:57:33:50:e1:bc:
         ac:9b:e5:0e:18:b2:ea:5e:66:a4:e4:a3:30:0d:03:ad:36:b8:
         b4:a3:ba:31:6f:67:4e:b7:da:8a:49:ee:58:58:b4:53:4b:b9:
         95:fd:0b:4e:65:2d:02:fd:f9:fa:7e:14:8f:f6:b5:05:bf:f0:
         3a:d3:e7:49:9c:64:38:64:62:9d:f7:fd:7c:bc:33:0f:7e:9a:
         a5:eb:6c:1c:2d:2b:c1:65:d7:db:bc:28:5c:80:1b:42:e6:4d:
         42:da:7b:c8:8b:d9:79:84:9c:08:4b:7f:54:43:1a:c4:2f:a2:
         97:1b:a5:5a:ba:45:52:cb:31:b1:f6:86:ed:77:f3:b2:e8:f5:
         55:fb:21:1e:cc:43:fd:48:50:21:47:8d:6b:d1:13:d5:c5:bc:
         91:87:47:b9:b0:7d:4d:0e:89:66:83:4a:22:d5:c7:cb:f9:aa:
         bd:45:86:aa:e1:80:55:11:e9:41:bb:d2:59:3e:be:4b:f0:11:
         1c:a5:08:de:4e:1e:b5:9e:73:0e:0f:6d:1c:b4:3e:97:84:74:
         e4:da:33:4c:29:ad:10:3d:f0:85:fc:6d:e1:a7:64:86:4c:f8:
         83:a2:b6:e5:68:67:c1:8e:8d:ee:cf:71:d3:67:67:e0:85:d3:
         67:7c:51:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:19:45 2026 by rpki-client