This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/45541EE4C9F711F087D2166DC4F9AE02.roa
File:                     45541EE4C9F711F087D2166DC4F9AE02.roa (raw, json)
Hash identifier:          ou4XIefPRD+gcNDDXhaZbU7PKX3s57bqkC7i0ZQskmE=
Subject key identifier:   9B:4E:1D:3E:E1:4E:BB:2F:13:61:AF:F3:FA:8C:BB:80:A1:70:CD:A4
Certificate issuer:       /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Certificate serial:       CD
Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/45541EE4C9F711F087D2166DC4F9AE02.roa
Signing time:             Thu 04 Dec 2025 14:28:04 +0000
ROA not before:           Thu 04 Dec 2025 14:28:04 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     154317
IP address blocks:        160.250.224.0/24 maxlen: 24
                          160.250.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
                          rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
        Validity
            Not Before: Dec  4 14:28:04 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=69319a74-9cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:81:91:fb:98:58:75:9a:ce:3f:76:03:26:af:
                    42:1c:3c:14:a3:db:f4:15:69:30:50:04:41:63:8c:
                    a8:f3:6d:96:d7:d5:c0:46:cf:8b:08:a8:b4:45:11:
                    64:04:f1:2a:78:9d:f8:79:e0:f9:99:46:de:a6:e0:
                    92:ca:82:8c:ce:4b:ac:c5:6f:d3:f8:c8:30:94:73:
                    32:76:d6:85:9e:aa:7e:e1:0f:9d:78:1b:96:08:05:
                    8b:57:9f:33:9a:a8:d3:60:f7:e4:84:87:08:91:5b:
                    f7:28:64:63:d3:8e:e1:f8:79:d2:d9:90:3e:cc:2e:
                    26:62:e9:8e:5f:3f:48:a2:32:7b:ba:1d:f3:e7:7e:
                    f6:b6:e9:9a:d8:e5:2b:a4:7e:49:3d:b1:fa:2b:f2:
                    7b:ac:54:15:af:6d:2c:72:3b:ed:2f:89:8b:9b:e9:
                    a4:6c:10:29:d2:8e:eb:77:a1:65:13:7e:df:3a:1b:
                    51:6f:3c:7f:66:a5:a5:87:91:49:3c:2e:43:95:39:
                    2f:b8:61:b3:6e:f6:85:32:88:cc:67:f9:62:70:35:
                    e6:6e:f6:5b:f8:aa:c9:aa:84:95:a1:e7:f3:cf:1c:
                    5d:b5:59:ce:85:71:c3:4e:8c:76:4f:fd:a6:80:5d:
                    74:9f:4e:ef:02:3c:45:5c:fd:33:3a:fa:a0:b2:05:
                    0e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4E:1D:3E:E1:4E:BB:2F:13:61:AF:F3:FA:8C:BB:80:A1:70:CD:A4
            X509v3 Authority Key Identifier:
                keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/45541EE4C9F711F087D2166DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:03:be:05:e7:32:b6:2d:27:42:fd:33:73:0f:39:6f:8f:12:
         49:5c:6e:85:d2:c2:65:e9:63:37:fa:7e:6f:ce:1d:3a:10:d8:
         b9:83:c3:44:18:f6:c4:24:bc:66:57:27:7f:db:0a:cb:c7:6b:
         20:0e:fb:32:6d:bd:fd:1e:35:46:98:fe:82:ab:fd:de:c8:36:
         79:bc:25:92:27:60:57:ae:99:a2:cd:ff:5e:af:88:a0:fa:5a:
         88:39:17:d6:1c:9f:4a:25:9b:71:5f:4f:4a:f0:38:ef:35:be:
         d0:fe:1d:0a:af:2d:67:50:c7:c2:9d:85:4b:1f:4a:13:30:c7:
         0c:d9:bf:3d:f6:7f:1a:5a:ec:6b:70:8b:bc:9a:e4:b1:b5:0f:
         60:2c:21:de:fd:86:65:88:a2:24:71:1c:56:59:54:07:db:6e:
         31:9b:d6:27:25:10:55:8b:92:0b:f3:8e:35:66:96:e5:d0:a5:
         96:4f:c0:79:10:fa:91:2f:00:2d:b6:4c:b1:8f:90:fe:a6:5b:
         bf:79:9a:35:50:d8:f8:b6:75:01:39:95:ae:62:f2:2b:ba:b9:
         ef:f8:2c:4c:86:cf:90:72:75:d3:41:b0:74:f1:5e:c4:eb:2b:
         1b:1c:5a:12:6f:e0:71:ff:20:70:4e:45:ba:e0:48:1a:52:20:
         0f:76:47:23
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY3NTMxMTAvBgNVBAUTKDJENDlCM0FFNkRBMThCNjM0NjRBMzE3N0FCMzIxMDE5
NDJFNkE1MUEwHhcNMjUxMjA0MTQyODA0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMxOWE3NC05Y2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8IGR+5hYdZrOP3YDJq9CHDwUo9v0FWkwUARBY4yo822W19XARs+LCKi0RRFk
BPEqeJ34eeD5mUbepuCSyoKMzkusxW/T+MgwlHMydtaFnqp+4Q+deBuWCAWLV58z
mqjTYPfkhIcIkVv3KGRj047h+HnS2ZA+zC4mYumOXz9IojJ7uh3z5372tuma2OUr
pH5JPbH6K/J7rFQVr20scjvtL4mLm+mkbBAp0o7rd6FlE37fOhtRbzx/ZqWlh5FJ
PC5DlTkvuGGzbvaFMojMZ/licDXmbvZb+KrJqoSVoefzzxxdtVnOhXHDTox2T/2m
gF10n07vAjxFXP0zOvqgsgUOIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJtOHT7h
TrsvE2Gv8/qMu4ChcM2kMB8GA1UdIwQYMBaAFC1Js65toYtjRkoxd6syEBlC5qUa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjc1My83ODA5REEwMkJD
MEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGkyTkdTakYzcXpJUUdVTG1w
Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xVbXpybTJoaTJOR1NqRjNxeklRR1VMbXBSby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUY3NTMvNzgwOURBMDJCQzBEMTFFRjlCNEFENjQ5QzRGOUFFMDIvNDU1NDFFRTRD
OUY3MTFGMDg3RDIxNjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGg+uAwDQYJKoZIhvcNAQELBQADggEBABkDvgXnMrYtJ0L9
M3MPOW+PEklcboXSwmXpYzf6fm/OHToQ2LmDw0QY9sQkvGZXJ3/bCsvHayAO+zJt
vf0eNUaY/oKr/d7INnm8JZInYFeumaLN/16viKD6Wog5F9Ycn0olm3FfT0rwOO81
vtD+HQqvLWdQx8KdhUsfShMwxwzZvz32fxpa7Gtwi7ya5LG1D2AsId79hmWIoiRx
HFZZVAfbbjGb1iclEFWLkgvzjjVmluXQpZZPwHkQ+pEvAC22TLGPkP6mW795mjVQ
2Pi2dQE5la5i8iu6ue/4LEyGz5ByddNBsHTxXsTrKxscWhJv4HH/IHBORbrgSBpS
IA92RyM=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:47:18 2025 by rpki-client