This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/67023924535F11EE9BC85F83C4F9AE02.roa
File:                     67023924535F11EE9BC85F83C4F9AE02.roa (raw, json)
Hash identifier:          auKtqb5gzHutedVTKNtnJRubcnvktJVt0VqmZO9kd5I=
Subject key identifier:   07:93:96:16:37:07:4D:B6:4D:53:AF:C7:30:57:5A:0D:B4:3E:58:FA
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0D4C
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/67023924535F11EE9BC85F83C4F9AE02.roa
Signing time:             Sun 02 Nov 2025 19:08:11 +0000
ROA not before:           Sun 02 Nov 2025 19:08:11 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     4202202155
IP address blocks:        202.162.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3404 (0xd4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Nov  2 19:08:11 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6907ac1b-01b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2c:c0:80:86:be:e5:54:5c:d4:0d:b1:fe:fe:
                    d9:aa:10:96:c1:5a:4a:f0:f1:2c:f3:6e:2f:55:dc:
                    47:c1:2d:a6:a1:f1:49:49:14:31:cd:b6:7a:6d:da:
                    d6:84:4d:8c:29:95:43:d1:73:25:34:c8:d9:07:41:
                    34:5f:d4:c8:1a:85:1b:3c:aa:3a:2e:e5:33:2c:02:
                    5f:03:4d:ff:4e:66:60:80:a0:f1:39:e6:d3:c1:89:
                    78:83:0d:a4:e4:e6:b1:8a:1f:d3:20:fe:8d:e9:82:
                    4f:80:78:b3:7e:f6:8c:bb:4d:e4:7a:c2:b5:96:f7:
                    43:53:7e:a4:39:06:9b:4c:c7:71:2c:34:ab:02:69:
                    a6:29:80:6a:4c:76:2a:06:32:22:ad:db:28:0f:a6:
                    18:bc:6e:53:62:14:c0:13:6c:e7:77:c2:a7:af:03:
                    63:0d:d4:88:00:33:36:4d:d4:f7:73:bb:19:42:80:
                    39:eb:7d:ae:9e:dc:82:8d:5a:4c:ba:ce:4d:5a:81:
                    56:2e:0b:3b:c1:a8:35:0c:3e:69:c4:60:bf:1d:3d:
                    85:be:5b:a9:ce:ca:fc:df:9b:3e:6d:18:7e:fb:a0:
                    02:b5:8b:df:f5:41:21:3c:f7:91:a7:ab:be:95:39:
                    7f:75:81:0c:14:29:5e:bf:dd:8e:d5:20:8c:ab:f7:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:93:96:16:37:07:4D:B6:4D:53:AF:C7:30:57:5A:0D:B4:3E:58:FA
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/67023924535F11EE9BC85F83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.162.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:de:db:e0:6e:51:5c:d0:5a:7e:aa:4d:b1:8c:19:ef:53:59:
         a5:42:35:f5:c0:f1:6b:85:f3:8d:21:00:62:02:64:23:fc:d3:
         c0:de:50:4b:69:7c:ee:d4:5c:d0:a4:ae:75:e9:24:7c:16:e2:
         1d:c7:e8:e4:6e:ba:a9:75:cc:d8:11:9f:1f:95:6d:9d:f6:59:
         50:3e:05:eb:6d:74:cf:33:d8:08:7c:f4:93:c0:ee:09:5d:3a:
         a5:b0:3d:66:12:0f:27:42:ec:80:f9:1b:3b:fb:9d:55:45:db:
         58:20:95:1f:bc:15:77:64:d5:0b:b0:98:ae:32:0c:af:e0:5e:
         d4:b6:8d:ca:27:7c:7f:90:79:86:5d:f5:6b:ab:2d:2f:3a:86:
         47:65:55:ae:77:fe:e2:9b:f4:f8:35:9f:19:3c:5a:09:46:e3:
         da:ee:79:ae:71:ba:a6:bd:38:f6:cc:a0:6a:01:46:f4:ea:24:
         f6:c6:03:e1:4d:d4:17:fc:e4:23:f6:ba:49:cf:af:ad:f9:aa:
         13:79:cb:8b:89:07:9f:a3:16:f2:9a:d8:7c:92:cd:4c:5d:3c:
         d3:ea:40:fa:b1:37:79:cb:0a:16:7f:52:f8:1c:9b:22:ac:a5:
         f5:17:9b:12:5d:80:08:cb:2d:0c:fa:82:0b:cd:4e:fd:8b:4c:
         b4:e3:10:fb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF
Q0QxRDczQjYwHhcNMjUxMTAyMTkwODExWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTA3YWMxYi0wMWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4SzAgIa+5VRc1A2x/v7ZqhCWwVpK8PEs824vVdxHwS2mofFJSRQxzbZ6bdrW
hE2MKZVD0XMlNMjZB0E0X9TIGoUbPKo6LuUzLAJfA03/TmZggKDxOebTwYl4gw2k
5Oaxih/TIP6N6YJPgHizfvaMu03kesK1lvdDU36kOQabTMdxLDSrAmmmKYBqTHYq
BjIirdsoD6YYvG5TYhTAE2znd8KnrwNjDdSIADM2TdT3c7sZQoA5632untyCjVpM
us5NWoFWLgs7wag1DD5pxGC/HT2Fvlupzsr835s+bRh++6ACtYvf9UEhPPeRp6u+
lTl/dYEMFClev92O1SCMq/d+8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFAeTlhY3
B022TVOvxzBXWg20Plj6MB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1
RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvNjcwMjM5MjQ1
MzVGMTFFRTlCQzg1RjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKohcwDQYJKoZIhvcNAQELBQADggEBACHe2+BuUVzQWn6q
TbGMGe9TWaVCNfXA8WuF840hAGICZCP808DeUEtpfO7UXNCkrnXpJHwW4h3H6ORu
uql1zNgRnx+VbZ32WVA+BettdM8z2Ah89JPA7gldOqWwPWYSDydC7ID5Gzv7nVVF
21gglR+8FXdk1QuwmK4yDK/gXtS2jconfH+QeYZd9WurLS86hkdlVa53/uKb9Pg1
nxk8WglG49ruea5xuqa9OPbMoGoBRvTqJPbGA+FN1Bf85CP2uknPr635qhN5y4uJ
B5+jFvKa2HySzUxdPNPqQPqxN3nLChZ/UvgcmyKspfUXmxJdgAjLLQz6ggvNTv2L
TLTjEPs=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:15 2025 by rpki-client