This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8E018B30D05611F0A517D12AC4F9AE02.roa
File:                     8E018B30D05611F0A517D12AC4F9AE02.roa (raw, json)
Hash identifier:          sV/z+J9M1vomeBwWCL+sac3AZUuwIvVbej3W8i6aPqQ=
Subject key identifier:   BA:55:9A:C9:CB:F9:C1:DD:2B:A8:CC:82:87:18:72:63:A8:F2:48:64
Certificate issuer:       /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial:       56
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8E018B30D05611F0A517D12AC4F9AE02.roa
Signing time:             Thu 04 Dec 2025 03:37:29 +0000
ROA not before:           Thu 04 Dec 2025 03:37:29 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     3491
IP address blocks:        79.109.232.0/22 maxlen: 22
                          79.109.232.0/24 maxlen: 24
                          79.109.233.0/24 maxlen: 24
                          79.109.234.0/24 maxlen: 24
                          79.109.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:55:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
        Validity
            Not Before: Dec  4 03:37:29 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=693101f9-56d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a3:d4:db:39:6e:4d:49:25:b6:17:d8:8b:38:
                    a2:45:5b:60:d9:2a:4c:f2:d3:c6:e5:65:5f:a7:54:
                    ae:e5:fe:c7:2d:f2:5f:89:b7:a8:b8:85:c7:01:e9:
                    13:30:f1:63:ce:15:ba:7a:da:b0:43:7f:85:37:8b:
                    ce:9c:b9:9b:ee:92:da:6a:04:dd:fa:bc:6e:3a:be:
                    7b:41:d1:68:30:1e:f7:61:e5:0d:9b:6a:87:9c:fe:
                    7c:e1:dd:44:48:52:48:89:43:6a:dd:e9:8a:66:3a:
                    46:55:c7:99:61:cc:81:40:31:60:8a:54:c9:18:c4:
                    30:89:f9:5f:36:eb:a1:61:65:b6:e6:5a:1e:f8:4a:
                    1c:a0:58:72:2b:f8:d3:f3:2c:98:a8:ff:6d:c6:02:
                    22:59:aa:78:13:a9:62:3c:11:d4:91:03:59:d9:4c:
                    27:0f:49:f2:ef:d1:e3:31:66:44:c5:70:08:66:87:
                    cc:bc:e9:d1:4f:4d:30:8a:e4:b0:28:23:0f:dc:39:
                    f0:de:c1:f6:35:f3:e4:39:27:af:fe:9f:e8:d5:cf:
                    f9:3b:c3:06:9c:18:4a:8f:00:16:4e:03:49:74:c2:
                    54:42:92:94:c2:87:a2:cd:f3:57:3c:a3:a8:68:17:
                    0b:a9:ba:c2:0c:b8:24:fd:58:e4:35:ed:8e:a4:ce:
                    54:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:55:9A:C9:CB:F9:C1:DD:2B:A8:CC:82:87:18:72:63:A8:F2:48:64
            X509v3 Authority Key Identifier:
                keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8E018B30D05611F0A517D12AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.109.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:b8:ae:f4:ad:86:07:73:ce:a3:77:e1:3d:45:4b:53:c6:a4:
         fd:6c:d3:f7:d0:b4:44:7b:b6:a8:6f:d5:26:44:92:fe:92:14:
         90:71:31:0c:8a:17:0d:ab:62:af:a0:c7:fe:a2:af:aa:47:14:
         dd:6e:ff:25:c0:35:23:c9:cc:c5:98:5e:f7:49:95:09:15:2b:
         93:1b:25:4a:02:ff:ac:7a:5e:f7:d8:d2:4e:dc:db:54:58:54:
         98:4c:f0:de:30:ca:0d:c9:55:8a:45:53:ce:b7:de:25:a0:50:
         94:7e:80:ac:f6:c8:8d:a5:d2:3a:16:9d:5e:28:ac:eb:ae:7e:
         fa:2d:21:5a:fe:ae:18:80:f1:de:07:4f:96:39:55:f7:dd:9a:
         02:0d:78:08:6e:3d:3a:43:a0:41:bc:81:40:bf:14:7f:5e:f7:
         66:fe:d3:95:cf:03:e9:ed:38:9f:72:bd:13:be:ec:7b:15:1c:
         9d:c0:e9:64:b6:7b:cb:e0:5e:b4:11:1d:7e:64:ed:e9:94:76:
         f7:46:c7:a7:8c:10:d7:9c:4e:ed:df:b8:3a:53:04:98:51:7d:
         a5:e1:d0:62:c8:b4:ba:c7:cd:87:14:a2:1b:c9:ca:a8:a1:ce:
         bb:10:a2:7b:42:07:8f:96:6c:b4:66:ec:31:52:6d:96:dc:07:
         1e:19:de:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:13:25 2025 by rpki-client